Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/fcvn8eyZjGNX4HYfl4CNKqpSXA4.roa
File: fcvn8eyZjGNX4HYfl4CNKqpSXA4.roa (raw, json)
Hash identifier: zI7WpT/LECYsNlxOI6S92hffehVdbrfTOPGee2ACb7A=
Subject key identifier: 7D:CB:E7:F1:EC:99:8C:63:57:E0:76:1F:97:80:8D:2A:AA:52:5C:0E
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04D2
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fcvn8eyZjGNX4HYfl4CNKqpSXA4.roa
Signing time: Wed 18 Dec 2024 02:36:59 +0000
ROA not before: Wed 18 Dec 2024 02:36:59 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 210.238.3.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1234 (0x4d2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:36:59 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=7DCBE7F1EC998C6357E0761F97808D2AAA525C0E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:72:ff:d8:96:0f:6b:9a:d9:07:44:55:9e:88:
83:e6:46:c7:42:05:9b:7d:c4:70:6b:45:15:02:a1:
d1:12:46:a9:34:fe:e5:5a:d8:d1:8a:2b:96:65:94:
1f:60:f3:6d:16:67:55:74:e8:f4:c8:8e:f6:b4:70:
da:73:89:34:bc:77:0f:ab:d2:d1:25:f3:33:7b:6d:
fb:28:e8:59:1d:86:72:57:18:f0:bb:8a:f4:74:72:
4b:64:e0:99:7d:c7:a4:39:2c:ea:a5:6f:ce:10:e2:
b0:59:fd:f0:81:c7:ba:b9:1d:aa:f3:46:db:89:b6:
ad:64:1a:af:bf:b5:a2:4a:59:8d:c7:02:ad:70:ed:
96:6f:1e:a5:ef:16:4c:a2:66:72:79:cf:08:f9:61:
a3:57:02:3b:85:8d:05:2f:c9:b5:49:96:cc:c2:b1:
a5:46:12:cd:65:f7:66:15:3a:7d:5d:cd:8c:63:d8:
ce:27:23:bc:63:52:85:0f:f4:d4:b0:8b:bd:4d:ad:
46:ee:cf:9d:52:55:8d:3c:f9:25:e0:19:27:ca:5b:
3e:33:8f:1d:bf:5b:6b:33:21:5c:0d:70:07:0f:19:
8b:f2:c3:89:b3:d4:7c:78:f9:7d:80:b3:13:7d:e5:
63:32:ec:1b:ff:48:76:40:55:60:2f:63:05:ad:9c:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:CB:E7:F1:EC:99:8C:63:57:E0:76:1F:97:80:8D:2A:AA:52:5C:0E
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/fcvn8eyZjGNX4HYfl4CNKqpSXA4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.238.3.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:d9:9d:2b:5f:af:31:ab:35:f5:93:22:a2:6f:63:37:85:93:
5c:43:64:25:46:16:56:1b:ca:be:89:ff:23:42:fc:8d:3e:86:
61:d2:90:65:4f:b1:c7:19:05:cd:9f:9a:19:da:b5:35:8e:67:
99:97:90:77:0a:f5:08:11:b7:09:c5:00:7e:bb:3c:7d:b6:6d:
d6:33:50:56:db:12:12:84:ed:29:83:15:80:91:21:b2:67:03:
b1:44:df:e6:40:7f:f8:ed:0a:bb:28:de:43:01:92:90:6c:df:
e0:c2:83:6d:1e:f7:35:e7:06:77:50:f2:b0:84:e8:68:eb:8c:
be:13:7d:f3:54:8e:4d:ea:ed:2b:19:7d:bd:3f:0b:df:98:04:
9f:da:e4:e1:bd:1c:e8:23:6d:ab:e2:2a:78:bf:34:8f:37:3b:
49:da:7a:4c:67:a7:37:9e:db:1e:20:5c:f4:23:ce:60:bf:d0:
5f:0b:f2:01:cf:00:36:e0:87:59:66:4d:4a:2f:d9:39:94:5f:
a1:c0:c7:85:59:79:b1:7a:e3:6b:bf:c2:02:6b:fb:34:92:cc:
5d:89:f7:6f:08:82:92:77:24:88:f2:e0:a6:0e:39:ca:a4:48:
a4:a1:83:74:b7:72:d4:3c:98:ab:16:67:7a:4b:58:74:9b:66:
f7:55:f2:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 03:01:57 2025 by rpki-client