Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/A3B66-OP4N0JoNXwO5l-wER44hA.roa
File: A3B66-OP4N0JoNXwO5l-wER44hA.roa (raw, json)
Hash identifier: wKRIkj8jfooT8ex8O2g4b7kSVDwKj6IxhneVg714oJQ=
Subject key identifier: 03:70:7A:EB:E3:8F:E0:DD:09:A0:D5:F0:3B:99:7E:C0:44:78:E2:10
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0407
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/A3B66-OP4N0JoNXwO5l-wER44hA.roa
Signing time: Wed 18 Dec 2024 02:18:53 +0000
ROA not before: Wed 18 Dec 2024 02:18:53 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 59.128.96.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1031 (0x407)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:18:53 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=03707AEBE38FE0DD09A0D5F03B997EC04478E210
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:86:e7:1b:aa:a9:31:fb:c5:5a:72:27:9f:15:
48:e6:eb:90:5f:2b:8f:e3:1f:2d:e3:98:94:85:35:
90:18:6f:6d:36:46:d1:db:63:00:f7:39:ec:3a:a6:
d0:80:8d:87:21:f6:39:84:73:f8:8f:8a:ad:d3:c2:
55:41:94:85:f0:ab:1e:fe:82:ee:2f:0f:96:82:88:
a1:a1:32:19:72:5d:f6:32:a3:d7:63:fc:6e:a5:3c:
35:77:67:57:53:6b:6c:10:80:d5:d1:18:87:ae:16:
bd:46:97:18:e6:9f:28:f1:e3:ce:17:1c:ef:b8:c8:
fb:af:95:b4:83:9e:4c:87:dd:10:03:7d:90:a2:79:
e3:54:70:60:87:b8:5e:81:de:ed:70:63:58:be:9a:
cf:b9:5a:74:53:12:7d:d5:01:16:9e:61:c6:09:01:
e7:8d:26:14:89:0b:cc:fc:aa:d5:5c:f5:34:df:ef:
9a:61:8f:a6:72:c8:26:87:d5:d2:b3:f4:ec:9a:ed:
8a:5b:09:96:89:de:98:0d:44:7a:71:87:04:75:0b:
e0:84:26:e9:eb:dd:df:fb:83:25:2c:70:1e:93:5f:
a2:7f:7b:d9:24:27:fe:44:a7:26:9c:cf:08:2b:62:
a6:58:06:8b:31:1b:ab:ef:41:db:1d:2c:e5:3d:84:
cf:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:70:7A:EB:E3:8F:E0:DD:09:A0:D5:F0:3B:99:7E:C0:44:78:E2:10
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/A3B66-OP4N0JoNXwO5l-wER44hA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.128.96.0/19
Signature Algorithm: sha256WithRSAEncryption
3f:cd:96:47:68:27:aa:1c:30:27:68:66:44:61:4c:6d:a0:6e:
fb:ec:aa:84:14:4a:2a:80:53:43:e9:c1:7f:8e:df:9a:76:74:
31:6f:6b:d0:c8:ee:3d:6a:d9:5c:e2:0a:15:b4:d7:58:6a:bc:
b0:8a:2a:df:c3:3d:a2:09:c1:41:8c:46:a4:6f:14:0c:5b:52:
99:fd:47:62:28:d6:99:7c:08:a4:70:71:0f:9d:f5:6a:7d:b3:
79:cb:64:3d:d8:a4:08:58:17:b7:eb:43:0a:7c:33:2d:66:6b:
c6:7b:32:35:41:03:9a:13:e3:19:27:d4:a0:dd:cc:07:21:d2:
ac:d4:2f:5e:40:5c:61:e1:c7:5b:da:42:1d:0b:b3:f2:90:0d:
8d:80:70:e1:b1:82:04:5a:45:25:69:b2:18:ed:8c:73:bc:8a:
f6:df:0c:af:ce:66:ca:1d:d0:44:2a:f7:1c:91:23:a8:d4:dc:
3f:05:56:8d:e0:99:24:d9:c7:13:02:be:cf:5d:6d:9f:05:c2:
fe:7f:64:3b:8f:37:e1:39:e8:d9:ac:ec:6a:91:22:87:8f:19:
ae:74:5c:19:bd:ed:29:8e:25:31:fd:3a:49:e0:92:04:ac:a1:
02:08:bf:08:56:43:77:b2:9b:a8:44:04:eb:f6:7e:11:b7:ee:
e3:64:38:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:53:56 2025 by rpki-client