Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/rinvP3oGlDjhPKeVRJFwNBSSbiE.roa
File: rinvP3oGlDjhPKeVRJFwNBSSbiE.roa (raw, json)
Hash identifier: oy4YPs0KXr2Pzj4RYuAYo0vRwZ9MtcV0mFtXYm4vtqU=
Subject key identifier: AE:29:EF:3F:7A:06:94:38:E1:3C:A7:95:44:91:70:34:14:92:6E:21
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: A3
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/rinvP3oGlDjhPKeVRJFwNBSSbiE.roa
Signing time: Sat 30 Nov 2024 01:31:21 +0000
ROA not before: Sat 30 Nov 2024 01:31:21 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 9351
IP address blocks: 124.40.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 163 (0xa3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Nov 30 01:31:21 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=AE29EF3F7A069438E13CA7954491703414926E21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:43:3b:6f:16:cf:e1:46:a8:96:65:2d:2b:7d:
98:50:9b:33:b9:b3:2a:ec:93:d6:50:24:6a:00:4f:
c0:55:1a:01:ca:dc:60:1b:ba:67:ac:1e:93:45:e4:
3b:99:27:a1:97:01:f4:8e:bb:84:e6:e3:e2:b4:e9:
a0:36:e6:4e:7f:1b:da:3f:04:66:fb:bd:ad:dd:97:
71:43:2d:c7:57:49:26:49:6d:95:95:8a:38:df:35:
ac:de:a3:f2:d9:86:78:e6:91:cd:85:8a:af:97:e4:
26:b6:bd:0f:1f:3a:d2:fe:2b:86:18:97:d4:43:38:
50:d7:5c:9a:5d:24:1f:7a:3f:4c:d0:56:5b:24:5d:
7f:bb:9c:41:87:e9:63:88:49:ad:e6:b2:c7:d2:c0:
07:e4:e9:b7:83:5e:f8:60:65:24:e6:e3:0a:e9:84:
00:30:fe:c8:b7:07:86:4a:e5:7f:bf:67:c8:b1:88:
73:bf:d7:de:4c:4c:cd:33:eb:e3:e2:53:2d:46:e9:
9b:3d:cf:e2:9e:3a:c8:cf:12:4d:9e:57:39:ad:cd:
c1:0c:62:61:ce:35:46:30:6a:c9:f1:5b:ab:c6:33:
c1:b0:ea:9d:f7:f0:57:70:fc:aa:e9:ae:cb:3e:ae:
02:f6:d2:39:87:80:37:12:0c:3d:b6:04:b0:0f:45:
0b:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:29:EF:3F:7A:06:94:38:E1:3C:A7:95:44:91:70:34:14:92:6E:21
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/rinvP3oGlDjhPKeVRJFwNBSSbiE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.40.96.0/20
Signature Algorithm: sha256WithRSAEncryption
3f:42:69:d7:57:20:d9:0d:5f:be:96:cf:4f:73:6b:ea:2a:6c:
8a:b3:bc:83:d0:58:cf:ed:e5:73:f7:b5:fa:4e:f2:e4:9e:90:
4c:61:fb:b1:7b:b9:62:31:3a:c4:74:54:f3:84:55:c5:0f:d1:
f1:d2:df:73:f2:e8:a5:7d:cc:71:f2:69:42:5f:34:5a:70:5c:
88:0a:dd:21:75:a4:9d:eb:62:7b:43:54:68:66:ca:0d:d6:b2:
41:e1:66:c9:a8:6d:74:ad:b7:1c:a2:cf:f1:eb:23:25:c0:98:
44:a7:1c:32:da:8c:68:76:c3:9b:57:6e:ea:94:4b:4a:9d:de:
c7:c5:e3:19:ef:00:92:e8:29:b5:ef:34:1d:35:8c:4e:f0:53:
4e:e6:88:52:d2:3b:4e:86:b2:3f:f4:63:58:36:1c:54:59:80:
8d:7a:39:fa:c0:f1:e1:18:7a:3a:10:74:00:f8:72:13:4e:f7:
d7:09:cd:2c:06:83:a4:9e:0b:fd:cb:b3:10:d5:7d:cc:21:2c:
51:12:ce:59:87:55:ed:67:00:f0:12:06:76:c0:9d:f7:d2:fd:
25:ea:7c:07:a6:f9:ef:0c:b5:58:7a:70:b0:d2:c9:61:34:84:
8c:97:b2:7a:c6:f7:0a:11:cb:1f:bf:bc:7f:aa:f2:3d:ac:17:
3c:65:16:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:20 2025 by rpki-client