Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/y4WAvsKKfyBfSqXpcQGruExJGkQ.roa
File: y4WAvsKKfyBfSqXpcQGruExJGkQ.roa (raw, json)
Hash identifier: elTEBKxhQvl9FsqPqaXWKmacToJxpCHvnaaqvgkHKhA=
Subject key identifier: CB:85:80:BE:C2:8A:7F:20:5F:4A:A5:E9:71:01:AB:B8:4C:49:1A:44
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 012D
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/y4WAvsKKfyBfSqXpcQGruExJGkQ.roa
Signing time: Sun 01 Oct 2023 01:30:45 +0000
ROA not before: Sun 01 Oct 2023 01:30:45 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 210.253.129.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 301 (0x12d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:30:45 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=CB8580BEC28A7F205F4AA5E97101ABB84C491A44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:1d:26:45:a9:7b:8d:79:34:cc:75:4c:ac:
2e:0b:4c:2b:87:d2:36:c7:95:27:92:07:3f:98:a5:
f5:da:1d:0a:ea:ea:4e:36:b7:b1:7c:33:f8:88:27:
cd:0b:f5:58:83:fb:2f:d1:a4:51:2a:ed:dd:11:95:
72:57:99:f6:7b:a4:25:80:6c:e5:b1:07:f5:39:8a:
72:93:b0:39:4d:53:5d:f5:cd:44:18:bd:3a:84:99:
75:20:e9:9d:87:3d:c9:7f:6d:9b:db:84:cb:15:a3:
2d:ef:45:40:7b:a4:25:d3:9e:84:90:ee:39:63:3f:
35:b9:a1:1e:35:7d:b8:29:e9:b9:b3:5a:70:95:84:
b7:71:ed:db:a0:9b:b3:c8:c8:a9:1a:ef:3b:5e:b0:
05:74:90:b0:16:7f:51:4a:af:20:7f:27:c7:61:1d:
21:bb:bb:87:6f:3f:df:3b:42:a4:cd:37:94:22:be:
28:8f:11:12:ad:c1:5d:cd:ff:fe:0a:f1:d7:d2:04:
6f:29:d9:80:fd:e1:06:16:44:68:b8:a5:36:fa:d5:
45:4a:17:bc:50:03:98:61:b6:82:74:3a:5b:4d:fc:
ef:b6:50:2c:7f:ad:92:9c:d5:40:7c:3b:e9:a3:2e:
69:22:21:35:05:9f:ca:15:6f:4f:46:a5:eb:72:11:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:85:80:BE:C2:8A:7F:20:5F:4A:A5:E9:71:01:AB:B8:4C:49:1A:44
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/y4WAvsKKfyBfSqXpcQGruExJGkQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.253.129.0/24
Signature Algorithm: sha256WithRSAEncryption
29:ce:2f:89:6d:eb:b5:2d:1b:f7:90:85:79:cf:78:fa:3a:94:
27:12:c6:c6:a1:d7:ed:57:26:87:8c:6f:70:2d:fc:46:8f:42:
e4:c1:83:f3:45:d8:59:68:38:54:e1:e6:1f:67:fd:91:d8:06:
95:f2:15:c4:af:7b:a3:cd:e0:ae:52:f5:52:b6:26:be:f6:46:
5c:68:09:71:f2:b5:e2:59:04:35:f2:a8:23:81:ac:6f:93:a2:
6e:0b:fa:fc:ee:b8:a7:26:18:34:55:32:7b:3c:4a:37:bc:53:
8f:2a:79:65:e7:c1:94:14:79:d4:72:d6:ea:38:b2:1b:1f:52:
f6:b1:fb:5d:d3:55:1b:e6:56:24:cc:1b:30:e7:a9:b7:83:a3:
09:58:2e:bb:df:11:52:69:42:c4:97:13:a3:db:c7:2d:cb:ab:
c8:b5:57:21:f3:ac:eb:24:d3:45:3d:aa:48:d9:05:5f:c5:2c:
df:68:49:62:a0:1d:f6:d1:d8:71:9b:db:96:af:91:80:f3:91:
e1:b2:5a:83:d0:d8:0f:72:3e:30:e8:24:3f:d8:74:c1:eb:aa:
3c:8c:5e:3b:12:0f:35:a7:00:68:5a:78:41:9f:cf:99:cc:e2:
b9:be:a0:30:b2:78:9e:37:b5:4a:19:76:db:bc:4d:b7:49:fb:
38:50:0d:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:37 2024 by rpki-client on console-ams.rpki-client.org