Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/xH9jxy6tGx72k4YwwZCN42UrTcs.roa
File: xH9jxy6tGx72k4YwwZCN42UrTcs.roa (raw, json)
Hash identifier: 1efQZG6PdhSnZnbxvThU/Itj57iLF/LxI7M+gmoDrdE=
Subject key identifier: C4:7F:63:C7:2E:AD:1B:1E:F6:93:86:30:C1:90:8D:E3:65:2B:4D:CB
Certificate issuer: /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial: 3F
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/xH9jxy6tGx72k4YwwZCN42UrTcs.roa
Signing time: Tue 25 May 2021 02:46:57 +0000
ROA not before: Tue 25 May 2021 02:46:57 +0000
ROA not after: Sun 15 May 2022 01:30:02 +0000
asID: 38631
IP address blocks: 119.235.235.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63 (0x3f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Validity
Not Before: May 25 02:46:57 2021 GMT
Not After : May 15 01:30:02 2022 GMT
Subject: CN=C47F63C72EAD1B1EF6938630C1908DE3652B4DCB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:9e:0f:61:ac:e7:c0:b8:a0:b6:16:00:19:93:
87:3b:a0:be:02:11:53:48:04:d1:b7:6c:15:c6:53:
f5:3d:62:25:af:8a:a4:74:e8:4a:6e:de:47:17:22:
02:91:7d:1c:05:a4:55:a8:bd:bc:d3:49:7e:f7:77:
40:96:f8:25:52:75:ee:a4:fd:da:ea:06:2f:36:8a:
7d:04:4d:ad:cf:5a:db:40:ab:7f:0f:cc:fa:74:db:
66:b0:f9:f3:e8:44:8b:57:f4:c9:6f:41:76:9f:c9:
59:30:98:a6:da:e6:c3:5d:e7:ec:26:7a:57:c8:d6:
c4:d9:de:d4:54:db:4f:c7:9f:08:09:a9:cc:c0:bd:
46:ab:df:8d:73:89:00:58:7d:f0:b8:27:ed:5f:13:
ea:88:30:34:d4:69:ef:8e:b6:d8:88:7f:6f:db:f3:
1f:6a:2d:19:7a:0d:96:fc:15:68:96:8c:04:51:04:
4a:ff:dd:5a:63:7b:12:ee:c4:b7:7a:a3:7b:f0:12:
22:0b:2f:5a:50:08:3b:a7:48:e6:24:a2:fb:81:99:
d8:ae:8c:55:0e:92:f5:85:19:d5:d0:b6:a5:e9:81:
7e:c7:23:64:b1:28:2b:e1:5a:19:f0:84:12:7d:9a:
a1:80:78:49:98:c0:95:a3:bf:f2:06:2a:57:5e:49:
20:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:7F:63:C7:2E:AD:1B:1E:F6:93:86:30:C1:90:8D:E3:65:2B:4D:CB
X509v3 Authority Key Identifier:
keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/xH9jxy6tGx72k4YwwZCN42UrTcs.roa
sbgp-ipAddrBlock: critical
IPv4:
119.235.235.0/24
Signature Algorithm: sha256WithRSAEncryption
36:a7:ee:66:ab:0b:f2:d0:4b:cb:56:cd:b9:71:a5:e7:ee:b2:
4d:0f:a6:f6:f9:03:0b:61:fe:0b:d1:e5:1b:b2:13:00:ed:63:
e4:2a:8d:05:f4:35:3f:6f:8d:ba:44:b8:3e:fe:48:43:1e:f3:
1d:80:b4:9f:bf:47:a3:dc:63:aa:ed:f5:c8:2f:2c:a4:48:36:
d8:03:41:9c:41:0d:5f:84:74:4f:ef:f0:01:26:c7:b2:b1:10:
2a:10:32:1a:bb:88:67:a8:76:ba:f6:9a:98:f2:08:55:d8:69:
ae:1f:e6:d4:74:31:25:e6:dc:75:51:69:21:7c:89:27:5f:30:
35:6d:7e:40:7a:93:23:e2:87:b0:47:3b:81:bc:ba:e1:83:75:
a5:cc:d2:c3:bf:77:87:e5:dd:2d:a7:a2:42:06:fa:50:2b:02:
ed:5b:72:e1:7a:94:7b:88:8f:e0:00:49:00:66:ba:b9:0f:f9:
9f:fb:b1:9b:15:8a:31:c5:d0:e2:7b:36:dc:9e:b4:1b:6b:f3:
9e:f4:56:1e:61:88:b2:27:5a:1b:94:2c:65:27:48:aa:ac:37:
9e:74:e1:64:10:57:29:db:d1:ab:35:04:c2:5b:30:32:1c:41:
0f:d0:ab:07:5f:bd:06:2b:76:45:f6:6f:9d:2a:7f:86:38:57:
f9:89:52:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:14 2025 by rpki-client