Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/EMKY2ndHrlgNvVqcn3WkP2wJCUM.roa
File: EMKY2ndHrlgNvVqcn3WkP2wJCUM.roa (raw, json)
Hash identifier: 0YLgqdL0xmeNqvBIlgDD9psVVFiN1lnkz/6GG6in+CM=
Subject key identifier: 10:C2:98:DA:77:47:AE:58:0D:BD:5A:9C:9F:75:A4:3F:6C:09:09:43
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: 0121
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/EMKY2ndHrlgNvVqcn3WkP2wJCUM.roa
Signing time: Mon 30 Sep 2024 01:30:27 +0000
ROA not before: Mon 30 Sep 2024 01:30:27 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 10021
IP address blocks: 27.110.24.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Sep 30 01:30:27 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=10C298DA7747AE580DBD5A9C9F75A43F6C090943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ba:f1:34:a2:b7:2b:be:6d:e4:dd:d4:b8:be:
1e:6d:3a:f7:29:9c:81:15:f2:0d:e3:cc:04:13:a5:
69:2c:ee:67:63:3d:00:10:ea:fc:ab:90:2c:38:40:
76:ef:2e:85:68:f1:77:a3:1e:6c:79:b8:85:9f:49:
b9:5e:39:d6:ef:87:b9:d9:13:b9:72:b4:83:f3:79:
45:25:2f:32:77:de:17:6d:d8:ec:53:8e:63:f1:10:
55:2b:07:89:15:a9:9b:f1:c7:ae:d2:37:0b:71:4c:
09:7a:2e:24:1f:6d:1e:65:97:16:56:b8:3e:63:d9:
be:dc:b6:82:55:3e:45:f6:db:0b:16:65:a2:9d:c6:
77:02:df:42:a0:fc:66:13:d8:2b:8d:d0:7d:fb:c3:
fa:cb:88:86:84:b4:a2:34:2e:26:67:47:89:1b:d1:
b6:f0:93:04:f6:e7:ab:9f:51:c3:77:b7:30:bd:b1:
5f:29:fd:72:52:16:38:f5:ed:13:49:4f:5f:cf:a6:
c5:34:e5:eb:99:40:a3:3f:5f:72:b5:9b:13:97:2b:
de:ed:90:81:ef:1f:01:bc:3e:71:03:c4:5a:f1:e3:
57:dd:52:81:5b:9c:30:99:4f:c5:eb:d6:50:ff:e7:
fd:c5:0b:46:48:87:d8:40:01:5b:dd:f5:f5:76:3b:
f1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:C2:98:DA:77:47:AE:58:0D:BD:5A:9C:9F:75:A4:3F:6C:09:09:43
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/EMKY2ndHrlgNvVqcn3WkP2wJCUM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.110.24.0/21
Signature Algorithm: sha256WithRSAEncryption
72:e7:7a:07:41:33:38:62:aa:e1:1b:42:c5:ee:d6:75:a6:5f:
4a:65:21:53:10:7e:a7:4d:c5:98:5f:7c:63:b6:3e:84:10:55:
71:3a:2b:b2:03:a7:7b:ea:79:75:20:37:28:64:8b:8a:9d:ba:
da:a5:2f:71:37:3e:57:9c:fe:0a:39:2a:31:8b:39:19:76:89:
91:34:3c:ac:68:b7:97:ae:79:42:bc:e2:83:5b:28:69:b9:87:
49:03:fd:60:a8:60:36:5a:05:0e:1d:e1:76:27:53:26:09:ea:
d2:52:27:35:80:79:c6:d0:96:1d:ec:2a:9a:f4:92:9d:45:03:
4b:da:3d:84:33:ce:9b:0d:11:13:1d:00:7c:37:f0:07:f8:fc:
51:00:87:7a:59:fe:61:c1:da:09:a4:07:39:95:3e:f6:11:06:
fa:29:e7:25:83:a0:a9:b8:47:a0:52:ee:fc:ab:44:a2:06:ab:
6f:56:e9:59:9b:5b:3a:f1:73:33:f8:96:d3:14:ab:52:58:9a:
88:cc:1d:d1:19:84:12:8f:c6:49:10:6b:df:1d:1d:84:d3:b4:
26:88:99:c2:91:fa:a4:ea:0e:da:a4:36:a1:4b:e2:47:ac:a6:
10:b6:18:2b:2b:d8:c3:52:fa:68:d1:f6:c6:cf:10:66:ee:4d:
99:19:22:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:03:18 2025 by rpki-client