Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/kb5NHBZywQSdBIAwqMPf0XqCqCA.roa
File: kb5NHBZywQSdBIAwqMPf0XqCqCA.roa (raw, json)
Hash identifier: OA7o6iGYJ3H56dWu/LailLRClratanMCRSsv8AQUpck=
Subject key identifier: 91:BE:4D:1C:16:72:C1:04:9D:04:80:30:A8:C3:DF:D1:7A:82:A8:20
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 012B
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/kb5NHBZywQSdBIAwqMPf0XqCqCA.roa
Signing time: Sun 01 Oct 2023 01:30:44 +0000
ROA not before: Sun 01 Oct 2023 01:30:44 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 211.7.189.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 299 (0x12b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:30:44 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=91BE4D1C1672C1049D048030A8C3DFD17A82A820
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:10:9b:e2:f3:ed:8c:bc:5d:db:81:33:6c:6c:
2e:c4:cd:d1:48:e4:bd:96:ee:cb:25:05:48:9b:ee:
ff:2b:5d:bd:26:58:fb:1b:4a:dd:c1:13:79:22:94:
2f:d9:bf:27:7b:aa:8c:81:79:bd:0b:0e:a0:9d:6c:
ed:80:ca:0d:a5:5a:c7:ea:16:33:ca:2e:fc:5c:13:
c6:80:e7:49:e8:40:d1:a7:5b:06:be:0f:e0:9b:fb:
78:e9:aa:94:65:1d:f5:06:93:c2:b4:de:a4:a7:5a:
ee:10:57:14:2c:f3:a3:d5:0c:a0:55:2a:e6:94:f1:
ab:2d:91:3b:0a:c2:ac:61:2d:87:ba:84:ac:95:ed:
7d:1d:89:18:e0:55:5d:d0:da:73:19:7d:83:e1:38:
96:da:30:89:18:28:f8:96:87:57:21:b2:05:8c:8e:
43:c4:8b:e5:a5:aa:c4:63:98:71:88:51:71:40:df:
d8:de:97:4a:94:0a:ce:50:b7:05:3f:1e:93:55:3d:
d7:10:a0:8c:eb:98:74:d2:6f:7c:44:d3:17:f9:5c:
9a:7c:60:c7:f8:cd:d9:f8:24:77:90:74:10:26:41:
06:de:b8:3f:b5:bf:0b:e8:d7:ce:7a:db:e8:82:45:
17:88:16:91:2a:7f:18:69:db:72:be:7f:d5:a1:5f:
aa:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BE:4D:1C:16:72:C1:04:9D:04:80:30:A8:C3:DF:D1:7A:82:A8:20
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/kb5NHBZywQSdBIAwqMPf0XqCqCA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.7.189.0/24
Signature Algorithm: sha256WithRSAEncryption
08:bb:74:18:7f:98:4e:45:89:d4:3a:32:8c:ac:58:16:48:38:
25:6e:86:0a:3a:27:18:14:54:a6:dc:ae:a5:25:f7:cf:be:4d:
22:53:03:66:1a:e8:7b:e9:8e:56:89:4e:bb:6f:e8:b7:82:30:
12:54:01:4a:b2:94:dc:81:b0:93:4b:d4:d4:80:e2:ba:36:2a:
1d:c8:5c:df:12:15:38:3e:0c:bc:03:82:f8:a0:31:28:f9:82:
87:64:fc:b4:c6:cc:c9:19:5d:8b:f3:51:00:3d:9a:be:64:c8:
97:b2:96:0e:f6:b6:59:77:71:bf:85:e8:43:cb:ab:b5:54:34:
b8:9d:e7:29:83:c9:67:35:4e:ee:2d:ce:21:49:d4:7e:63:13:
5f:74:5f:00:ad:00:05:5f:b1:c3:64:83:e2:dd:51:9f:e6:76:
d9:24:9d:9c:c1:25:69:11:8f:45:21:b5:2f:2f:18:1f:14:8d:
55:17:11:b9:d1:01:6a:ca:6f:09:31:c5:5f:2c:22:22:05:7d:
17:19:d8:fe:4d:0d:6c:d6:11:9b:62:3e:37:b9:93:32:b4:b8:
35:8e:38:2b:f3:2c:0e:b8:09:28:f6:28:6d:bd:bf:08:1e:52:
1f:7c:3a:4d:63:1b:28:0d:83:cc:83:ef:bc:89:5d:d1:a7:de:
72:c8:c0:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:43 2024 by rpki-client on console-fra.rpki-client.org