Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/D5FN3fx2YPI0bSlcuQRiVHKG7sM.roa
File: D5FN3fx2YPI0bSlcuQRiVHKG7sM.roa (raw, json)
Hash identifier: eH5NOePLEHeiDI4GTh8GA+C+BmHjCkiG68xRBkrqWXw=
Subject key identifier: 0F:91:4D:DD:FC:76:60:F2:34:6D:29:5C:B9:04:62:54:72:86:EE:C3
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 0101
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/D5FN3fx2YPI0bSlcuQRiVHKG7sM.roa
Signing time: Sun 30 Jun 2024 01:28:36 +0000
ROA not before: Sun 30 Jun 2024 01:28:36 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 55898
IP address blocks: 211.14.8.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 257 (0x101)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Jun 30 01:28:36 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=0F914DDDFC7660F2346D295CB90462547286EEC3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:25:7a:86:0e:c2:dc:ed:25:d5:e2:24:25:dd:
00:d5:2a:0e:01:17:79:6e:ec:1d:4e:33:0e:66:7e:
1a:97:34:81:d1:a0:87:8b:d0:43:55:61:98:db:60:
9d:41:c9:e1:4f:f8:25:36:76:57:6a:55:97:6f:0e:
31:bf:60:00:d8:cd:ec:ad:ca:45:a0:c2:ba:d5:a3:
12:24:2d:9d:73:5c:45:59:74:6f:dc:38:2d:7f:38:
07:88:73:da:3d:4c:54:d3:d0:6b:87:3a:c1:91:05:
48:60:91:4a:aa:22:db:9b:6b:9c:30:10:30:6f:c6:
6a:3d:b7:90:a8:2f:d8:0a:02:e1:e2:c6:20:53:a9:
7d:74:77:0c:d2:74:47:ab:56:91:4b:05:70:68:bc:
e6:dc:af:2e:63:6a:bc:a7:6e:8d:6a:e7:d3:d3:8a:
58:37:7b:b6:84:2e:26:66:a6:04:c9:83:5f:c2:cc:
ca:b7:ef:f7:ca:40:07:d5:99:80:bc:e5:b9:dc:cd:
1b:5d:5b:ed:29:d2:12:77:9c:5e:df:cd:4f:86:a0:
9e:5a:66:c3:f0:86:bd:83:f8:15:a6:3c:1f:31:88:
9f:02:17:69:a8:1c:52:52:dc:1d:bd:c8:f7:ae:b9:
12:2a:78:1d:14:e7:80:92:46:74:0a:43:29:55:01:
a6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:91:4D:DD:FC:76:60:F2:34:6D:29:5C:B9:04:62:54:72:86:EE:C3
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/D5FN3fx2YPI0bSlcuQRiVHKG7sM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.14.8.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:90:3e:c7:f7:30:83:10:03:de:f5:8c:c8:5f:a5:8f:74:62:
dd:85:7a:e6:6e:8d:53:08:fa:e4:f0:a0:ab:bb:52:98:f5:71:
d8:33:5b:e3:4b:ec:3d:93:35:3c:3b:58:83:2c:b3:96:5f:83:
87:df:ce:bd:f1:65:11:50:6b:57:58:5b:32:42:a3:c5:54:81:
e6:18:1a:55:22:26:7b:72:1d:68:77:00:6a:11:47:51:dd:35:
b0:aa:39:75:eb:8b:29:a0:94:1b:5f:67:c0:d4:cd:c3:8a:56:
f7:19:59:5f:98:2c:64:07:40:48:ac:58:bd:ff:87:a9:72:cd:
d9:6c:a3:9e:5e:88:17:9e:ba:17:e6:88:58:f9:d6:e5:49:24:
54:2a:f8:a5:6d:37:b2:10:64:0a:9e:85:a7:22:f9:f8:b2:98:
fb:b7:50:5e:7c:2a:fb:30:b3:b3:43:27:25:a9:47:ca:47:6e:
56:fa:83:86:c2:76:c1:a8:8f:ec:f5:e4:7b:87:8f:3d:47:8a:
29:cf:15:f0:6e:d0:7e:38:2b:db:3a:eb:89:b5:ba:d9:69:5c:
bb:62:9c:a5:65:88:80:36:82:1f:fd:fd:1e:1a:32:32:02:d0:
9a:b7:44:93:1e:09:f2:ea:ee:85:65:82:50:0c:96:78:d6:bf:
db:c9:aa:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 22 09:06:45 2024 by rpki-client on console-fra.rpki-client.org