Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/exP2Udcl38tjsw7DDV1z5hr6PmE.roa
File: exP2Udcl38tjsw7DDV1z5hr6PmE.roa (raw, json)
Hash identifier: RkKwccwph83tJcbtPcPEAXpiUDy8jVbCN3g/a7SrXjQ=
Subject key identifier: 7B:13:F6:51:D7:25:DF:CB:63:B3:0E:C3:0D:5D:73:E6:1A:FA:3E:61
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0221
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/exP2Udcl38tjsw7DDV1z5hr6PmE.roa
Signing time: Mon 30 Sep 2024 01:33:42 +0000
ROA not before: Mon 30 Sep 2024 01:33:42 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 9371
IP address blocks: 210.188.211.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 545 (0x221)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 30 01:33:42 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=7B13F651D725DFCB63B30EC30D5D73E61AFA3E61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:51:60:d7:b2:d9:ed:44:81:85:27:1d:0e:cd:
fd:5e:4c:42:42:07:44:89:c8:87:29:90:25:1c:6d:
0d:a0:80:44:ca:9a:e2:a2:4d:28:9c:e0:3d:63:04:
c7:62:78:1e:b6:b0:c1:b4:5a:b5:43:a9:2c:4a:cf:
94:fd:b3:10:d0:be:fe:55:ee:bb:ef:11:ae:e0:81:
e4:af:54:92:07:11:d4:a5:2e:0a:d0:0e:a9:35:d9:
15:cd:3b:5f:6a:a7:9e:37:d7:18:cc:71:6f:b4:ca:
58:cf:b4:28:18:37:c6:5d:82:a9:20:aa:38:ec:15:
31:18:10:91:24:4d:28:06:53:55:5e:f6:5d:b5:4f:
cd:da:92:8a:b6:75:f4:be:a5:92:7e:32:ec:fa:2c:
6c:03:be:d6:ec:8d:a0:1e:6c:de:54:f0:1f:03:b3:
0d:f9:9f:60:49:d3:4d:ec:df:0c:95:85:43:ee:cf:
41:98:d1:65:89:26:92:11:66:16:d9:58:d2:89:68:
12:3a:62:09:d2:cb:36:03:b7:4e:c9:6f:37:2e:93:
f7:e9:0a:b5:b8:e1:85:24:3c:4d:ca:0a:b9:b8:74:
58:e4:da:50:4c:6e:69:34:21:c8:9d:9f:62:d7:21:
ef:4d:53:d6:48:96:29:2c:fd:b3:bd:66:0c:b3:6f:
36:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:13:F6:51:D7:25:DF:CB:63:B3:0E:C3:0D:5D:73:E6:1A:FA:3E:61
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/exP2Udcl38tjsw7DDV1z5hr6PmE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.188.211.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:b6:68:3d:01:57:e0:06:5b:3a:47:70:fa:4e:c7:50:9b:d2:
58:e3:ea:03:a3:6c:e8:5c:b3:ba:06:71:46:99:8c:09:9a:d9:
48:42:ef:11:4d:53:ac:58:c2:58:e3:5a:1c:a2:25:21:c6:a5:
b5:09:59:83:e5:e3:5b:95:1a:e2:33:8a:c3:ed:8a:73:87:52:
2d:02:33:1a:e3:43:93:a6:12:a3:02:20:47:6f:ff:28:9e:ea:
50:4d:27:13:d6:b3:74:59:59:70:fb:8f:3d:dd:f0:4e:b9:00:
f8:d6:76:ee:43:87:24:d8:44:38:e2:bd:68:0a:52:39:b3:05:
02:ea:7e:64:ae:07:c8:e3:cb:88:05:52:f5:cd:6b:9d:b3:e2:
25:70:9c:58:5e:31:38:d8:8f:1d:6d:0c:1d:d9:21:89:24:1b:
4e:a6:21:f5:1e:df:bb:9d:32:93:c2:9f:d3:af:72:69:3d:9b:
0f:64:b5:20:55:ea:bd:1c:02:c2:ad:a4:b3:d7:05:d4:55:90:
37:38:ff:36:4a:ac:14:c6:9c:0c:8f:03:7b:5b:f8:f6:da:b5:
18:a6:b7:83:8e:c4:45:33:d6:be:3b:25:3e:e7:fb:89:f3:25:
08:e4:dc:1a:75:0c:f3:c8:44:7b:01:fc:41:de:3d:1e:7c:ad:
da:de:8c:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 00:49:23 2025 by rpki-client