Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/gnQjCsFxtyLcyuiVpb1XOxYtlV8.roa
File: gnQjCsFxtyLcyuiVpb1XOxYtlV8.roa (raw, json)
Hash identifier: 5iVg0+8uAxuJTMXcU3+1zgIkugEW8W5y/S2d8cllMrQ=
Subject key identifier: 82:74:23:0A:C1:71:B7:22:DC:CA:E8:95:A5:BD:57:3B:16:2D:95:5F
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0205
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/gnQjCsFxtyLcyuiVpb1XOxYtlV8.roa
Signing time: Mon 30 Sep 2024 01:29:58 +0000
ROA not before: Mon 30 Sep 2024 01:29:58 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 7684
IP address blocks: 49.212.239.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 517 (0x205)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Sep 30 01:29:58 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=8274230AC171B722DCCAE895A5BD573B162D955F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bc:b1:b2:70:61:69:4e:bd:55:d1:84:fa:2e:
c4:ce:48:ac:95:a5:05:4c:b4:2f:40:d1:23:9d:d0:
88:9c:b5:82:81:f8:9e:99:f1:6f:0f:34:54:8c:80:
55:f7:9a:90:62:27:2b:5f:b9:63:a9:a0:1a:bd:45:
67:40:19:72:35:36:14:6c:37:9f:48:7c:a0:e0:8f:
61:2e:05:2a:7a:33:9c:3a:87:a6:4e:b2:56:08:4d:
f7:a0:f5:85:10:55:59:b5:40:93:40:35:0b:26:2b:
8c:3c:17:29:40:19:cd:47:6f:06:70:66:2f:42:69:
aa:a2:47:34:ac:0d:28:c4:02:14:23:dc:54:4d:77:
4d:d6:db:05:b7:c9:c2:14:2e:6d:85:f6:09:85:bb:
28:c9:2d:c1:b8:a9:b2:1c:8c:fb:b1:fe:f6:af:79:
9c:63:9d:9a:1f:3e:58:00:e3:2a:e7:be:3c:e7:b6:
a8:f8:86:05:b9:e7:48:59:f5:75:46:a9:aa:98:d4:
9e:d8:68:ab:98:42:fb:26:a5:8a:e4:21:7d:ff:bf:
3f:41:41:73:d8:10:75:46:9b:67:ac:33:6c:0c:5f:
ab:c4:90:de:d4:f3:64:a6:34:93:52:82:07:b1:08:
9f:50:a4:b9:75:f7:de:24:a4:95:39:a0:eb:55:64:
49:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:74:23:0A:C1:71:B7:22:DC:CA:E8:95:A5:BD:57:3B:16:2D:95:5F
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/gnQjCsFxtyLcyuiVpb1XOxYtlV8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.212.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:c8:d5:db:f6:5f:f3:90:4f:d4:9f:97:57:08:a7:8a:07:7b:
fe:c4:c9:22:1d:50:e5:ef:06:f9:88:8d:32:05:74:c9:6f:da:
aa:ec:0f:f3:31:a9:5c:b8:f2:71:53:7a:7e:21:02:45:2c:df:
ee:61:19:87:2a:82:0c:1e:77:91:a8:6a:9a:58:91:d2:e2:58:
82:3a:e8:60:a4:6f:af:c3:36:be:ac:8a:f9:80:f1:0f:c1:78:
32:62:07:2a:4b:2f:36:40:39:0d:5a:ba:51:b1:53:d0:2f:dc:
fc:6c:c4:3d:5e:12:48:3b:1c:2d:77:94:4d:ee:bd:52:01:6d:
77:70:12:d9:fe:e4:05:c4:d8:7a:17:53:3b:09:c9:0f:b0:08:
b1:93:97:26:c2:44:61:b1:a4:76:65:2a:ec:ec:aa:d3:13:b5:
2f:e1:3f:99:85:d4:a7:b8:0d:f3:ef:f1:96:23:73:2e:ae:09:
c8:84:5e:5a:84:a1:7a:94:13:ef:b0:3f:f4:bd:c6:c9:ef:22:
7c:47:21:bf:63:a4:43:1a:6e:aa:89:a4:23:f6:e2:07:e8:59:
0f:6e:10:a3:c8:32:7c:3a:d3:1f:5d:d9:02:80:2d:82:9a:1c:
a5:05:10:98:01:7e:4c:5b:95:58:86:14:b7:17:01:69:bd:8a:
55:c9:f5:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 18:55:19 2025 by rpki-client