Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/K8QgoS54pdJxdZCugWaEoX7zcKQ.roa
File: K8QgoS54pdJxdZCugWaEoX7zcKQ.roa (raw, json)
Hash identifier: nqh7dpfoHuP9roAmtV2fNT6fz21dda21zDS2tF1BQe8=
Subject key identifier: 2B:C4:20:A1:2E:78:A5:D2:71:75:90:AE:81:66:84:A1:7E:F3:70:A4
Certificate issuer: /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial: 51
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/K8QgoS54pdJxdZCugWaEoX7zcKQ.roa
Signing time: Thu 31 Oct 2024 01:30:01 +0000
ROA not before: Thu 31 Oct 2024 01:30:01 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 131964
IP address blocks: 160.237.191.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Validity
Not Before: Oct 31 01:30:01 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=2BC420A12E78A5D2717590AE816684A17EF370A4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:2c:10:d7:09:10:e6:f3:3c:e1:de:52:59:
2a:44:36:3d:c9:f1:de:31:b5:a4:a8:df:e8:1c:85:
72:20:80:a0:98:fe:69:c6:08:2e:33:50:21:81:d7:
f9:1b:93:37:cc:93:de:53:be:3c:2a:89:e3:2b:40:
0e:ec:88:6c:ee:82:a0:5d:ab:12:e1:d9:b7:dc:ea:
66:07:45:ac:32:f3:db:f6:87:81:54:4b:62:b0:55:
77:b2:34:56:5c:8e:0f:4f:a4:2c:ab:d7:f0:06:e2:
a6:ae:61:39:31:90:fb:a5:37:82:e3:a2:aa:26:b3:
c8:98:a9:e5:0f:9c:38:4b:69:63:d7:af:7a:39:e0:
34:f8:f2:d9:49:c0:a5:ff:f4:9d:bd:9d:30:77:31:
1b:04:68:5f:a5:0d:0b:8d:35:ff:78:7d:32:e9:e7:
be:57:09:95:4f:72:87:58:a6:a2:90:05:78:f6:ad:
c9:04:78:c7:3c:d1:f5:d0:16:e6:b6:16:04:90:31:
e0:56:c7:6e:ba:ba:8a:23:38:1b:33:d4:38:73:46:
16:8f:9b:30:2c:82:a3:f0:28:b6:cb:12:39:d1:1c:
f4:6d:20:1e:4c:d4:ee:fa:04:64:7a:db:69:28:51:
70:63:c8:7c:5f:0f:2b:a2:63:19:83:21:3a:16:71:
49:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:C4:20:A1:2E:78:A5:D2:71:75:90:AE:81:66:84:A1:7E:F3:70:A4
X509v3 Authority Key Identifier:
keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/K8QgoS54pdJxdZCugWaEoX7zcKQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.237.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:52:4f:f6:cd:81:e8:10:1c:0f:2d:2b:33:19:7d:47:9f:0e:
36:5d:28:6b:41:b8:2b:65:b6:00:28:a1:6b:0b:0b:27:00:d1:
0f:37:15:f1:0b:e1:0f:27:83:62:c6:3a:25:c7:6f:cf:c6:39:
b7:bc:da:80:b3:e0:68:38:1b:07:b0:a9:f9:67:cb:8d:08:97:
f9:41:d6:62:75:28:fa:51:6c:9d:f9:d6:93:6a:62:fa:d0:02:
94:ad:f7:96:19:e3:34:25:43:a5:ac:f5:e4:29:08:78:c4:41:
b2:9e:1c:41:fa:2e:70:32:a1:ce:7c:e5:a5:96:01:a6:aa:a8:
33:1d:62:0b:dd:d3:0a:d3:76:cb:77:31:14:77:7b:34:60:06:
af:47:09:da:88:65:bf:54:d0:04:4d:fc:4e:44:6d:38:ac:d2:
25:d3:da:d3:ce:40:28:7a:38:3b:47:15:dc:11:1c:82:da:c3:
c3:be:92:b6:93:b2:0e:e6:f1:7b:51:e8:7b:c2:ce:e9:44:48:
13:c0:ff:f7:9f:8d:c3:94:e8:2f:4d:90:ea:f7:4d:a7:95:59:
af:ca:e0:85:a6:64:93:21:6b:e8:ba:82:86:e9:ed:c7:ca:49:
a2:8c:06:11:46:26:6f:92:c5:72:63:e2:75:79:ae:3c:9e:9b:
99:5b:13:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:37 2025 by rpki-client