Route Origin Authorization
$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f32392d3438203d3e20343031313131.roa
File: 323630313a316430303a3a2f32392d3438203d3e20343031313131.roa (raw, json)
Hash identifier: aFGVjRj1mkLmQrUrwNphskFn6i8LIUMG+IauGMPh/os=
Subject key identifier: DE:69:0F:81:12:FB:77:B9:58:D0:55:E9:61:B0:0B:7B:4D:6E:98:77
Certificate issuer: /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial: 097047023D59EF8852106D23CBA4ABED238794DF
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access: rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f32392d3438203d3e20343031313131.roa
Signing time: Thu 26 Dec 2024 21:04:35 +0000
ROA not before: Thu 26 Dec 2024 20:59:35 +0000
ROA not after: Thu 25 Dec 2025 21:04:35 +0000
asID: 401111
IP address blocks: 2601:1d00::/29 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:70:47:02:3d:59:ef:88:52:10:6d:23:cb:a4:ab:ed:23:87:94:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Validity
Not Before: Dec 26 20:59:35 2024 GMT
Not After : Dec 25 21:04:35 2025 GMT
Subject: CN=DE690F8112FB77B958D055E961B00B7B4D6E9877
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:17:0b:d9:76:de:64:f6:50:72:da:92:a2:99:
9b:0e:98:5e:b5:88:53:57:6b:6c:93:4a:65:22:77:
3d:4a:36:8c:14:d9:76:a7:ce:ee:a6:d8:84:dc:78:
50:1b:56:6e:33:18:ad:dc:69:77:c2:2b:f9:f0:6b:
a4:e2:e9:24:6c:6d:92:b2:63:c0:ac:b2:8f:a0:81:
c0:fc:71:ab:4d:f9:61:33:6d:46:7b:98:b3:94:11:
63:af:f5:91:ca:e7:c9:ca:85:2f:0c:eb:43:8f:43:
29:6a:79:1f:cb:49:22:b4:5b:79:0b:1f:72:9c:a9:
86:99:30:82:7b:dd:49:6e:6c:81:83:f9:1d:e9:59:
b4:e1:25:60:c0:1c:03:b4:bb:f0:1c:ab:6f:f5:e8:
a4:52:b5:e8:07:98:7e:0b:4f:1e:e9:8b:cb:6b:18:
0e:96:01:09:af:53:c7:2b:cd:c7:53:81:d9:c4:c3:
b0:8f:dd:c3:47:d2:6f:7a:54:3c:b9:0c:b9:26:15:
48:28:04:bc:bd:ce:ce:ea:85:90:84:af:2c:65:1f:
56:c7:a2:79:1b:cf:4f:eb:b7:6e:5f:5f:b7:e0:21:
6b:66:a1:67:ae:0b:bf:5e:1e:c8:58:4c:d7:4c:c4:
95:cb:3d:4f:c4:f6:53:32:44:a8:77:c9:4a:a1:be:
61:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:69:0F:81:12:FB:77:B9:58:D0:55:E9:61:B0:0B:7B:4D:6E:98:77
X509v3 Authority Key Identifier:
keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject Information Access:
Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430303a3a2f32392d3438203d3e20343031313131.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2601:1d00::/29
Signature Algorithm: sha256WithRSAEncryption
8e:15:b9:c7:20:06:a9:a8:48:e4:a0:f0:6b:60:00:f1:55:bf:
64:88:29:2f:a3:de:6e:7c:38:4b:38:b5:f9:3c:85:8f:49:3f:
72:e8:69:0c:0d:6d:b2:27:e8:cd:a3:cd:0c:6f:cf:b5:c8:84:
96:ec:9c:11:6b:9a:46:28:98:33:d6:86:4c:b6:67:0f:bd:04:
01:1c:12:59:67:01:25:8e:0d:ed:d2:55:e0:1b:5c:21:6d:c4:
da:48:22:3e:58:9d:83:10:a2:e0:69:ab:9d:c0:d1:c1:2e:56:
27:ac:ce:ee:c6:29:ad:04:cc:09:b4:fb:b6:92:14:6f:7f:6c:
c0:84:bd:67:8d:a4:90:b2:a5:07:ad:19:ff:fb:61:91:af:f2:
e4:e7:f0:56:a1:22:3d:52:bf:a9:11:27:fa:ca:fc:b4:b0:3a:
83:9d:6f:ea:47:bb:a6:6c:ef:b0:a4:8a:5d:09:22:2f:10:4f:
f5:19:ae:6b:0f:5a:bf:3d:ea:4a:2b:ba:d3:08:44:4d:46:50:
c1:ac:d2:6a:da:21:08:f3:d8:b9:74:dd:32:6b:6a:d9:a6:3e:
6b:69:70:ef:b0:4b:f4:a8:22:84:73:f9:08:05:66:86:bb:b8:
44:4b:d1:b2:d8:27:32:a6:81:8e:54:d4:c6:73:4c:44:8d:42:
b6:c7:9b:95
-----BEGIN CERTIFICATE-----
MIIFZTCCBE2gAwIBAgIUCXBHAj1Z74hSEG0jy6Sr7SOHlN8wDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyY2YyYzQ4MzAwZjRjZDdmYTM4YzllNzEyOGI4ZDIwZWZl
ZDlkODY4MjQ5YjI1ZTIzYWYwHhcNMjQxMjI2MjA1OTM1WhcNMjUxMjI1MjEwNDM1
WjAzMTEwLwYDVQQDEyhERTY5MEY4MTEyRkI3N0I5NThEMDU1RTk2MUIwMEI3QjRE
NkU5ODc3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkxcL2XbeZPZQ
ctqSopmbDphetYhTV2tsk0plInc9SjaMFNl2p87uptiE3HhQG1ZuMxit3Gl3wiv5
8Guk4ukkbG2SsmPArLKPoIHA/HGrTflhM21Ge5izlBFjr/WRyufJyoUvDOtDj0Mp
ankfy0kitFt5Cx9ynKmGmTCCe91JbmyBg/kd6Vm04SVgwBwDtLvwHKtv9eikUrXo
B5h+C08e6YvLaxgOlgEJr1PHK83HU4HZxMOwj93DR9JvelQ8uQy5JhVIKAS8vc7O
6oWQhK8sZR9Wx6J5G89P67duX1+34CFrZqFnrgu/Xh7IWEzXTMSVyz1PxPZTMkSo
d8lKob5h4wIDAQABo4ICZTCCAmEwHQYDVR0OBBYEFN5pD4ES+3e5WNBV6WGwC3tN
bph3MB8GA1UdIwQYMBaAFIeqTl1w68Bolef6JE6ArrN5HLM/MA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL290by53YWt1d2FrdS5uZS5q
cC9wa2kvaGEvMC84N0FBNEU1RDcwRUJDMDY4OTVFN0ZBMjQ0RTgwQUVCMzc5MUNC
MzNGLmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1iZDdiLTRiMzMt
OWE4OC01YjIyZDJhODMzN2QvYzlhYjI3YTYtNzYyMi00OGVjLTllMzMtMTUyYmFi
MmI0YTJiL2NmMmM0ODMwMGY0Y2Q3ZmEzOGM5ZTcxMjhiOGQyMGVmZWQ5ZDg2ODI0
OWIyNWUyM2FmLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5j
Oi8vb3RvLndha3V3YWt1Lm5lLmpwL3BraS9oYS8wLzMyMzYzMDMxM2EzMTY0MzAz
MDNhM2EyZjMyMzkyZDM0MzgyMDNkM2UyMDM0MzAzMTMxMzEzMS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMF
AyYBHQAwDQYJKoZIhvcNAQELBQADggEBAI4VuccgBqmoSOSg8GtgAPFVv2SIKS+j
3m58OEs4tfk8hY9JP3LoaQwNbbIn6M2jzQxvz7XIhJbsnBFrmkYomDPWhky2Zw+9
BAEcEllnASWODe3SVeAbXCFtxNpIIj5YnYMQouBpq53A0cEuVieszu7GKa0EzAm0
+7aSFG9/bMCEvWeNpJCypQetGf/7YZGv8uTn8FahIj1Sv6kRJ/rK/LSwOoOdb+pH
u6Zs77Ckil0JIi8QT/UZrmsPWr896korutMIRE1GUMGs0mraIQjz2Ll03TJratmm
PmtpcO+wS/SoIoRz+QgFZoa7uERL0bLYJzKmgY5U1MZzTESNQrbHm5U=
-----END CERTIFICATE-----
Generated at Thu Apr 24 17:47:24 2025 by rpki-client