Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/a_8rBjQHYFXBpl51U0kNani7-P0.roa
File: a_8rBjQHYFXBpl51U0kNani7-P0.roa (raw, json)
Hash identifier: NtCSbLpxyXQF0qPcB3UIDZQJITgSY4skVUaHbA9Pd40=
Subject key identifier: 6B:FF:2B:06:34:07:60:55:C1:A6:5E:75:53:49:0D:6A:78:BB:F8:FD
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04D3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/a_8rBjQHYFXBpl51U0kNani7-P0.roa
Signing time: Wed 18 Dec 2024 02:36:59 +0000
ROA not before: Wed 18 Dec 2024 02:36:59 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 61.215.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1235 (0x4d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:36:59 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=6BFF2B0634076055C1A65E7553490D6A78BBF8FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ad:f4:b6:19:ab:47:05:5c:05:3d:03:e1:30:
85:54:1e:3d:55:5e:d7:f0:46:4a:d6:40:db:98:1d:
c9:de:bb:7c:0d:d0:c7:db:95:28:63:1e:e6:c3:1e:
c8:80:08:15:c9:79:5a:28:54:6d:b4:8c:cc:7b:90:
8b:ff:77:e3:c8:95:b8:cb:51:db:d9:0d:c1:bf:1f:
c9:ab:3e:75:c6:5c:b8:08:68:00:7a:36:ce:02:29:
da:69:1d:2d:d6:05:c8:8b:68:70:c2:b3:f0:fe:65:
1f:db:ba:61:fe:a3:ca:ce:b3:b2:ea:c8:e5:41:0b:
41:02:39:94:96:25:e4:80:ea:8c:2c:04:98:f6:38:
db:32:dc:4b:d4:9c:83:bb:bc:c2:6e:95:78:97:16:
19:cf:d4:73:d8:d6:60:eb:c5:96:fb:ec:8a:34:d6:
4c:2d:c8:f5:b4:94:40:c8:9d:84:8c:66:49:26:2b:
28:19:4c:0a:1e:d9:af:34:9e:f2:1e:ec:5b:a0:f1:
09:3f:65:39:b2:bc:35:38:6a:4a:74:83:a2:64:2e:
1b:f6:12:85:b7:f1:c7:f8:dc:0b:38:a0:1c:71:60:
d1:a2:a3:5f:b7:96:32:2e:4a:5d:91:92:9e:09:b1:
7a:0d:5c:9f:29:dd:cf:38:79:9b:44:25:70:30:42:
86:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:FF:2B:06:34:07:60:55:C1:A6:5E:75:53:49:0D:6A:78:BB:F8:FD
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/a_8rBjQHYFXBpl51U0kNani7-P0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.215.0.0/17
Signature Algorithm: sha256WithRSAEncryption
ac:98:5c:4a:b2:73:29:af:9a:83:30:5d:04:bf:8b:36:9c:9c:
3e:bf:35:48:6a:8f:10:b3:5b:fb:b2:3d:a4:fa:21:0d:23:48:
99:cf:8b:7a:d6:9b:43:8d:39:f8:bc:31:af:fa:55:06:86:26:
dc:31:c6:f9:00:d8:cf:0d:7e:33:ae:06:bb:00:1c:86:b7:62:
de:da:cc:55:a2:f5:72:56:39:38:1f:79:ca:70:e0:54:bb:03:
e0:8f:a0:9e:32:f2:48:18:98:52:bb:47:78:12:fb:ae:60:db:
63:dd:5d:77:1a:2e:8f:2c:34:f5:25:01:51:f7:d4:70:2e:f0:
44:09:73:1f:0f:56:44:24:5c:f2:e4:a9:23:25:c6:ab:fa:19:
db:85:00:d1:d8:8d:79:bb:b8:63:0d:85:ec:02:ed:49:d5:0d:
5e:a8:7c:bf:f2:7b:5b:3a:c5:a2:4b:e4:06:5c:f0:00:5e:ff:
cf:a1:d1:f7:02:b1:5b:3d:dc:32:a9:25:92:ab:3b:2a:ff:b6:
5a:74:67:c2:e2:13:54:89:f8:d4:07:53:85:4c:36:29:bb:e3:
e6:a4:26:83:7b:a3:45:44:a7:b5:4c:de:0d:4a:24:40:77:ff:
03:80:7a:83:b0:ca:04:a4:f5:98:32:a5:1b:3a:ac:37:e4:9c:
de:83:43:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:04:01 2025 by rpki-client