Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/HaZJGFYAktI-2vWa2XHJ-DGy0KI.roa
File: HaZJGFYAktI-2vWa2XHJ-DGy0KI.roa (raw, json)
Hash identifier: QxRcob9CQhAo8QKDVuxmOAe6TaLLencp1LWvFnGWSiw=
Subject key identifier: 1D:A6:49:18:56:00:92:D2:3E:DA:F5:9A:D9:71:C9:F8:31:B2:D0:A2
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 040D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HaZJGFYAktI-2vWa2XHJ-DGy0KI.roa
Signing time: Wed 18 Dec 2024 02:18:55 +0000
ROA not before: Wed 18 Dec 2024 02:18:55 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 118.159.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1037 (0x40d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:18:55 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=1DA64918560092D23EDAF59AD971C9F831B2D0A2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:f7:69:99:a5:50:20:90:48:df:95:6d:ff:5a:
42:02:d3:f0:5c:5a:a6:c4:04:47:6f:3e:80:10:2a:
2b:bb:54:36:b4:9a:be:4a:12:11:d7:64:22:c7:db:
19:37:75:df:68:d3:31:8d:20:59:a4:1f:80:9a:2b:
df:b6:5b:1d:bd:b2:d0:ee:75:d4:81:95:c4:d8:7d:
8d:b5:76:92:5e:bc:9a:40:b7:4a:cd:f8:8a:23:b9:
ee:c3:3e:0d:ab:87:10:1f:b8:b7:67:0e:42:15:10:
d7:f9:1e:ed:be:33:71:0c:78:10:81:6e:23:35:d3:
9e:0a:53:76:8f:28:1e:76:c0:20:23:f8:3b:85:45:
83:3b:ad:d8:8d:f1:89:f3:0b:17:32:b1:1f:62:33:
f9:34:fe:9f:09:ed:d1:f0:44:0f:f2:33:60:08:02:
7f:8f:b4:2b:4a:b2:9b:4c:6c:28:6e:9c:8b:0e:9f:
d9:cf:a5:d9:18:d0:a0:83:9d:1b:f3:7f:1b:f4:e0:
da:cd:2e:2a:92:65:19:99:89:c1:b8:44:b0:05:54:
76:d0:1d:6b:8c:d2:2a:f3:7b:07:e5:4a:da:20:10:
ba:89:30:a9:8a:53:5a:79:87:d1:5e:ce:e5:3b:cb:
93:a3:42:30:30:d7:f8:6d:aa:4f:9d:a6:80:1a:a8:
15:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A6:49:18:56:00:92:D2:3E:DA:F5:9A:D9:71:C9:F8:31:B2:D0:A2
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/HaZJGFYAktI-2vWa2XHJ-DGy0KI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.159.0.0/17
Signature Algorithm: sha256WithRSAEncryption
13:b5:9f:47:df:50:09:ab:ad:75:0d:47:ed:96:a9:07:4c:79:
88:94:f0:e4:1b:21:b1:ca:98:93:fb:4a:6f:26:89:3d:0a:02:
dd:5c:80:ab:a8:49:eb:ef:d5:cf:c9:c2:01:13:99:f0:17:ef:
37:1f:0c:57:1a:37:2c:a9:99:ec:e1:a4:a1:53:2f:70:4a:59:
a6:92:85:f0:31:78:27:90:5a:55:d2:57:50:c7:4e:85:7e:e5:
01:1a:9b:d5:c4:a7:4a:64:c0:4e:93:74:76:52:a7:12:14:d3:
be:75:cb:aa:7a:ce:d5:c4:b6:26:e5:df:15:f7:b8:88:f6:17:
6e:2d:89:69:3f:76:ef:77:6d:f6:af:08:1d:63:40:42:95:78:
74:fe:c2:15:3a:cb:c2:19:4e:01:eb:f4:9d:fe:58:07:f1:47:
c6:69:b3:76:43:f2:da:9b:04:68:a7:2d:cf:87:4e:d8:f2:d3:
b5:26:c6:23:97:04:03:cb:c1:57:1c:5d:13:4f:6d:f1:2a:9e:
c1:52:c8:14:d1:bf:fb:50:b8:f6:f9:f5:99:27:35:3e:26:66:
88:dd:cc:65:f1:da:74:77:2f:7c:bb:54:10:15:4d:4d:51:46:
4a:a6:7b:7a:81:e2:14:0e:89:cc:e4:7d:7f:0d:e7:27:00:5a:
01:cb:bb:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:21:10 2025 by rpki-client