Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/HULAEhTEaPKAAqiwCPVJLRXA4c4.roa
File: HULAEhTEaPKAAqiwCPVJLRXA4c4.roa (raw, json)
Hash identifier: 3MawhDuyFtU+QZk+8/cvyWSFt4HpWdrcXZf0icZpJKg=
Subject key identifier: 1D:42:C0:12:14:C4:68:F2:80:02:A8:B0:08:F5:49:2D:15:C0:E1:CE
Certificate issuer: /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial: 2B
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/HULAEhTEaPKAAqiwCPVJLRXA4c4.roa
Signing time: Thu 31 Oct 2024 01:31:35 +0000
ROA not before: Thu 31 Oct 2024 01:31:35 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 7527
IP address blocks: 210.171.228.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Validity
Not Before: Oct 31 01:31:35 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=1D42C01214C468F28002A8B008F5492D15C0E1CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:d6:54:d8:5d:f5:82:96:cf:fb:bc:67:6a:1e:
76:77:70:05:8c:90:fc:8a:50:17:9b:38:dc:3d:01:
50:b2:ae:b8:c9:20:56:98:36:6c:c4:5a:8d:a4:56:
e7:4c:4e:c0:e8:b7:25:8f:08:63:4c:95:b4:96:17:
d4:be:d6:5d:41:39:5e:1d:8e:39:1a:1f:c6:76:08:
9d:35:17:74:d1:96:2d:c4:7b:fa:9a:9b:89:eb:0e:
8b:89:d4:16:00:e0:7c:70:ac:b3:70:08:41:95:9f:
9e:be:3d:74:5c:51:56:d5:e3:ef:e2:45:fd:b8:fc:
d0:d6:78:74:b9:b0:06:f9:cd:dd:18:a0:37:e8:7e:
08:c2:38:09:78:4e:ea:b1:a2:ff:08:86:e9:0d:47:
49:ca:cb:a6:cf:f4:97:80:1d:f0:8a:2d:00:c0:ce:
39:6b:94:09:a7:2c:af:64:cb:f7:00:7b:de:b4:b4:
c2:e4:fd:d3:d8:1f:35:11:64:e1:50:a4:c5:34:b0:
2b:ee:8e:2b:80:42:19:71:ec:c6:bc:c5:7e:b7:dc:
f3:ec:02:55:d1:92:61:dc:4a:18:97:1d:43:ec:e6:
54:9f:e4:c4:75:75:18:4b:9b:ea:c5:df:db:90:5a:
e3:18:e2:e9:57:1c:b6:6d:04:cc:f7:1b:b0:8c:21:
a7:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:42:C0:12:14:C4:68:F2:80:02:A8:B0:08:F5:49:2D:15:C0:E1:CE
X509v3 Authority Key Identifier:
keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/HULAEhTEaPKAAqiwCPVJLRXA4c4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.171.228.0/22
Signature Algorithm: sha256WithRSAEncryption
8a:6c:5b:fe:01:2f:86:fa:ce:1b:d7:fc:79:c7:58:c3:ac:d7:
46:e6:36:04:44:b3:6b:b0:ef:68:f7:32:11:86:39:13:d3:b5:
39:79:d2:2b:27:53:47:5d:b2:9d:89:1d:2a:b9:8f:67:15:72:
ce:e4:80:76:76:98:95:4c:ff:ae:36:24:84:2c:87:78:a0:83:
9d:4b:a3:82:da:0a:30:cc:04:a0:b2:0e:d8:af:f0:76:88:30:
7d:d0:dd:61:63:4f:46:bd:d0:3a:5e:5a:b8:b7:4d:ae:63:ac:
65:03:fb:53:0e:ce:89:a1:d1:8e:73:58:36:58:1b:82:fe:b7:
50:7a:89:34:67:78:b3:41:a6:f0:26:f5:7c:95:2b:ef:91:fc:
24:ce:be:36:a3:e3:74:06:39:67:a4:23:d3:4c:c0:61:b1:5b:
31:3f:15:9f:1a:b7:3d:fb:e0:ed:e2:93:10:c8:37:ae:ef:cb:
74:e9:d7:a7:f7:2f:3b:bc:a5:50:75:61:45:d0:67:82:c2:d6:
08:2a:61:ec:14:74:75:69:46:b8:5f:08:bd:81:35:43:9c:51:
91:79:3e:00:67:89:b1:07:08:81:a5:c0:6c:be:18:f3:0b:0a:
64:42:e9:1b:4c:50:f6:84:44:93:66:ff:a1:d6:3e:26:86:a6:
95:0d:fe:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:22 2025 by rpki-client