Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/QwvSyXWLQY5l8MeXIeSP3xX4FCg.roa
File: QwvSyXWLQY5l8MeXIeSP3xX4FCg.roa (raw, json)
Hash identifier: cL5eJ3tA/enjNEWR6R+EC6wI2CIaNUK2Ts1GTAKFrcc=
Subject key identifier: 43:0B:D2:C9:75:8B:41:8E:65:F0:C7:97:21:E4:8F:DF:15:F8:14:28
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0157
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QwvSyXWLQY5l8MeXIeSP3xX4FCg.roa
Signing time: Wed 31 Jul 2024 01:31:19 +0000
ROA not before: Wed 31 Jul 2024 01:31:19 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 2497
IP address blocks: 220.208.192.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 343 (0x157)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Jul 31 01:31:19 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=430BD2C9758B418E65F0C79721E48FDF15F81428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b2:c4:de:a8:81:9d:03:53:01:73:6c:3c:df:
98:1c:6a:f7:c0:dc:28:0e:5a:19:55:ed:05:17:0e:
c9:52:b2:1b:b9:7f:24:76:3b:02:da:c1:dc:96:52:
92:ae:00:9b:5d:48:3b:6b:c9:9d:24:e2:c9:07:99:
94:20:1b:47:56:f8:30:cd:b4:68:5f:14:d9:46:b9:
c5:17:70:ec:39:ad:80:72:6c:c0:b2:de:5d:9d:90:
6b:4e:74:24:3a:69:28:8a:cd:e5:06:d7:5e:2c:2d:
9c:21:f1:bb:69:08:d7:f0:ec:71:84:c9:bc:dd:8a:
55:fc:4e:13:aa:ea:7c:16:ea:24:4e:ed:9e:1f:af:
84:5d:94:fc:2e:92:b5:53:9e:30:ab:a8:4d:76:78:
c5:5f:24:65:cc:15:36:84:b1:28:80:6d:86:f1:54:
78:98:2c:e0:9f:eb:fa:09:a1:66:7a:7e:b9:0f:d5:
56:d2:16:47:dc:7b:6c:9f:a3:6a:ba:1b:3a:a4:4c:
3b:ad:d4:7c:76:6e:d0:cd:b2:83:64:50:69:59:91:
e3:af:d8:e1:44:51:d5:bf:50:27:6e:ad:05:fc:db:
9c:99:68:4f:6a:0f:ef:9d:46:94:15:3d:f8:f7:12:
a3:c0:eb:fa:39:86:e8:06:8c:2b:2b:6a:da:a5:e8:
d6:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0B:D2:C9:75:8B:41:8E:65:F0:C7:97:21:E4:8F:DF:15:F8:14:28
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QwvSyXWLQY5l8MeXIeSP3xX4FCg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.208.192.0/19
Signature Algorithm: sha256WithRSAEncryption
0e:a1:10:54:1a:bb:9b:26:af:70:ce:eb:74:a1:f1:cf:64:a3:
11:22:dd:9d:cc:de:f8:af:f1:d7:b1:a2:2c:3a:18:ee:4d:e3:
7b:98:7e:7e:84:b4:39:28:7b:dd:70:32:e6:a8:7b:e5:ff:24:
3f:74:2d:ee:ed:e5:fe:f7:cd:9d:72:a1:b9:e3:82:40:52:13:
80:82:b8:12:ac:d7:f4:56:98:f2:ad:a6:91:ac:e3:80:d6:03:
8a:cd:5f:50:b7:65:7c:4a:2d:aa:60:8a:b1:02:74:bf:69:bc:
1f:0e:21:9a:25:21:9a:42:60:49:8e:0f:3a:fa:f3:f4:fd:c1:
f0:cc:65:0f:c6:82:e3:83:ca:1e:6f:20:2c:41:38:71:64:c9:
b6:15:59:7a:36:45:d1:e5:f6:db:eb:2f:21:1f:22:68:4a:8f:
6d:3e:60:b2:db:84:8f:1b:bb:04:9b:81:a1:6e:04:3f:ae:3e:
be:df:1b:8b:28:22:cc:35:c2:76:d4:44:fc:5a:11:e3:bc:82:
4d:c9:29:df:5b:21:0f:d3:d1:86:99:ba:1e:d5:7f:3a:b6:7d:
0e:65:35:00:8e:94:18:6d:09:99:fc:e9:d3:e9:08:b9:f2:1e:
83:84:77:b6:18:2a:7b:58:c9:0b:de:61:89:fd:98:2a:8a:41:
c9:f8:56:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:00:40 2025 by rpki-client