Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/1ZHcn-SR-XHzcN-gISuqXVrimIs.roa
File: 1ZHcn-SR-XHzcN-gISuqXVrimIs.roa (raw, json)
Hash identifier: LkBHNv/IehvXhgMgfISqM97XuPw0AdqLdLZ/AWJRYOE=
Subject key identifier: D5:91:DC:9F:E4:91:F9:71:F3:70:DF:A0:21:2B:AA:5D:5A:E2:98:8B
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 2C
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/1ZHcn-SR-XHzcN-gISuqXVrimIs.roa
Signing time: Tue 11 Oct 2022 09:32:06 +0000
ROA not before: Tue 11 Oct 2022 09:32:06 +0000
ROA not after: Fri 15 Sep 2023 01:30:03 +0000
asID: 2516
IP address blocks: 210.233.97.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 44 (0x2c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 11 09:32:06 2022 GMT
Not After : Sep 15 01:30:03 2023 GMT
Subject: CN=D591DC9FE491F971F370DFA0212BAA5D5AE2988B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:a1:9c:43:ca:3d:39:f4:58:d4:f7:aa:97:e3:
0b:71:70:a7:1b:4e:40:52:c7:e8:69:83:7a:0d:8c:
68:ea:ff:54:6c:5f:a3:f9:d6:22:a0:5e:20:7e:13:
18:c3:67:34:97:0a:d3:15:ee:fe:8e:cc:8a:9e:f5:
ee:d4:30:44:03:d1:59:fd:df:0f:7b:ee:fe:9e:e9:
4d:42:68:2c:65:5e:29:c7:e9:7e:c2:d5:f7:16:57:
dc:65:8d:66:ca:10:ba:5d:ea:1d:e2:74:3d:21:88:
22:b3:1e:fe:92:e9:1f:70:24:d5:dc:24:48:57:21:
5b:6d:63:13:a2:3f:51:40:bd:98:29:f4:6f:ce:85:
98:4f:26:5f:82:76:68:14:d9:67:7e:10:c9:cb:0e:
7c:75:73:6a:d7:4d:c6:29:40:44:0c:4e:40:52:42:
7f:c3:5f:77:76:93:e4:8a:56:fc:c4:21:a4:1c:e5:
31:9d:b2:bc:98:b6:c9:63:fa:fe:53:7e:2c:84:7a:
b5:fc:d3:8a:2e:01:d0:bf:e0:c1:8a:45:f6:40:1e:
fd:a3:85:da:70:18:35:17:f3:22:57:62:91:5a:2f:
0c:d6:13:19:62:ab:e1:1b:7c:73:42:a1:56:a5:b1:
9a:1b:1c:cc:98:b4:3e:26:c8:0d:97:8c:f1:65:84:
b5:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:91:DC:9F:E4:91:F9:71:F3:70:DF:A0:21:2B:AA:5D:5A:E2:98:8B
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/1ZHcn-SR-XHzcN-gISuqXVrimIs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.233.97.0/24
Signature Algorithm: sha256WithRSAEncryption
ca:64:2f:56:9f:a6:2f:a0:e0:db:5f:a5:d9:11:94:85:07:88:
20:25:8d:60:21:71:32:e8:ab:e7:74:d7:0c:d3:87:1b:b1:02:
84:19:73:56:4c:e1:be:e6:dd:47:83:14:25:b2:36:27:e2:29:
d5:61:e8:67:c6:db:80:b6:c3:dc:43:f2:d3:09:c6:a6:d1:d0:
d5:5e:6f:30:88:5b:97:df:72:f8:6d:37:f4:99:57:1d:10:66:
d0:ad:5a:bf:33:d0:fe:da:89:33:ae:0c:60:c4:76:54:ab:50:
3c:48:bf:f8:31:6e:e4:9c:c9:96:32:0c:de:86:f1:3f:7f:ff:
ec:5b:b5:63:50:45:fc:d3:5d:d6:bf:5f:13:74:72:7f:90:d4:
5e:24:74:cd:11:cc:cc:8a:3c:7c:b7:a4:1a:de:f6:27:e0:d4:
6d:f0:66:48:19:9f:44:b2:14:6e:f3:f1:f5:76:02:aa:0e:e8:
86:dd:c5:ed:81:bd:30:8d:21:32:88:71:4e:02:aa:53:ea:bd:
bd:fb:54:71:ca:47:aa:03:ee:f2:c2:67:8c:c6:e8:41:75:d7:
c4:20:17:6f:c7:80:dc:40:ac:4c:dc:8a:f6:7c:25:2c:b7:14:
21:7d:99:6b:d0:ca:88:cc:92:01:ad:69:fd:8b:e2:1d:d4:31:
cf:6f:e9:8d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:42 2024 by rpki-client on console-fra.rpki-client.org