Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MZbxnBHb5TZcYlxehJIy2TF-G-U.roa
File: MZbxnBHb5TZcYlxehJIy2TF-G-U.roa (raw, json)
Hash identifier: C14hNCZGbDpu5vywHf0XwRWph8RxBOGMqhKJaL7oV8Q=
Subject key identifier: 31:96:F1:9C:11:DB:E5:36:5C:62:5C:5E:84:92:32:D9:31:7E:1B:E5
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 0152
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MZbxnBHb5TZcYlxehJIy2TF-G-U.roa
Signing time: Sun 01 Oct 2023 01:33:27 +0000
ROA not before: Sun 01 Oct 2023 01:33:27 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 211.125.163.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 338 (0x152)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:33:27 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=3196F19C11DBE5365C625C5E849232D9317E1BE5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9b:56:77:2f:48:ef:1e:54:38:f4:b2:a1:db:
19:78:01:ab:05:b4:c7:0a:59:9d:c4:cc:0b:c9:52:
ed:8e:c1:e9:c7:cf:4f:bc:d9:c3:37:a3:52:53:3d:
30:0b:0d:75:54:9e:83:0c:f1:99:01:72:3c:94:d4:
2e:5f:b3:97:5f:43:7c:7c:1c:6a:e0:e9:7e:24:a4:
89:da:11:e1:76:1a:fb:b3:2e:e4:79:e8:31:ce:6f:
a5:74:13:47:5b:f0:8d:fe:fa:c0:0a:cb:ef:36:62:
22:92:05:58:c4:86:52:e2:97:4d:ba:6d:82:d9:15:
82:8e:29:25:eb:24:65:ef:50:72:66:88:09:d9:55:
8f:cf:de:64:ba:36:29:aa:3f:37:c3:f1:bf:ce:96:
f1:32:67:ab:bf:a5:ef:e4:b4:48:c6:29:17:cd:91:
0d:83:4e:ab:fd:51:00:b0:19:d1:fb:ba:b0:dc:60:
e7:17:1a:4b:30:4d:04:d3:d9:33:4b:8e:f3:a7:e9:
60:9c:c1:68:e7:57:c2:d0:4c:aa:32:2d:f9:29:b0:
65:17:d5:e5:1f:e2:41:6d:38:53:6b:14:c1:8f:16:
87:0d:04:ed:48:48:ff:1a:58:7a:fa:a3:c1:0d:12:
49:85:58:67:5f:3c:5f:e8:5c:e0:a6:c3:b2:41:31:
85:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:96:F1:9C:11:DB:E5:36:5C:62:5C:5E:84:92:32:D9:31:7E:1B:E5
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/MZbxnBHb5TZcYlxehJIy2TF-G-U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.125.163.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:08:72:4f:db:82:b0:9b:e9:ba:83:d4:21:95:bb:d9:0f:fb:
21:c9:c3:8d:e3:f1:af:93:a9:81:cd:00:11:18:70:67:77:35:
d8:84:04:4d:98:84:9d:2c:4e:ad:c6:6e:ff:8d:73:71:e5:9f:
6d:37:49:25:d3:4b:2b:cc:14:98:40:1a:84:38:53:89:d1:2d:
7c:a4:08:fa:07:76:65:e2:7b:b0:cc:12:59:2d:53:ec:8a:40:
9b:a1:58:63:d2:5f:0b:89:f0:b6:43:01:33:30:47:6a:c8:1b:
2a:96:a9:e8:ad:14:71:4b:19:1d:c0:10:64:5a:b9:83:1f:83:
9b:d5:70:11:49:36:63:ba:07:80:3f:45:e9:37:60:48:f9:96:
8d:f0:c2:a8:f1:1f:dd:89:8f:c6:b1:01:16:76:48:92:08:c5:
82:28:cc:1a:20:0a:ab:31:9e:72:31:55:e4:c8:60:c7:65:cb:
28:c2:5f:ef:db:54:98:94:82:c9:31:65:d3:8c:45:5f:86:b2:
4d:f7:8b:94:56:4a:ae:f4:bf:85:0d:7a:ba:3d:7e:d3:2d:50:
b3:bb:8c:7b:fc:42:fb:07:cb:78:2b:ab:55:af:0c:28:31:98:
b7:d8:a7:6b:14:2a:11:47:76:2a:cb:84:18:be:bd:6f:f6:87:
3f:4c:89:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:28 2025 by rpki-client