Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/tu44eswNZGFYex5tK10QOJ433zQ.roa
File: tu44eswNZGFYex5tK10QOJ433zQ.roa (raw, json)
Hash identifier: mEmufSIlHKCAaXCOwiKvsOOGAv1xUrJo8JS2arA75sc=
Subject key identifier: B6:EE:38:7A:CC:0D:64:61:58:7B:1E:6D:2B:5D:10:38:9E:37:DF:34
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: C8
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/tu44eswNZGFYex5tK10QOJ433zQ.roa
Signing time: Tue 01 Aug 2023 01:30:37 +0000
ROA not before: Tue 01 Aug 2023 01:30:37 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 55898
IP address blocks: 203.141.54.0/24 maxlen: 24
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 200 (0xc8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Aug 1 01:30:37 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=B6EE387ACC0D6461587B1E6D2B5D10389E37DF34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:9b:99:6e:80:99:91:9e:da:c4:79:74:71:7f:
23:24:49:25:c6:8a:64:b7:e1:ad:e3:11:05:9d:0c:
23:e0:4b:c9:46:20:06:f9:92:59:3b:7f:c6:98:51:
fb:f9:61:03:87:09:08:0d:e5:af:2c:05:a4:60:43:
f3:e5:3e:09:39:a7:e9:37:e9:b7:a3:48:45:ca:68:
f8:89:84:51:47:80:cd:fe:5e:07:4c:b7:ed:0c:0a:
f1:82:f1:3a:e1:54:cd:e1:f0:82:c7:5f:33:14:05:
59:2b:bf:1f:fa:27:d6:9b:85:c7:c2:b8:75:05:e4:
7c:f7:a6:37:70:54:67:d7:6c:f0:ff:ba:f1:ee:eb:
6f:2a:b4:f9:51:27:5c:d8:a9:77:80:ac:ce:1c:8d:
e4:13:e3:71:63:86:b0:07:ae:3d:3a:02:99:a4:4f:
c0:7f:02:07:ba:da:c9:a9:25:53:c3:a6:99:6c:a8:
01:45:8b:fb:90:54:6a:a6:f2:bb:7b:e9:47:84:94:
77:4d:12:a7:fd:e6:a2:1d:50:2e:c9:e2:91:14:30:
48:0c:bc:8c:57:66:82:67:a2:43:4d:84:bc:ae:22:
ee:16:60:c2:96:64:f3:8c:5c:2e:2c:2c:bb:b2:2f:
21:42:70:50:51:23:b5:27:aa:c7:2d:44:24:06:db:
c7:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:EE:38:7A:CC:0D:64:61:58:7B:1E:6D:2B:5D:10:38:9E:37:DF:34
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/tu44eswNZGFYex5tK10QOJ433zQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.141.54.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:f8:f9:54:25:5b:80:f0:1d:3a:89:a0:7c:76:76:2e:91:90:
2b:c5:8b:39:86:d4:9a:7b:d4:e2:0c:cf:d8:32:27:96:46:ca:
89:14:fa:65:77:e3:9f:67:9d:55:b8:b2:68:5c:7a:d6:29:b8:
0f:c9:b3:1d:34:7c:e8:b1:1e:65:01:be:c2:29:90:c3:39:79:
71:ef:c0:0a:d7:e5:19:eb:97:ba:de:73:48:51:e7:79:ab:98:
48:61:79:c2:6d:10:40:a4:32:f1:ef:b7:35:4a:53:ef:01:b8:
cd:01:df:62:31:69:39:40:9a:2e:4e:dd:43:32:74:7b:7e:c3:
e6:e4:64:22:b9:47:2c:42:8c:52:49:b1:3b:bb:d7:7e:21:8c:
dd:8e:35:5b:89:8b:b2:c1:4f:60:b3:40:b9:19:ca:f3:4b:5c:
3e:03:b0:36:94:c1:62:57:52:3a:25:2c:7a:41:c6:d1:ba:40:
91:d6:1e:04:86:4f:80:27:45:cd:8d:1a:65:be:49:b9:5d:7e:
a5:50:05:31:9a:8b:6a:d7:ae:ce:17:5c:17:9c:4f:12:cc:06:
ec:2a:bc:d8:b8:b0:ab:52:83:fe:80:b0:a0:a7:75:5d:6c:a0:
f5:9d:68:5f:a9:15:b1:e3:3e:40:ed:51:ec:97:7e:14:b4:82:
36:b5:6b:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:20 2025 by rpki-client