Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/Ao1ZP7oN_BPygVzBmI93DVp4w1M.roa
File: Ao1ZP7oN_BPygVzBmI93DVp4w1M.roa (raw, json)
Hash identifier: e7QwoIK6wkxdu7MY5MegkZ8EvqSqwg3tLEX2UXgcS0Y=
Subject key identifier: 02:8D:59:3F:BA:0D:FC:13:F2:81:5C:C1:98:8F:77:0D:5A:78:C3:53
Certificate issuer: /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial: 1E
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/Ao1ZP7oN_BPygVzBmI93DVp4w1M.roa
Signing time: Fri 16 Aug 2024 02:53:18 +0000
ROA not before: Fri 16 Aug 2024 02:53:18 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 2519
IP address blocks: 219.121.249.0/24 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Validity
Not Before: Aug 16 02:53:18 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=028D593FBA0DFC13F2815CC1988F770D5A78C353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1d:f4:2f:cf:22:2b:a0:f5:41:9b:9e:41:1b:
bc:50:63:7d:62:cc:02:9b:02:c7:06:3e:66:b2:3b:
e8:21:26:86:ea:e0:4b:72:8b:00:50:94:f0:91:65:
9f:b6:79:ab:7c:7f:89:c6:57:93:89:9a:d7:66:eb:
d1:dd:bf:af:70:3a:5f:be:f1:4d:cc:53:7a:19:e9:
55:53:a5:8a:b7:ea:86:b4:c9:45:42:f8:98:7c:1e:
9f:67:89:83:d7:3b:b5:fe:b3:d0:e4:d3:85:50:17:
7d:fa:1e:db:79:42:25:06:ef:32:61:29:93:56:fa:
c5:5b:9b:f5:75:88:8f:e7:71:3d:77:de:a4:79:fb:
ca:c1:be:59:6d:a6:75:9a:84:3b:3c:2c:bf:3e:e4:
66:6e:32:33:7a:d0:e5:d1:fe:06:cd:8a:33:f3:cb:
07:b9:08:59:f4:51:9c:ef:2f:0a:79:e9:24:cd:47:
43:33:43:f0:09:b4:2a:5f:5c:6d:92:80:ef:38:da:
df:fe:93:73:4b:3b:0d:2a:c0:a4:fc:fe:88:27:a7:
5e:86:0b:ac:cf:7b:8f:8b:fb:83:57:fc:78:57:35:
21:0c:23:0e:b9:9e:fa:6e:5f:5f:57:33:e0:69:6e:
d0:5b:cf:6c:27:89:c4:6a:9d:6c:2d:ff:57:fb:8d:
9a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:8D:59:3F:BA:0D:FC:13:F2:81:5C:C1:98:8F:77:0D:5A:78:C3:53
X509v3 Authority Key Identifier:
keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/Ao1ZP7oN_BPygVzBmI93DVp4w1M.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.121.249.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:4e:6c:a6:11:5a:2d:48:6f:a2:90:6c:b2:20:02:1c:05:11:
0d:c2:49:aa:de:28:53:28:63:e9:b4:aa:ce:00:ea:60:30:d7:
3c:0a:1d:84:51:01:e5:e0:f8:15:80:34:cb:68:fd:6f:04:bb:
f6:38:c6:ed:4a:2f:a1:dd:c3:c8:6f:b6:64:91:cd:c7:5f:54:
83:92:17:07:18:4d:8a:15:57:db:3b:c5:e0:95:13:32:d2:27:
20:db:25:7b:c4:d7:c3:b8:85:57:2d:0c:45:fa:ff:cc:21:9d:
d6:7e:27:40:de:f2:26:de:7c:e6:31:18:b0:5b:cc:9a:d4:21:
27:9b:d9:5d:77:f1:72:c7:0e:7d:46:0a:d9:c9:75:d5:cf:f6:
c7:85:c0:60:ec:58:bb:20:ef:a6:1a:4c:b0:d9:b6:d3:cd:f0:
62:ce:5d:78:1e:ae:06:e5:c9:5a:3c:b8:55:73:19:d6:d1:8b:
a0:96:96:8a:9a:9d:95:a0:a0:9a:d9:17:87:f4:e6:db:43:f8:
d5:68:09:e8:88:26:aa:50:3c:96:cd:ff:65:81:fa:5d:e4:42:
34:9f:20:31:ee:96:7e:74:95:75:d7:10:37:29:03:48:fb:df:
c1:ba:87:e7:d4:ba:bf:03:33:1c:2a:c4:75:89:88:99:37:a0:
ca:aa:73:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:20:23 2025 by rpki-client