Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/o8D_zaiMYF7ylF2ewgc6OSIa_SY.roa
File: o8D_zaiMYF7ylF2ewgc6OSIa_SY.roa (raw, json)
Hash identifier: CFFh0de/8/II3FE+tiA92ZA64oOP9zJ+WaA7nMpWiGI=
Subject key identifier: A3:C0:FF:CD:A8:8C:60:5E:F2:94:5D:9E:C2:07:3A:39:22:1A:FD:26
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0488
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o8D_zaiMYF7ylF2ewgc6OSIa_SY.roa
Signing time: Wed 18 Dec 2024 02:26:30 +0000
ROA not before: Wed 18 Dec 2024 02:26:30 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 119.104.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1160 (0x488)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:26:30 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=A3C0FFCDA88C605EF2945D9EC2073A39221AFD26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5c:e3:d7:26:58:e1:f6:00:b2:df:b1:3a:55:
1b:1c:83:d0:ac:55:05:2e:0c:ba:a7:5d:f6:1d:51:
d4:89:c1:8e:3a:9c:c1:90:af:77:0d:5e:29:54:e5:
d5:e2:67:54:32:c6:37:36:fe:04:7c:de:5b:ef:36:
55:77:ac:3d:6f:45:ed:26:f1:6e:ef:b7:4e:13:6b:
80:90:b7:cb:73:b3:c3:6e:ae:eb:48:7a:ad:82:ec:
e7:f4:ca:12:9d:be:92:b3:d1:94:b3:41:5c:e6:4d:
2d:93:67:bf:b4:ca:83:f0:69:27:fd:a1:d9:01:dd:
17:72:10:9e:f3:c2:98:fa:e6:0d:b4:68:d4:1a:68:
d9:52:c8:09:3c:45:9c:66:81:43:97:76:31:6f:c7:
04:1f:cf:67:7a:c4:ab:ca:5c:1e:73:05:73:1c:12:
6f:18:de:84:96:99:b4:06:d2:e0:b9:8e:c7:47:b5:
59:c6:44:e0:17:b9:3e:cb:2e:dd:3e:8c:e7:b8:3a:
db:17:67:b9:f7:f0:33:b0:af:31:85:29:95:ef:e6:
b6:6a:ae:28:8f:26:ab:01:39:cc:bc:b5:d7:a3:a1:
5e:e6:9c:bd:06:7c:2d:22:80:d1:79:2e:23:31:06:
14:12:bc:b6:97:ce:94:b0:57:d4:df:ab:b1:b2:a4:
d5:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:C0:FF:CD:A8:8C:60:5E:F2:94:5D:9E:C2:07:3A:39:22:1A:FD:26
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o8D_zaiMYF7ylF2ewgc6OSIa_SY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
119.104.0.0/16
Signature Algorithm: sha256WithRSAEncryption
33:4d:d3:13:e4:0b:6e:be:d6:a3:fd:f3:c0:2a:71:17:6d:65:
21:49:8a:f2:e7:18:92:08:bf:59:92:60:95:95:54:19:52:b5:
8a:34:84:60:94:73:fc:9b:1c:99:2f:e8:9a:df:77:d9:c4:67:
1b:a3:0f:9d:97:2f:47:4c:f8:ec:7b:b8:50:91:50:19:f4:83:
56:c1:06:7b:2e:de:13:ee:21:94:0b:22:36:2b:7e:5d:0b:73:
bf:d5:14:36:9e:01:33:b0:18:af:49:2c:14:05:21:34:1c:b4:
83:55:2a:07:65:2b:33:68:39:e5:67:2c:06:16:a5:cd:23:01:
40:44:81:7d:9a:c3:86:df:5d:2a:1b:ad:f1:d7:2c:db:29:24:
48:b8:ae:83:df:34:48:ed:1f:8f:3f:02:a0:2f:94:34:7b:90:
e4:21:3e:cb:3d:cc:30:9b:03:0c:d9:30:8d:b8:e4:cc:1e:05:
28:49:aa:c6:21:45:82:74:09:4f:ac:82:25:04:b3:d5:e8:6b:
98:74:42:50:5e:09:10:03:3d:3c:6f:bb:56:cd:da:1d:93:7e:
62:36:c0:2d:3e:6b:ba:da:70:11:00:c1:52:63:8f:d7:6c:09:
a9:04:35:42:21:77:c6:f5:04:cf:92:e8:a1:c5:f9:ce:49:5d:
44:33:a1:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:03:02 2025 by rpki-client