Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11247/kxblqPbAY2YdapTZeS3qlJLepNI.roa
File: kxblqPbAY2YdapTZeS3qlJLepNI.roa (raw, json)
Hash identifier: WbUs+rzjZjspnt67dMPK6jCfqhnJOVgtRTQ/W/EFQjQ=
Subject key identifier: 93:16:E5:A8:F6:C0:63:66:1D:6A:94:D9:79:2D:EA:94:92:DE:A4:D2
Certificate issuer: /CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Certificate serial: 55
Authority key identifier: FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/kxblqPbAY2YdapTZeS3qlJLepNI.roa
Signing time: Fri 31 May 2024 01:31:09 +0000
ROA not before: Fri 31 May 2024 01:31:09 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 0
IP address blocks: 157.17.128.0/17 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FBC46294A5D56437E19A11AEF9FB9B877690143E
Validity
Not Before: May 31 01:31:09 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=9316E5A8F6C063661D6A94D9792DEA9492DEA4D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f9:ec:03:e3:92:a4:13:55:d3:68:33:64:87:
2e:74:59:70:62:95:45:9d:1e:60:0f:60:51:1a:3c:
f0:18:cf:6c:95:3d:01:db:9a:22:8b:23:02:a6:eb:
8f:fb:61:b5:37:de:bb:b5:b6:10:d9:ba:3c:0c:5c:
7c:bf:7f:4f:68:20:28:3f:00:85:4f:e2:95:7d:52:
d2:5f:5c:2c:fe:48:89:a4:35:50:0c:b2:ea:9e:d4:
09:47:ca:e5:3f:21:7b:fd:8d:03:9a:e4:62:07:54:
44:2c:ac:0b:8f:aa:63:61:55:0d:b2:b8:bd:2d:96:
75:57:2e:bf:92:f4:eb:38:ff:74:4d:2d:d9:d4:ca:
2d:fa:c5:b3:81:80:62:92:3e:5d:0f:b0:7e:ee:78:
c7:ac:c1:98:97:d4:d3:71:4a:c1:ed:24:ec:66:f1:
11:e3:99:e5:47:ca:83:07:2a:94:67:cd:9e:4c:ea:
68:7b:a4:70:a5:47:0b:98:b1:36:90:fc:8f:e7:ba:
0a:fc:79:a6:e1:da:ee:83:45:d7:8e:03:0b:33:6d:
d3:30:14:89:2e:d6:5c:25:2e:bb:e1:a0:c2:47:1b:
cc:d2:2f:0c:58:de:6a:c7:ab:8a:f6:60:a5:d8:73:
34:80:e7:03:aa:bf:c3:03:40:22:ee:81:ae:2a:93:
2e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:16:E5:A8:F6:C0:63:66:1D:6A:94:D9:79:2D:EA:94:92:DE:A4:D2
X509v3 Authority Key Identifier:
keyid:FB:C4:62:94:A5:D5:64:37:E1:9A:11:AE:F9:FB:9B:87:76:90:14:3E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/-8RilKXVZDfhmhGu-fubh3aQFD4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-8RilKXVZDfhmhGu-fubh3aQFD4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11247/kxblqPbAY2YdapTZeS3qlJLepNI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.17.128.0/17
Signature Algorithm: sha256WithRSAEncryption
b1:63:dc:f7:61:76:07:1d:6f:26:49:7f:60:f4:c7:5a:16:10:
4d:29:5a:bd:74:fb:32:39:4b:aa:7e:4b:53:c5:c1:3d:0a:8d:
b4:ef:21:bb:d8:1c:b2:23:87:c7:78:61:de:7a:9d:73:21:a8:
89:d1:e9:3e:11:ca:d5:97:40:a8:7d:c8:6c:84:85:88:92:28:
11:f5:cb:33:2d:e8:67:f5:64:54:74:3e:ab:b4:47:51:53:85:
e3:be:a2:85:43:60:dd:ca:22:60:b0:91:03:03:3d:48:65:57:
f4:11:f0:a2:06:d9:e0:53:15:a2:01:27:0d:ab:60:63:28:10:
14:84:59:51:29:00:c1:4e:cc:a9:cd:13:90:35:cb:f9:2e:f3:
05:be:6b:25:e7:89:20:92:c6:37:d8:3a:73:49:9d:f5:32:85:
0c:8d:c5:ff:76:91:f5:64:f1:e1:42:6a:4f:a5:df:4c:ee:34:
99:9b:c9:22:e3:fb:83:f8:7c:9d:ec:c1:c2:46:71:29:b7:ea:
c9:4c:5b:f2:6e:6b:ae:66:c7:19:d1:03:ba:cf:e0:86:c2:b2:
eb:00:04:66:ff:3c:09:63:11:78:40:db:8e:46:9c:62:51:33:
a6:91:1f:ee:e6:37:8a:f1:fb:ba:37:0e:d1:d6:ca:91:a9:9d:
7a:0f:17:a0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Apr 24 18:52:21 2025 by rpki-client