Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ZoxnP52Kf44zu7IRi9WtRWDzfnY.roa
File: ZoxnP52Kf44zu7IRi9WtRWDzfnY.roa (raw, json)
Hash identifier: sdzS8Tk6z+vcBuZWDe8E0dxMVJPOnXKjOhwdHEP3RoA=
Subject key identifier: 66:8C:67:3F:9D:8A:7F:8E:33:BB:B2:11:8B:D5:AD:45:60:F3:7E:76
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 0154
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ZoxnP52Kf44zu7IRi9WtRWDzfnY.roa
Signing time: Sun 01 Oct 2023 01:33:28 +0000
ROA not before: Sun 01 Oct 2023 01:33:28 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 210.255.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:33:28 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=668C673F9D8A7F8E33BBB2118BD5AD4560F37E76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d3:a9:7a:28:f2:52:d3:99:d6:10:1b:49:18:
92:ae:58:e0:3e:f9:45:ea:fe:bb:a0:34:47:87:10:
32:5e:f4:63:aa:5f:99:ef:54:08:4c:46:2b:8f:34:
37:4e:b0:db:08:3c:c7:85:49:51:c4:95:a1:49:d4:
37:94:2a:db:39:c2:27:00:ed:84:37:4c:4b:73:d2:
c1:a5:88:b9:d9:e6:9f:57:ab:14:f6:3c:c3:64:98:
b6:61:c8:25:7a:ce:ed:66:25:81:3b:ca:87:e8:2d:
4e:92:40:15:1e:e1:78:80:a4:e3:f8:37:e7:23:94:
a0:ca:b1:6b:39:92:73:0d:3d:c6:5c:9a:9e:92:54:
fd:76:cd:0b:a6:8c:d9:12:08:90:91:1f:18:61:81:
d5:2c:35:12:1f:29:f2:0c:2c:1e:5b:f5:6a:7a:ea:
95:67:75:d5:90:0e:34:11:ea:5d:3f:91:90:13:59:
fc:cc:cc:a6:32:1e:a3:a4:0c:32:5d:7c:f8:c7:bc:
32:2e:62:b5:05:21:7a:2b:b1:61:ea:7c:d7:50:c6:
17:12:90:00:b4:fb:ed:a3:e5:b6:1d:dc:8e:e5:9c:
e1:f0:af:9e:e1:58:12:76:67:dc:98:74:2e:71:67:
39:ff:40:13:7c:3b:89:83:be:52:52:bc:5d:d5:2a:
7f:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8C:67:3F:9D:8A:7F:8E:33:BB:B2:11:8B:D5:AD:45:60:F3:7E:76
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ZoxnP52Kf44zu7IRi9WtRWDzfnY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.255.192.0/19
Signature Algorithm: sha256WithRSAEncryption
2c:4e:53:3f:4e:b5:dc:13:a4:3d:7f:1f:dd:9f:5d:ab:5d:6d:
cc:08:86:43:35:b6:69:cf:39:93:08:c2:02:8f:4a:18:74:40:
db:c8:55:02:6b:61:38:cb:a9:d5:82:20:47:71:ac:02:03:7a:
9d:d9:d3:29:34:ab:cf:c0:ea:a8:91:87:94:69:20:25:14:93:
b9:01:76:56:51:bd:fe:4f:f6:08:cb:db:0c:79:e1:c4:ed:96:
fb:ce:1d:fe:de:22:4d:a7:db:8a:e0:aa:58:97:42:8d:91:48:
4f:4c:7c:b3:0e:e8:d2:c1:f9:19:f4:fc:b7:9e:be:08:11:7c:
0e:d4:2e:d5:9f:f4:23:2e:41:17:9e:38:80:01:20:47:b8:2a:
1b:c7:91:50:d2:76:ea:d9:88:71:2b:85:b2:fb:fa:a8:38:45:
28:00:0c:9d:0c:80:e1:40:68:5b:a9:83:ee:71:9f:3f:68:82:
07:a9:0f:77:06:47:0a:57:f8:ca:d8:87:0d:12:e4:02:86:c1:
ff:a2:d1:92:74:ce:61:f9:d9:26:60:67:ec:76:00:79:7b:ff:
62:04:a4:cd:6a:e7:82:d4:15:94:31:c0:2b:dd:84:bb:47:ae:
60:0e:d7:c4:9d:67:a1:3d:71:56:3b:f6:74:50:0f:90:8b:c8:
59:71:19:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:33 2024 by rpki-client on console-ams.rpki-client.org