Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/LbkUdWLkGXVQNFFhqD03Zw0_yR4.roa
File: LbkUdWLkGXVQNFFhqD03Zw0_yR4.roa (raw, json)
Hash identifier: pvwRTDrgmVZ3yQDNxVtyb6zKG2hdsRZBPGuyhydT/K8=
Subject key identifier: 2D:B9:14:75:62:E4:19:75:50:34:51:61:A8:3D:37:67:0D:3F:C9:1E
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 03B0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LbkUdWLkGXVQNFFhqD03Zw0_yR4.roa
Signing time: Wed 18 Dec 2024 02:12:57 +0000
ROA not before: Wed 18 Dec 2024 02:12:57 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 59.128.64.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 944 (0x3b0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:12:57 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=2DB9147562E4197550345161A83D37670D3FC91E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:b1:d1:9c:0a:e8:6e:9e:a0:1b:8b:2a:ce:94:
fa:f3:dd:d7:8e:98:b9:78:39:65:db:e5:79:66:c9:
3f:e5:3a:3c:e5:4f:42:47:10:17:88:e7:82:d5:38:
7b:7e:cd:dd:82:f7:c7:16:40:3d:37:33:e1:48:6b:
45:7c:5c:c0:d8:e4:4e:95:23:df:72:8f:8c:60:00:
29:97:81:f5:cb:79:bc:56:b9:db:33:45:bd:e4:79:
82:6c:d1:99:38:dc:0f:db:48:7f:ea:44:c8:36:64:
c4:9e:8a:fc:db:28:91:24:2c:bd:a3:d7:ed:38:8c:
fa:5a:bf:e2:aa:35:26:a2:f1:2c:a7:87:5d:5f:7c:
73:3f:db:e0:2d:1d:1f:d0:01:a6:11:59:01:3b:1f:
f7:e9:06:fd:a4:9a:71:41:c6:8d:8a:cc:f7:66:0a:
dc:60:82:fd:65:a0:b8:ce:85:da:92:66:de:b2:d3:
e0:2e:7d:b9:5e:a7:a6:fa:85:12:f7:ab:bf:ed:ae:
5a:cf:21:01:f4:af:f2:9e:3a:6b:55:9d:3c:f4:96:
c1:31:ed:6c:d4:47:e9:a4:02:59:73:97:4f:ec:b3:
ac:a3:89:7f:82:25:31:2d:aa:71:08:f1:53:b3:f8:
b4:ae:f5:f3:a6:75:7b:89:18:44:68:c9:d9:fe:db:
ed:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B9:14:75:62:E4:19:75:50:34:51:61:A8:3D:37:67:0D:3F:C9:1E
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/LbkUdWLkGXVQNFFhqD03Zw0_yR4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.128.64.0/19
Signature Algorithm: sha256WithRSAEncryption
a1:6a:7c:d1:34:a1:d3:bd:05:49:48:e1:0c:06:bc:66:59:24:
30:68:6d:ed:a9:6b:7c:4e:97:82:e1:63:7f:ae:32:23:23:3e:
10:72:71:63:17:92:b9:f6:0d:48:de:5a:f6:52:71:ac:2c:ad:
e4:7b:a0:06:77:00:31:05:63:47:bb:a3:32:1a:25:08:ac:14:
c1:42:47:09:d5:bd:98:fa:1b:91:f1:4a:d7:1e:5b:fe:d6:6a:
f9:4f:72:4f:11:83:82:2b:26:d3:e8:31:db:d9:b6:a6:1b:e6:
f8:68:83:3d:96:31:41:e9:f6:b2:64:2d:9a:7c:2e:c3:61:71:
7e:df:89:e7:22:fe:b2:dc:5c:47:a6:e8:25:3d:ab:b5:8a:b0:
75:92:eb:7f:a3:d1:e4:44:db:1f:a0:cf:1d:82:da:0a:16:59:
85:35:71:11:ee:68:c5:9b:33:b8:02:a3:54:aa:cb:26:2e:ba:
69:8f:d6:ac:48:60:09:e2:a0:b7:28:b0:b5:ff:f8:3b:18:e6:
b3:72:5a:4f:ac:f1:e6:61:25:6b:f9:27:5c:85:6d:ab:d3:c5:
e7:44:f9:9a:00:f9:f9:43:d6:55:dd:73:86:75:44:2b:1c:b7:
80:e0:66:10:d2:6b:ef:de:4f:da:79:ef:c4:51:0b:7b:f8:70:
8d:d3:6f:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:24:37 2025 by rpki-client