Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/7CDsbq_SAvJ8OXQa9u2mBpvTbuE.roa
File: 7CDsbq_SAvJ8OXQa9u2mBpvTbuE.roa (raw, json)
Hash identifier: J6XZprOqZ4Am+IygrBs4oZdn0iE/ZwFUUy1LgmM2XaM=
Subject key identifier: EC:20:EC:6E:AF:D2:02:F2:7C:39:74:1A:F6:ED:A6:06:9B:D3:6E:E1
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 0129
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/7CDsbq_SAvJ8OXQa9u2mBpvTbuE.roa
Signing time: Sun 01 Oct 2023 01:30:43 +0000
ROA not before: Sun 01 Oct 2023 01:30:43 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 211.7.179.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:30:43 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=EC20EC6EAFD202F27C39741AF6EDA6069BD36EE1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e5:10:87:0a:99:a7:49:a5:84:51:eb:6c:a7:
ba:b3:fe:0e:7f:e8:42:96:25:1d:f8:dd:5a:46:65:
bd:51:3b:1c:a9:58:c7:94:f6:4e:0c:7f:d7:6f:5c:
78:35:ba:8e:04:60:58:a8:39:b2:39:3b:08:1e:7e:
85:28:ac:74:e3:88:fc:78:cc:49:14:74:46:a5:e1:
a6:86:1e:50:25:5a:ad:36:ec:2b:e6:7e:42:92:70:
fb:07:14:1a:d7:c8:eb:bd:1c:25:cf:98:03:23:91:
97:17:e2:ca:af:ff:cf:5c:ad:92:54:3f:1c:3f:5a:
1d:13:e2:a0:4e:df:a2:54:a1:03:5e:c9:fa:0e:f1:
39:cd:29:18:81:e7:b3:5f:e3:88:be:a6:be:79:a8:
23:b2:2d:c0:24:41:28:43:fb:ed:ff:a6:29:6c:ae:
b2:35:3e:98:2f:44:6a:45:d6:b5:6b:8e:78:f9:91:
71:0e:b0:2e:d1:fe:cc:29:94:be:ab:33:07:3a:39:
8b:5e:c6:33:75:b8:89:c6:9c:30:fe:9e:25:3f:6e:
49:e7:09:d9:b5:32:4b:a9:87:00:29:2c:30:60:00:
86:10:c2:14:1c:ab:d2:f3:94:bd:1c:f2:5c:8d:9d:
09:24:46:45:0b:ce:8b:cc:c9:1d:72:67:80:85:98:
f2:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:20:EC:6E:AF:D2:02:F2:7C:39:74:1A:F6:ED:A6:06:9B:D3:6E:E1
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/7CDsbq_SAvJ8OXQa9u2mBpvTbuE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.7.179.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:e1:c0:38:79:8e:43:8a:b0:59:9e:6b:7c:ce:cc:5c:40:17:
0c:2d:4c:4f:2b:34:98:28:1f:54:63:ee:7b:96:65:1a:2a:92:
2f:eb:b9:70:1a:04:e7:d3:8e:d3:23:79:d2:01:d1:63:fa:34:
6a:b8:93:eb:02:33:b1:f6:40:92:86:df:00:fb:48:a8:12:df:
be:e5:a3:85:02:44:fb:36:7f:9c:3d:77:96:8e:e1:1b:d7:f5:
7d:a9:c9:0e:82:2e:58:b6:15:9d:e9:0a:69:9b:03:84:17:17:
96:d3:a9:97:4c:5a:40:2c:93:eb:42:30:d0:1b:3b:e5:f8:18:
88:34:ad:f1:80:67:80:ab:74:0c:d2:e9:c4:51:8d:07:af:83:
cb:f9:0a:f1:bd:aa:f8:53:ca:73:8a:31:2b:b5:7a:3c:a1:01:
82:45:99:9c:a5:ba:9b:fb:3e:71:66:17:4e:93:39:2f:c2:e4:
8f:bd:b7:ad:b6:a3:8a:5f:9d:be:a9:6b:18:2e:93:c4:34:e1:
9a:50:53:6a:9a:11:19:c5:18:16:40:eb:28:36:32:60:ae:a6:
55:3a:ce:e9:78:c9:6b:3e:cc:91:47:3c:d8:16:fa:fb:a2:9c:
04:f6:e9:82:99:4b:97:28:4d:5d:98:28:93:c7:63:72:ef:2c:
40:81:a3:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:43 2025 by rpki-client