Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/v4TxTHD9i0Uw1HwFmcKiLcNcjlw.roa
File: v4TxTHD9i0Uw1HwFmcKiLcNcjlw.roa (raw, json)
Hash identifier: P0iL25b2ih2yUmDpPBMALE8bi/ijjgVhCDmLyYEyLlM=
Subject key identifier: BF:84:F1:4C:70:FD:8B:45:30:D4:7C:05:99:C2:A2:2D:C3:5C:8E:5C
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 040A
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v4TxTHD9i0Uw1HwFmcKiLcNcjlw.roa
Signing time: Wed 18 Dec 2024 02:18:54 +0000
ROA not before: Wed 18 Dec 2024 02:18:54 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 118.152.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1034 (0x40a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:18:54 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=BF84F14C70FD8B4530D47C0599C2A22DC35C8E5C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:b1:11:eb:a6:34:34:a6:2c:c2:13:32:6c:9c:
23:71:8a:ca:12:11:8e:1d:23:c0:d9:56:6b:71:37:
38:a1:b6:60:6d:2f:33:cb:85:42:83:52:39:31:a2:
d7:b9:b9:00:03:be:a4:9f:c1:16:3b:b3:dc:4c:96:
a0:ab:3c:a1:a1:32:02:cf:c6:d9:9f:87:af:b1:8a:
c4:68:66:06:4a:b0:fd:d0:fe:87:76:a8:c0:59:53:
5f:c4:b1:14:b1:dd:6f:05:be:86:34:19:95:2a:71:
2e:73:e2:1c:65:95:90:3d:35:b7:1b:05:07:5a:35:
0d:18:e1:dd:9a:51:ac:b4:54:bf:aa:20:16:e6:8e:
a1:cd:04:b5:2b:85:c0:e2:c5:9f:a6:f6:a1:ac:ad:
a0:3a:f3:c4:67:ce:b9:2a:26:66:9a:92:0c:20:52:
ce:aa:b8:f0:0f:a1:12:37:e6:62:f6:5e:20:ba:99:
b6:e6:42:37:28:05:24:58:64:53:9d:10:24:2a:1f:
37:61:70:4d:f8:5c:97:91:e7:bf:50:f0:99:d1:c5:
6d:69:c3:c6:0e:ed:4e:21:7f:0b:dd:e9:88:e8:69:
90:11:9b:79:a7:67:aa:e2:f6:7b:18:9f:3d:7b:4d:
a7:4c:70:e2:1f:eb:91:fc:04:7e:f7:bd:73:81:5f:
12:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:84:F1:4C:70:FD:8B:45:30:D4:7C:05:99:C2:A2:2D:C3:5C:8E:5C
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/v4TxTHD9i0Uw1HwFmcKiLcNcjlw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.152.0.0/16
Signature Algorithm: sha256WithRSAEncryption
72:b2:38:b2:ba:b2:0f:e2:d1:de:40:82:dd:09:21:70:0b:a8:
c1:6f:2c:8a:f5:34:0a:54:7d:f6:ec:6e:be:55:09:a6:84:e1:
55:5b:d5:46:42:4a:c0:ac:d2:eb:20:87:79:24:af:37:8b:04:
c4:1d:8a:08:40:31:d9:4f:dd:f1:b1:a8:f1:3b:bb:86:c5:32:
24:b4:54:f8:81:3b:7e:f3:36:aa:6d:ec:3d:e5:67:1f:3c:c4:
a4:0d:be:fc:4a:ac:43:6d:53:9c:fb:ee:4c:9c:d1:e7:e8:df:
2c:16:27:4d:f9:60:91:72:cd:31:da:e5:d2:ec:b2:23:ec:86:
f7:67:32:bf:21:69:0e:df:17:3e:42:fc:47:90:73:78:87:28:
be:36:91:a2:3e:d4:dd:dc:da:ce:79:c0:aa:39:45:be:ac:27:
2f:a6:e8:c0:bc:fa:ff:e3:09:02:90:c0:6f:e1:02:7a:3d:e0:
dc:d2:24:db:b9:3f:18:3d:1c:7f:f3:ea:8b:8b:a0:b7:3a:8f:
39:36:c5:10:89:d9:70:b5:d9:e0:84:49:94:e3:e8:08:83:6c:
8c:be:ac:d8:8e:00:39:c1:8f:78:cb:c9:15:c8:18:c7:50:e6:
67:96:eb:45:e9:61:30:42:06:62:11:7b:a9:78:95:d3:bd:ef:
8d:4f:e0:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:25:24 2025 by rpki-client