Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/2TsmOgTbMMKenyRAYnwAkUH4Byw.roa
File: 2TsmOgTbMMKenyRAYnwAkUH4Byw.roa (raw, json)
Hash identifier: TxQ4abnUY4p5ryHjd3G/p9T/e3hKFoR+HYTXMPeahx0=
Subject key identifier: D9:3B:26:3A:04:DB:30:C2:9E:9F:24:40:62:7C:00:91:41:F8:07:2C
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: AF
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/2TsmOgTbMMKenyRAYnwAkUH4Byw.roa
Signing time: Wed 04 Dec 2024 19:38:52 +0000
ROA not before: Wed 04 Dec 2024 19:38:52 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 3949
IP address blocks: 61.213.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 175 (0xaf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 4 19:38:52 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=D93B263A04DB30C29E9F2440627C009141F8072C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d9:58:b7:ba:9c:b2:24:06:b3:d4:13:1a:d8:
d3:4d:b1:0a:99:18:c1:c2:0e:ab:b4:18:c9:45:be:
b7:a4:93:d3:f4:d1:48:cf:94:20:6d:15:02:98:7c:
74:2c:09:47:06:21:d2:40:0a:bc:b0:db:86:10:b0:
1d:4c:9d:25:cd:c1:f4:39:5a:53:d2:59:96:0a:26:
4a:37:d0:13:2a:fb:c7:30:0a:50:3f:e1:98:76:fb:
00:15:ff:09:30:72:b4:a4:7c:f4:70:30:c4:b8:5c:
5e:20:76:a5:62:e1:7b:44:31:37:47:f5:c8:e6:b5:
58:44:6c:9a:86:49:ba:6f:c8:e3:ba:2e:e0:d6:2d:
58:6a:8b:5f:a7:ae:3a:b7:c7:de:21:8d:7a:b4:60:
b5:a8:d2:07:bc:44:36:8b:ed:70:b5:56:08:aa:ef:
3a:12:5d:7a:3c:dd:2c:54:cd:32:7a:1c:45:ec:29:
8b:ae:e6:07:f3:93:c6:3f:a2:7f:9d:ed:aa:9a:8d:
70:fc:70:1e:1f:e4:b0:7d:89:bc:f5:d9:23:e0:de:
dd:73:fb:83:f1:72:9e:b6:9f:44:a2:75:a7:48:06:
5a:8e:a6:e3:77:f5:4f:dd:67:26:97:73:54:2d:da:
a5:75:d4:a3:fd:be:80:b9:2f:d0:07:71:5f:cf:dc:
d4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:3B:26:3A:04:DB:30:C2:9E:9F:24:40:62:7C:00:91:41:F8:07:2C
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/2TsmOgTbMMKenyRAYnwAkUH4Byw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.174.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ec:e6:9a:ce:cf:82:0c:ef:2e:3c:87:dd:4c:94:be:e0:05:
a9:a2:7b:d0:4b:2d:69:87:77:12:81:4e:c7:73:f8:9e:57:b2:
a0:02:ed:99:1a:71:7b:cb:2f:83:0a:2c:03:e9:14:d2:bf:eb:
7a:89:a4:ba:1e:27:f8:8e:15:4e:f8:70:de:61:21:68:52:f1:
83:e7:2e:cc:18:2d:7b:87:08:4d:9e:fc:70:c8:17:13:06:10:
d5:c7:88:53:7b:1f:3b:86:cb:ca:5c:a6:94:5b:c6:33:11:a7:
df:6f:e2:db:7d:a5:39:3a:ae:35:75:4c:09:0e:ea:54:bd:14:
10:e9:5f:c4:fd:e5:05:bb:0e:ce:2f:51:24:8d:ad:a8:4e:1d:
4f:86:f5:8a:dd:13:15:c5:ea:9a:f1:c9:58:73:65:ad:59:fe:
9f:77:ad:be:5b:fc:8c:23:1d:f4:0e:b6:22:58:bd:4f:eb:11:
f4:a5:45:a0:f2:c4:f8:22:6a:87:9a:ec:3b:6a:6b:49:f5:1e:
28:6c:cc:ca:86:97:f8:b8:cf:49:9f:e8:9d:8b:9d:a5:c0:4e:
9e:9c:91:ac:24:53:a5:7e:1c:be:fd:ab:b0:6d:32:7a:98:b0:
9b:c3:f9:3d:8d:2b:8a:32:43:f3:82:23:89:14:83:e5:a6:f5:
c3:15:a1:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:45 2025 by rpki-client