Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZNgBxV8_DM_gSN5rcULmYsLNCIY.roa
File: ZNgBxV8_DM_gSN5rcULmYsLNCIY.roa (raw, json)
Hash identifier: kK+C1JAwYS+iCUAY4UlHWeCvNoC5u+W/TSsm3OSMWro=
Subject key identifier: 64:D8:01:C5:5F:3F:0C:CF:E0:48:DE:6B:71:42:E6:62:C2:CD:08:86
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 045D
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZNgBxV8_DM_gSN5rcULmYsLNCIY.roa
Signing time: Wed 18 Dec 2024 02:24:12 +0000
ROA not before: Wed 18 Dec 2024 02:24:12 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 211.18.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1117 (0x45d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:24:12 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=64D801C55F3F0CCFE048DE6B7142E662C2CD0886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e0:fa:84:e4:23:76:a1:2c:b0:3f:f5:ff:0e:
74:21:df:b6:5c:98:24:ae:33:05:6b:5d:7c:29:24:
98:70:05:10:b6:43:61:8e:ec:fc:75:cf:51:05:b3:
bb:7b:00:b4:d0:30:80:68:ee:08:47:a6:97:10:36:
41:0a:6d:7c:d7:80:26:c4:ac:a7:bc:54:6b:e8:4c:
a1:ad:70:24:b4:92:93:9f:b0:de:6d:9a:4d:f9:ae:
b0:70:c2:34:4b:e1:77:5f:4d:b7:43:01:9c:39:dd:
fb:b9:1e:e3:54:cc:d2:a7:d7:90:ef:83:26:28:68:
b0:ba:2a:58:48:7e:af:3d:58:62:1b:ab:43:58:fd:
61:25:3f:85:26:9e:20:af:6f:91:b2:03:f3:ee:c4:
f4:7a:a0:0b:b4:7d:bc:ef:ae:9f:c2:56:b5:ab:96:
da:87:de:f6:f9:78:18:f2:b8:c6:1b:0e:23:c4:0a:
f6:1b:6d:ef:6d:36:ce:12:68:e9:07:40:ca:03:d1:
1c:24:cb:ff:9b:fb:72:0b:d9:43:e6:0e:f2:51:4b:
a6:03:d0:48:4d:27:7a:ad:54:68:c5:4b:0a:7e:49:
c1:d0:44:5e:3b:4c:f6:87:3c:ee:e9:42:49:4e:79:
e5:c0:44:2f:99:9a:2e:8d:a2:7a:d6:5d:46:1c:c4:
c9:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:D8:01:C5:5F:3F:0C:CF:E0:48:DE:6B:71:42:E6:62:C2:CD:08:86
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/ZNgBxV8_DM_gSN5rcULmYsLNCIY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.18.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:b8:cb:d7:55:67:10:06:13:b4:0f:d9:5e:2e:79:6c:bd:85:
95:2e:a4:b9:81:73:0a:51:e5:ff:15:29:fe:7e:d9:c0:3d:76:
83:7e:92:df:86:64:87:d5:42:a3:57:3c:fe:01:45:06:f0:ea:
d5:2c:58:99:04:be:d8:16:f7:82:b3:f0:d0:66:cc:e5:60:32:
2a:45:05:17:bf:38:37:9f:b3:9d:60:d1:7e:06:27:88:ab:95:
25:46:7e:9b:56:ad:e0:67:76:b1:2d:66:fd:a2:f4:fd:1d:e1:
35:ed:0e:9f:d4:29:9a:95:03:21:b1:fc:7d:9a:a8:e6:f5:fd:
24:1b:93:f2:c1:70:ca:01:82:ea:e0:6c:12:51:ac:3d:0a:c8:
86:2c:51:c6:67:f3:f0:26:74:81:ba:85:b5:7b:34:0c:4d:5d:
ba:79:e9:df:a1:0a:f7:04:de:e5:ca:2a:a2:d5:9a:78:14:8a:
a4:3f:e6:05:d7:f6:08:db:bb:e0:8a:97:23:0d:c8:aa:04:f2:
44:2a:12:fd:41:6c:20:d5:9f:52:f3:48:05:b9:64:e7:bb:e8:
3f:8d:9e:dd:90:11:a6:83:f8:92:de:02:d4:64:ca:8a:25:63:
b2:13:0e:6b:71:fe:c8:67:95:4e:51:c5:79:a5:b4:3c:c8:a9:
3f:bf:7f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:33:00 2025 by rpki-client