Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/694/DMEf0IIjrT74nFhO8l7gBjiueK8.roa
File: DMEf0IIjrT74nFhO8l7gBjiueK8.roa (raw, json)
Hash identifier: HZ7NjnweAew9fmnmjyFFgAFKL2Pz9rbKIYpHkInwCbE=
Subject key identifier: 0C:C1:1F:D0:82:23:AD:3E:F8:9C:58:4E:F2:5E:E0:06:38:AE:78:AF
Certificate issuer: /CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D
Certificate serial: 15
Authority key identifier: 2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/DMEf0IIjrT74nFhO8l7gBjiueK8.roa
Signing time: Wed 27 Nov 2024 02:02:23 +0000
ROA not before: Wed 27 Nov 2024 02:02:23 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 7511
IP address blocks: 202.79.8.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 21 (0x15)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D
Validity
Not Before: Nov 27 02:02:23 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=0CC11FD08223AD3EF89C584EF25EE00638AE78AF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:19:d2:a3:c4:9d:ab:58:8a:f3:d6:8d:ef:6b:
11:ba:3c:b6:f9:95:d2:8c:4b:80:4a:57:6d:ab:06:
ff:29:13:7d:a3:62:56:13:a6:58:89:9c:22:8d:c4:
f5:ff:6c:2c:45:4b:6f:0b:80:48:eb:45:1e:cb:69:
8d:ed:f3:ee:b1:61:a3:33:6a:ba:ca:51:86:59:74:
46:1b:3a:b9:fd:3d:e4:e1:2a:19:ed:f1:e8:be:c1:
a0:92:4f:bf:60:36:02:3a:26:ca:c1:76:de:0e:64:
9d:9a:d0:0c:94:3b:74:bd:97:bc:7c:da:71:57:9c:
95:59:fe:11:a1:43:7a:15:46:95:47:f1:e2:cc:63:
fe:8c:d6:d9:7f:8d:52:6d:88:0a:de:17:e0:be:95:
fe:17:e8:d7:ba:5e:b3:23:d9:0d:da:ad:6e:e6:98:
56:d3:77:5e:23:3a:13:85:75:e2:c1:09:8a:f5:2b:
68:e6:d4:d5:6d:b5:59:a8:c0:08:47:0c:70:81:82:
78:f9:90:f6:ee:f0:32:e7:3e:47:86:2c:14:bc:de:
39:e4:47:42:46:8e:28:2c:92:13:54:53:0c:ca:a7:
dd:b6:20:78:97:05:cc:4b:39:0b:ca:b7:52:9d:54:
6f:02:78:f2:3a:84:b5:20:3b:16:3b:c2:7a:08:b1:
55:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:C1:1F:D0:82:23:AD:3E:F8:9C:58:4E:F2:5E:E0:06:38:AE:78:AF
X509v3 Authority Key Identifier:
keyid:2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/DMEf0IIjrT74nFhO8l7gBjiueK8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.79.8.0/21
Signature Algorithm: sha256WithRSAEncryption
50:c3:aa:56:d6:2e:b2:c1:e4:98:79:d8:52:fd:5e:e8:c1:d2:
38:8f:18:0f:63:16:cc:65:26:7d:f7:0f:84:f3:96:22:b9:92:
15:53:26:33:71:03:0c:12:e9:03:6d:d3:35:c8:f4:12:8b:16:
f9:3e:e5:cc:c3:0b:6c:c6:9d:4a:ba:c4:bb:00:27:b7:b5:ed:
96:16:f8:50:d6:87:3c:72:96:71:4e:f0:7b:e1:15:fc:17:26:
b3:07:fd:c1:12:3f:e5:9d:8e:b9:cf:50:4b:8e:a9:f5:44:dd:
6b:1a:55:e5:a2:46:cf:a8:d9:44:d7:9c:9c:26:cf:3a:5a:ad:
df:99:5b:8c:bc:83:60:39:57:f8:1f:c0:f8:89:64:56:33:1f:
5e:67:fa:de:d7:0b:4e:d6:52:ee:52:91:46:e8:22:7b:62:3f:
d5:ff:33:25:48:0b:76:d9:bc:a1:17:d9:ac:bf:2a:c8:54:92:
ed:c6:7e:fd:be:b9:24:82:74:5b:e3:f3:8c:42:71:7d:1a:82:
2d:19:dd:8b:f2:99:60:6f:9a:12:63:60:e1:29:73:b2:71:5b:
13:c1:0c:d6:19:b7:79:0a:4c:3c:85:2b:e4:27:1a:86:44:7f:
96:76:c3:c0:b0:ac:ef:75:62:ca:a8:e2:52:eb:fa:6e:2a:00:
e8:7e:53:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:39:55 2025 by rpki-client