Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xjBKeAPBBcD1QSxlMBoCfxvYERY.roa
File: xjBKeAPBBcD1QSxlMBoCfxvYERY.roa (raw, json)
Hash identifier: QKXgnLCjO5Bvi/WT2Ptc7zH4qDjBSoTowLqvmELEXo8=
Subject key identifier: C6:30:4A:78:03:C1:05:C0:F5:41:2C:65:30:1A:02:7F:1B:D8:11:16
Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial: 18
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xjBKeAPBBcD1QSxlMBoCfxvYERY.roa
Signing time: Sat 25 Sep 2021 03:52:02 +0000
ROA not before: Sat 25 Sep 2021 03:52:02 +0000
ROA not after: Thu 15 Sep 2022 01:30:02 +0000
asID: 23816
IP address blocks: 202.239.20.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 24 (0x18)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Validity
Not Before: Sep 25 03:52:02 2021 GMT
Not After : Sep 15 01:30:02 2022 GMT
Subject: CN=C6304A7803C105C0F5412C65301A027F1BD81116
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:76:32:8b:78:eb:58:e0:1f:c9:4c:cf:6d:65:
72:a6:a8:10:cb:3b:00:94:6b:57:1d:19:ac:8e:26:
47:61:26:39:ef:b8:eb:03:0b:38:85:80:ec:92:c8:
31:95:ea:f8:0b:d5:e9:02:11:3c:e7:a2:8f:e9:54:
d6:a5:44:2b:56:32:c8:6f:60:26:37:4d:fb:f8:d3:
31:89:6f:88:9c:0c:b1:98:fc:11:e4:75:df:c2:0c:
dd:6f:88:1b:6d:e0:ea:ab:22:e0:0a:fa:0e:36:ba:
fb:2a:56:a0:8d:e5:7a:80:eb:09:f9:a3:ce:64:80:
47:e0:22:cf:84:3c:cf:55:73:dc:fa:2b:88:b7:f6:
e7:e3:0d:f8:8c:da:ae:74:49:03:61:8f:f6:63:d1:
09:6e:5a:4e:54:59:2c:c5:20:99:b7:35:47:99:49:
10:05:25:2b:b8:de:da:55:c5:28:bf:de:0b:de:ca:
dd:9f:f1:50:a0:a8:ea:8a:48:59:58:ba:e6:23:43:
c8:48:bb:8b:60:b6:79:1a:51:22:c8:0d:6c:50:c6:
bc:45:b0:a5:51:c5:3c:1b:37:0a:a1:f2:93:4c:fd:
c3:57:90:9d:70:91:02:23:78:25:32:5d:ba:d2:d6:
cf:28:54:d7:74:c7:a2:35:71:d4:f5:6f:2e:1d:51:
e6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:30:4A:78:03:C1:05:C0:F5:41:2C:65:30:1A:02:7F:1B:D8:11:16
X509v3 Authority Key Identifier:
keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xjBKeAPBBcD1QSxlMBoCfxvYERY.roa
sbgp-ipAddrBlock: critical
IPv4:
202.239.20.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:0a:03:0e:29:c4:09:d8:98:0e:82:38:66:9e:87:22:58:1f:
25:21:ab:b1:15:dc:38:e1:fd:67:df:35:ae:24:1b:56:5f:1a:
c1:92:ad:00:74:72:54:cf:6d:b0:08:12:d0:08:39:30:dd:48:
08:ce:2e:de:5a:18:9c:5f:d0:42:09:dc:77:82:2a:c7:be:de:
f4:70:d8:3f:35:25:7d:94:d5:80:b8:3e:81:d9:15:5e:0f:aa:
93:f9:34:c0:b8:eb:f4:9d:b0:75:1a:4e:13:57:a2:ef:eb:65:
25:c6:f0:a8:44:0e:bb:e7:b1:23:30:f1:5b:1e:05:36:e8:ff:
3c:e5:49:7e:30:28:ad:31:68:5c:7f:84:0b:4d:44:3d:c4:5e:
84:11:59:7b:e5:24:27:92:90:01:74:78:94:c0:ec:23:96:16:
d9:1d:e5:c0:5e:cb:b4:55:ea:dc:b2:61:a5:25:41:ba:d1:c7:
97:80:ae:08:7b:08:87:93:b8:bb:32:3b:b0:9b:cf:95:99:23:
91:85:c0:c2:87:1c:bf:61:b1:4e:cf:e8:3e:57:f7:cd:63:5a:
10:1b:87:e4:57:2a:7a:20:17:1f:05:1e:1a:1c:d2:66:5c:5b:
88:d5:f0:c0:8d:10:ac:e2:09:f6:d7:78:77:0a:25:2b:c0:60:
df:e5:72:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:45 2024 by rpki-client on console-fra.rpki-client.org