Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/iAmVTITZvOgAbKkMQZH7Jdt1iCg.roa
File: iAmVTITZvOgAbKkMQZH7Jdt1iCg.roa (raw, json)
Hash identifier: ekvYN49ylmSniBIxk5oR37/abZ/rOWrnRyZihhNn9j0=
Subject key identifier: 88:09:95:4C:84:D9:BC:E8:00:6C:A9:0C:41:91:FB:25:DB:75:88:28
Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial: 8E
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/iAmVTITZvOgAbKkMQZH7Jdt1iCg.roa
Signing time: Sat 30 Nov 2024 01:29:26 +0000
ROA not before: Sat 30 Nov 2024 01:29:26 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 4685
IP address blocks: 210.253.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 142 (0x8e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Validity
Not Before: Nov 30 01:29:26 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=8809954C84D9BCE8006CA90C4191FB25DB758828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:73:43:dd:30:46:c1:55:68:0b:50:8f:7a:
e2:ec:71:a6:71:a5:e9:a4:7b:2f:b4:45:72:3e:10:
2f:9c:02:17:05:e0:49:2b:57:52:7c:94:74:6c:ed:
e1:3a:6a:09:f9:24:21:c1:2c:a5:e2:90:27:2a:2c:
ce:46:79:fc:98:5e:e4:13:80:a7:3a:7e:4d:a1:8f:
03:3c:f0:af:84:f0:bf:46:ea:9e:e7:ef:db:0c:40:
27:df:45:f1:83:ec:9e:29:3e:e2:04:8e:46:c5:b9:
5f:c8:b1:4c:0e:1d:e8:1c:bd:15:85:d2:cc:6f:92:
d3:d6:98:14:4d:f5:48:63:a3:0f:c1:70:dd:4a:39:
fe:5d:df:43:94:d8:07:3e:68:0c:6d:44:34:f9:79:
76:b9:3b:e7:7c:48:7f:9f:1a:46:14:c8:1a:69:dd:
39:71:87:40:de:d8:51:06:78:cb:d9:ee:4e:34:cc:
aa:5b:82:7a:b5:0c:7c:fe:fc:0c:dd:9e:a3:f1:52:
bc:80:a7:91:1d:d9:da:f1:1f:6b:7d:6f:75:9f:38:
69:66:62:9a:dc:49:3e:fb:49:0a:14:3f:a8:31:9c:
b5:f0:3f:50:39:ec:ce:07:ce:e8:0d:e1:77:81:4d:
57:9f:85:15:9d:e2:80:02:4c:bf:07:8b:2f:10:ac:
d8:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:09:95:4C:84:D9:BC:E8:00:6C:A9:0C:41:91:FB:25:DB:75:88:28
X509v3 Authority Key Identifier:
keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/iAmVTITZvOgAbKkMQZH7Jdt1iCg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.253.224.0/19
Signature Algorithm: sha256WithRSAEncryption
29:d7:fa:88:24:5d:9f:33:e7:2e:74:57:1c:27:6c:95:73:92:
0d:34:83:26:6b:f5:84:58:23:69:ab:80:f2:42:b4:47:a5:dc:
c1:12:2b:32:b6:7c:62:4d:60:35:67:7a:75:6d:43:19:72:74:
2a:15:1f:c1:2d:7f:11:9b:a6:65:54:4c:09:73:62:77:cb:1e:
45:fb:48:f1:c8:b7:21:fb:1c:a8:78:34:86:01:53:dd:09:2a:
49:95:a5:28:da:88:92:50:89:c9:a4:d5:85:83:90:a3:44:8f:
3e:a2:1d:aa:7f:c4:c2:fe:b7:0e:55:7f:fb:c6:63:f6:58:9a:
b1:76:b4:05:c5:be:f7:b6:5e:cc:85:42:6d:b6:a8:a7:01:a0:
35:57:94:57:8b:27:de:ad:52:16:f9:07:f8:e9:da:54:7f:d9:
a2:d6:36:79:1c:38:e4:dd:cb:b1:12:ad:ad:dc:2a:54:8c:8d:
6f:31:f3:3f:34:56:30:84:3b:b0:6b:28:b9:78:88:59:66:83:
f8:73:51:da:8c:ed:c6:fe:50:da:2d:15:28:e0:22:69:84:9b:
11:18:1b:db:36:22:d6:3d:ef:70:bc:c1:6e:6e:92:61:69:bc:
ed:55:e8:14:71:91:90:20:14:ae:61:7c:fa:88:59:a0:d7:9b:
a4:e1:e6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:25 2025 by rpki-client