Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/yxiWDg2Eww4Y-E8CY9SvTQNtr7c.roa
File: yxiWDg2Eww4Y-E8CY9SvTQNtr7c.roa (raw, json)
Hash identifier: dqgBGcocvOyOTNNW9lIFweVjRQ6Hkdc06vV4G+m9c7Q=
Subject key identifier: CB:18:96:0E:0D:84:C3:0E:18:F8:4F:02:63:D4:AF:4D:03:6D:AF:B7
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0505
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yxiWDg2Eww4Y-E8CY9SvTQNtr7c.roa
Signing time: Wed 18 Dec 2024 02:40:13 +0000
ROA not before: Wed 18 Dec 2024 02:40:13 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 211.1.76.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1285 (0x505)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:40:13 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=CB18960E0D84C30E18F84F0263D4AF4D036DAFB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b7:04:79:62:31:f6:d5:b3:1b:88:40:e4:00:
8e:f4:8d:25:62:27:39:d9:5f:a1:b0:42:f8:73:8e:
d3:17:d6:5b:cf:4b:c4:a3:44:f5:84:49:01:33:83:
f2:92:a4:ea:51:f2:78:0f:43:e1:4d:b8:5b:52:fd:
e8:31:00:76:b8:d5:27:67:3b:d8:1e:a7:7b:c0:ea:
b6:fb:aa:7f:3e:ce:69:7d:5d:64:24:77:4d:49:ac:
9e:ec:67:92:cd:e5:ee:f8:98:de:b6:b9:bf:2c:79:
d0:ae:09:a9:26:96:c5:f2:b7:57:bb:2e:54:e6:fe:
0d:7a:21:c3:1d:63:c2:5d:49:92:31:01:6d:f9:d5:
af:a8:f2:fb:7f:fc:74:1e:a5:ef:a0:43:c2:d7:ff:
0b:9e:00:e6:a8:34:c9:ab:3b:8b:b9:9a:22:52:79:
d6:60:a5:75:86:69:c4:82:e7:ca:da:49:6c:a7:ac:
53:54:1b:58:6e:7a:08:f5:e3:5a:a5:79:e1:cc:93:
d1:d6:4d:e6:19:38:49:93:da:7c:26:ce:42:9e:72:
d8:94:23:3a:74:14:62:e5:df:a1:2a:e5:4e:93:89:
2d:27:4c:7a:2c:6b:ea:fe:54:a9:62:f1:e2:76:85:
d4:b2:ac:eb:47:06:21:fa:74:1b:06:ac:e0:b8:ab:
6a:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:18:96:0E:0D:84:C3:0E:18:F8:4F:02:63:D4:AF:4D:03:6D:AF:B7
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yxiWDg2Eww4Y-E8CY9SvTQNtr7c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.1.76.0/23
Signature Algorithm: sha256WithRSAEncryption
31:03:25:17:ae:78:08:c2:e8:d1:1d:78:dc:7c:b2:e0:3c:b4:
d7:60:65:a2:d9:20:29:f4:77:ff:49:6e:1d:ae:38:e3:68:ec:
26:e5:1d:8a:ac:c9:e8:d8:b8:7f:b1:89:1b:a6:c6:3d:db:09:
82:62:a6:d5:5c:ed:70:22:22:ed:b6:1d:2e:37:7e:71:80:1e:
cc:08:47:59:a8:59:db:07:57:5f:85:04:81:2a:d5:f5:43:c2:
26:fe:7f:f1:45:55:9d:64:0d:48:38:61:b3:94:bd:9f:37:0a:
13:a4:5b:65:a2:b6:84:d3:ac:64:76:ef:8b:6b:73:b7:59:ac:
4a:26:62:f3:86:3b:f0:ed:eb:70:20:ba:7b:73:1e:a6:28:51:
08:ae:c3:63:2b:f6:e2:b9:86:9c:bf:c9:9f:d4:4c:87:6c:33:
d5:70:7e:b0:f0:b0:4a:2a:77:62:37:a7:54:ae:e3:8e:6d:95:
1a:c0:58:ac:f7:9a:de:17:e8:8b:d7:d9:e2:b7:e3:b3:0c:96:
c9:09:22:bc:a5:95:96:a2:1c:a1:88:73:69:27:76:ca:a1:4d:
07:fa:9f:af:81:73:d0:34:21:ee:fe:12:cc:30:42:e8:b0:ae:
19:f0:88:27:8f:3e:f1:51:3c:87:40:46:d0:c4:b4:bf:83:26:
9b:15:1f:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 02:30:52 2025 by rpki-client