Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/xCtNx6FAqu5gz78LwbvqzDPGI5U.roa
File: xCtNx6FAqu5gz78LwbvqzDPGI5U.roa (raw, json)
Hash identifier: I2omKwjdK7uxF5rO/klG1qW1kUIrBvwMLEI3b9tjXm8=
Subject key identifier: C4:2B:4D:C7:A1:40:AA:EE:60:CF:BF:0B:C1:BB:EA:CC:33:C6:23:95
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0427
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xCtNx6FAqu5gz78LwbvqzDPGI5U.roa
Signing time: Wed 18 Dec 2024 02:22:12 +0000
ROA not before: Wed 18 Dec 2024 02:22:12 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 222.2.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1063 (0x427)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:22:12 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=C42B4DC7A140AAEE60CFBF0BC1BBEACC33C62395
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:77:c3:c5:04:0d:5b:82:c0:99:cb:23:67:19:
47:3b:45:62:f3:75:16:a0:c8:91:8b:97:60:c7:92:
98:1c:e7:72:1b:46:ca:fe:06:7c:fd:94:db:c2:85:
26:86:39:60:af:74:03:69:68:81:94:5e:9c:8c:37:
89:b7:02:72:36:28:1b:49:da:b6:52:dd:83:13:6c:
64:e9:30:75:4a:b2:69:f3:ff:f6:e0:3f:d7:ab:83:
0b:e4:78:5e:23:fc:18:21:a5:35:76:1e:53:44:cc:
5f:73:b5:96:6e:7b:dc:d1:de:c6:bb:70:ae:b4:12:
14:d8:35:d7:ef:9a:9f:3e:aa:62:79:07:bd:d3:1c:
1e:34:bf:b0:7f:1a:cd:93:40:e4:ed:f4:a0:ed:f4:
1f:c5:ab:25:29:76:04:fa:f8:17:d1:8e:d2:ac:6e:
7f:8f:b2:43:47:41:1d:6a:0d:d8:13:c1:8c:75:b3:
63:21:07:44:46:8e:74:58:96:18:af:48:51:58:79:
88:1d:9d:1a:90:6b:2c:e3:2b:b9:a4:18:64:ff:49:
92:bb:10:0e:99:b4:36:6c:87:a5:f9:2e:d7:90:bd:
9d:b9:11:8c:c6:bf:cd:f2:e8:c4:ab:7f:27:74:47:
47:c7:73:df:88:2d:e2:30:07:8f:0f:cf:8a:b4:8e:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:2B:4D:C7:A1:40:AA:EE:60:CF:BF:0B:C1:BB:EA:CC:33:C6:23:95
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/xCtNx6FAqu5gz78LwbvqzDPGI5U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
222.2.0.0/16
Signature Algorithm: sha256WithRSAEncryption
11:50:28:13:e2:62:40:f1:2e:25:e6:a5:c5:ee:4d:b5:eb:ee:
96:43:66:85:24:5b:7d:0d:3a:b2:c9:f6:fe:77:f1:e3:2d:d4:
7d:50:c9:08:bb:c0:39:c2:77:2f:43:43:e5:dd:2e:db:79:a7:
24:45:ad:08:e1:19:e1:58:d5:01:52:46:bd:28:00:c3:c6:db:
23:20:0e:4f:05:c7:28:f9:8c:61:6a:23:1e:26:25:95:f8:7c:
23:f3:92:26:36:14:4e:21:4f:73:10:a3:0e:a4:a3:01:43:48:
7d:cd:d6:52:75:01:db:b2:81:7c:85:34:15:dd:e5:48:ff:37:
d3:79:2c:89:fe:fd:c2:1d:15:e0:5d:fc:bc:ed:b0:ae:1e:33:
22:3b:f3:e6:11:1e:2b:2f:8b:fe:ca:94:31:f3:ed:37:93:d9:
fb:8e:ff:af:4c:a4:83:b5:b1:31:fb:2b:b1:6c:6b:e6:3a:57:
58:ff:da:86:a0:aa:62:30:51:ad:0f:47:27:a7:e9:a8:74:19:
04:83:b4:f7:b9:f4:eb:a5:72:d6:0e:ff:7e:91:b0:13:af:b1:
2c:a8:0e:c6:bd:04:67:16:08:e0:7d:21:d8:a8:83:33:fc:9f:
c9:3f:42:bb:73:dc:b0:53:b5:f9:22:d5:55:fd:b2:59:22:b0:
97:7e:7c:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:35:35 2025 by rpki-client