Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/LhTxBe5KZKLUSosQK27GZcmSopE.roa
File: LhTxBe5KZKLUSosQK27GZcmSopE.roa (raw, json)
Hash identifier: yUSkWK8L+UCFIN5gYvwohvb2bjiU8OsSLMT20hSFY9M=
Subject key identifier: 2E:14:F1:05:EE:4A:64:A2:D4:4A:8B:10:2B:6E:C6:65:C9:92:A2:91
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: A2
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/LhTxBe5KZKLUSosQK27GZcmSopE.roa
Signing time: Sat 30 Nov 2024 01:31:21 +0000
ROA not before: Sat 30 Nov 2024 01:31:21 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 9351
IP address blocks: 218.216.160.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 162 (0xa2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Nov 30 01:31:21 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=2E14F105EE4A64A2D44A8B102B6EC665C992A291
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6b:b8:56:89:a3:ed:49:7c:f9:01:41:e4:3c:
14:00:dc:72:79:82:7c:80:aa:86:cc:53:16:5f:79:
c1:04:36:4a:67:bc:38:33:b8:c2:14:b6:c9:fa:40:
37:b7:a5:01:e7:a0:ae:97:31:9d:d3:2f:22:cd:47:
7d:a3:15:a3:55:ad:1d:0d:6d:b7:f4:e9:89:41:b2:
24:7c:26:dc:bc:20:31:ea:6c:47:33:06:c6:a9:15:
b5:35:6e:eb:55:02:2e:4e:dd:7c:f0:e5:91:48:ea:
ec:74:fd:e9:84:f7:42:48:85:12:09:dc:1c:5e:4d:
28:14:5d:19:c6:5b:1f:ed:2f:c1:bb:cf:f5:83:4d:
4f:8d:5d:dd:fc:02:9d:3a:3e:7c:b7:52:11:31:f1:
dd:23:29:3e:35:f6:ea:6c:b9:ee:37:84:54:d7:8f:
08:56:eb:3a:04:11:34:99:e9:51:63:cd:28:6a:bc:
ff:65:d1:28:64:49:b2:0d:3b:70:11:e0:23:94:af:
aa:09:b6:9c:81:e2:6e:ba:68:ba:36:71:25:6f:14:
be:2a:cd:63:b5:af:6e:32:b3:e2:15:75:5d:23:54:
dc:97:04:17:26:fb:dc:5c:1d:b2:f6:7e:30:ec:af:
6e:c7:4d:4b:e6:e3:7d:21:df:a1:d9:0d:e7:d5:b4:
25:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:14:F1:05:EE:4A:64:A2:D4:4A:8B:10:2B:6E:C6:65:C9:92:A2:91
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/LhTxBe5KZKLUSosQK27GZcmSopE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.216.160.0/20
Signature Algorithm: sha256WithRSAEncryption
b7:93:04:c1:20:6e:b3:5d:51:9d:6e:e3:4e:ab:78:2e:c8:3d:
dd:30:54:15:c9:e8:e7:97:41:9d:bb:d1:12:cd:ff:7e:19:40:
1c:93:f4:08:ff:01:a1:33:69:ae:79:6f:a9:1f:7e:2f:5e:69:
89:1a:51:9a:b9:1c:0d:d0:f9:e0:62:9a:39:0d:3c:12:23:72:
19:66:59:da:26:00:1a:98:cf:57:0b:0b:02:e3:e8:ad:b4:fb:
20:66:03:05:d8:a7:f2:a5:02:7a:a5:30:33:47:45:88:ff:d6:
fa:bc:14:a2:0d:77:a7:41:64:76:cc:17:6a:a5:58:ed:c1:53:
c8:7a:41:55:4b:9c:67:1b:8d:57:78:ec:36:18:f8:d8:dd:5f:
08:80:e8:e8:9e:51:48:16:2b:3f:e7:db:68:c1:09:dd:10:f1:
0e:1d:ae:d5:05:19:cc:a6:af:7c:0f:38:8f:15:04:ee:f8:af:
61:dc:3e:33:30:4d:bd:f5:ae:61:97:ff:41:5f:76:19:cc:ae:
e3:a1:2f:d1:a7:f1:a6:f3:a6:62:0d:f7:04:6d:6d:11:9e:6c:
99:cf:74:2f:4b:e5:07:5f:a5:83:ee:99:44:18:34:a9:2d:b3:
62:e7:88:3d:28:66:21:25:a4:c3:55:f6:12:38:76:12:f3:14:
85:51:3a:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:36:01 2025 by rpki-client