Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/EGDZPKe-9OMd87T39ai0YyQGhfs.roa
File: EGDZPKe-9OMd87T39ai0YyQGhfs.roa (raw, json)
Hash identifier: 671h2z4ML0Ze/NU/R9Vu3cXaj4cKErs+afMwfeTCNR4=
Subject key identifier: 10:60:D9:3C:A7:BE:F4:E3:1D:F3:B4:F7:F5:A8:B4:63:24:06:85:FB
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 0121
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/EGDZPKe-9OMd87T39ai0YyQGhfs.roa
Signing time: Sun 01 Oct 2023 01:30:40 +0000
ROA not before: Sun 01 Oct 2023 01:30:40 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 211.7.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 289 (0x121)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:30:40 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=1060D93CA7BEF4E31DF3B4F7F5A8B463240685FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f2:d2:92:7f:1e:73:4e:b1:65:37:29:a6:76:
f7:62:41:ce:7b:51:52:19:60:96:6e:3b:b0:22:0b:
22:f2:e5:9d:8b:a1:e6:ca:1b:07:16:60:ea:e5:c6:
fc:aa:e5:02:f7:98:53:cd:bd:e4:19:c6:dc:8e:a0:
69:9a:e3:6a:07:5b:34:91:72:58:83:19:d3:50:0e:
c1:a7:81:96:36:a7:3c:87:15:66:1b:da:95:6c:bf:
91:67:5c:66:5d:b2:c3:43:5b:91:30:1d:24:95:64:
9b:0e:46:00:e1:9e:57:90:d1:fa:44:0e:ab:d0:17:
09:3b:35:3a:98:3b:bd:7a:be:2f:ae:ea:fa:d8:83:
b5:bf:be:f3:af:06:6f:f5:e0:8d:60:53:ea:ae:03:
27:34:0b:72:d0:81:e7:30:e1:03:54:98:c7:a9:bc:
34:b0:2a:4f:e2:54:e2:38:c9:40:5a:f7:d3:78:a4:
dd:79:e4:7a:7a:5f:2e:0f:f8:f9:37:59:dd:b8:05:
52:7a:1c:51:80:db:41:c7:0b:ff:60:0d:fd:79:4d:
26:0b:8d:29:84:57:bc:d1:02:14:94:43:2b:f1:c8:
a1:e6:9f:39:f4:f8:14:c9:61:fe:56:68:3f:d5:9c:
95:cb:c6:05:e8:73:91:9b:ea:de:4e:99:88:ae:db:
24:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:60:D9:3C:A7:BE:F4:E3:1D:F3:B4:F7:F5:A8:B4:63:24:06:85:FB
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/EGDZPKe-9OMd87T39ai0YyQGhfs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.7.142.0/24
Signature Algorithm: sha256WithRSAEncryption
67:4c:27:fd:3d:50:5d:03:ef:95:11:56:1b:12:a6:6a:a4:9b:
a2:6b:8d:0d:d4:cc:e4:9a:d1:85:ed:c2:1b:dc:9f:de:0f:1d:
85:8d:98:ed:5e:db:5f:fa:2c:1a:9c:c9:fd:5b:72:2b:e7:db:
ae:5b:d2:7a:ba:1f:fc:ac:7f:01:de:aa:87:ca:f3:4e:f8:78:
7d:e0:2b:ec:2c:7b:68:ab:34:22:97:e4:63:d9:e4:64:7b:18:
98:f6:72:4a:4c:82:26:2b:e5:1f:7d:5f:d7:1c:49:4a:3b:52:
e4:bd:38:58:12:b1:ef:3c:28:40:3e:ac:b8:c7:0e:69:bf:8a:
74:9c:f6:1c:23:fd:c0:b9:6e:e5:57:89:aa:2d:f4:a2:c1:5f:
20:35:cb:2f:d5:f1:ab:9f:17:e2:ed:07:55:a3:94:96:93:98:
f7:28:c8:d4:85:dd:9a:77:95:9f:ca:47:dc:7e:78:2c:0f:6b:
42:31:3a:99:31:69:07:72:65:d6:47:ec:50:0e:00:20:a7:d8:
36:79:d3:03:a0:94:d6:03:70:75:f1:53:7b:30:cc:cd:8f:47:
2e:5b:11:a6:bf:6a:44:3d:a3:0d:fd:36:26:58:54:ec:cf:b6:
27:8e:a0:73:07:ca:fb:d3:be:09:e0:78:15:e3:bf:a3:52:0f:
b2:5e:96:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:29:25 2025 by rpki-client