Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/KB1K_cRM_ZK3JWigdMA5C-PxXf4.roa
File: KB1K_cRM_ZK3JWigdMA5C-PxXf4.roa (raw, json)
Hash identifier: 3pK6DJH52ElfMG4lGqQjvdI7XRtpTAsZ5KYEKVKMX1A=
Subject key identifier: 28:1D:4A:FD:C4:4C:FD:92:B7:25:68:A0:74:C0:39:0B:E3:F1:5D:FE
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 044F
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KB1K_cRM_ZK3JWigdMA5C-PxXf4.roa
Signing time: Wed 18 Dec 2024 02:24:05 +0000
ROA not before: Wed 18 Dec 2024 02:24:05 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 220.217.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1103 (0x44f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:24:05 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=281D4AFDC44CFD92B72568A074C0390BE3F15DFE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:66:d3:e3:e0:9a:d0:a9:1d:75:ba:86:a1:0f:
ba:63:90:99:52:21:e2:d0:87:17:dd:ff:51:49:1b:
86:f4:ef:cc:cc:39:c8:c7:5c:d4:10:13:0e:80:9b:
ef:ce:01:b6:d6:96:5d:0a:2f:f9:05:19:06:e0:46:
76:cb:1d:37:9c:78:ee:d1:42:b4:f6:76:77:e0:53:
92:72:de:7d:a0:ea:b7:7d:1e:03:3c:e6:ae:54:32:
80:53:41:04:34:83:5d:52:f8:6b:b2:fa:bd:44:d7:
2a:a2:56:cc:75:97:54:a1:d1:c3:53:8f:21:82:57:
97:8a:d2:48:bd:a9:f8:e6:a6:d0:89:73:0a:04:7f:
01:12:4f:60:8d:a8:04:6d:ee:66:8e:c3:b1:14:f6:
6d:2b:83:e0:59:fd:e8:aa:7b:f7:42:aa:df:0e:92:
da:88:5b:50:1f:1c:fb:a6:fc:61:39:54:74:55:25:
0a:42:b1:6c:50:d7:85:74:53:9e:b1:91:49:e1:e2:
98:a1:83:29:e4:4b:67:4a:ab:0e:e6:b0:77:db:24:
94:98:82:15:52:e8:3a:33:a5:99:7c:bc:30:40:26:
7b:0f:f9:de:29:02:d9:70:f5:31:04:af:e2:fa:19:
28:8e:78:37:c2:22:3b:a9:d4:b2:94:23:5e:06:5c:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1D:4A:FD:C4:4C:FD:92:B7:25:68:A0:74:C0:39:0B:E3:F1:5D:FE
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/KB1K_cRM_ZK3JWigdMA5C-PxXf4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.217.0.0/16
Signature Algorithm: sha256WithRSAEncryption
9e:84:c0:60:be:e9:59:c2:89:0d:87:3b:6d:d2:df:cc:61:2e:
11:ef:0f:a6:48:25:7a:c3:df:4d:03:1a:83:e2:77:3d:91:e3:
db:43:76:2b:f4:be:55:ef:57:96:28:14:cc:c9:36:6e:f7:b6:
9a:f1:6e:4b:c4:57:97:79:41:10:e4:8a:99:c2:18:91:54:cd:
98:46:4d:1a:7f:0a:65:6a:94:56:7d:aa:1d:be:d7:0a:74:dd:
cf:d7:a0:b2:6d:ed:04:8e:96:3c:bc:60:30:15:58:25:20:6e:
ba:6b:77:4a:80:57:32:26:98:31:eb:04:28:56:a4:f5:f3:8c:
2c:e2:5b:b3:14:93:97:85:50:52:57:ff:45:41:fc:88:ff:b4:
84:8f:a8:2b:4f:2c:45:f1:df:c1:2c:ae:5b:63:f5:13:85:f9:
ba:2d:97:e6:a4:5b:66:52:2e:61:6f:9a:71:f8:2b:16:bf:c8:
e7:07:00:0c:86:cd:f5:df:15:0b:22:fc:97:63:83:8e:fb:f1:
c8:8a:b2:5c:68:72:0d:9a:5e:bc:7b:6d:03:a0:6c:e7:d3:d2:
4b:24:77:09:41:ab:9d:16:1d:92:e1:fb:54:ee:10:80:05:65:
c6:ea:75:42:48:b1:80:68:9f:fe:ff:72:4f:e2:14:8d:97:fe:
2a:6f:03:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:41:22 2025 by rpki-client