Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/izeFcsQ3bjdf9zUdptJ52lqDPks.roa
File: izeFcsQ3bjdf9zUdptJ52lqDPks.roa (raw, json)
Hash identifier: MD3Jl25QSoFNKaWdvgF2iIFDsC52j2gO/kcPRUETZbI=
Subject key identifier: 8B:37:85:72:C4:37:6E:37:5F:F7:35:1D:A6:D2:79:DA:5A:83:3E:4B
Certificate issuer: /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial: 61
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/izeFcsQ3bjdf9zUdptJ52lqDPks.roa
Signing time: Mon 01 Jul 2024 06:15:44 +0000
ROA not before: Mon 01 Jul 2024 06:15:44 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 38631
IP address blocks: 203.104.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 97 (0x61)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Validity
Not Before: Jul 1 06:15:44 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=8B378572C4376E375FF7351DA6D279DA5A833E4B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fe:7c:6a:62:5a:34:b5:a1:8f:e2:b7:eb:60:
32:9f:6c:54:f9:6d:6c:a1:e8:5c:17:bb:66:95:9e:
03:f9:39:a6:16:d6:7c:0a:3f:12:28:d9:79:f5:cc:
bd:c4:3a:9c:35:6c:f0:d6:b9:a0:84:8a:9e:78:c9:
85:5d:2a:a8:3f:5d:90:64:32:59:61:d6:9f:cb:5c:
5c:87:33:d4:45:c8:3b:b6:f9:7e:67:52:1e:5b:a2:
4d:b8:2f:69:93:a4:08:20:17:0f:f2:d2:02:85:e5:
b5:94:33:b9:97:f7:4f:f3:0f:81:79:bd:76:e9:6b:
35:fe:81:ab:9c:38:50:ef:dd:3c:cf:98:2b:bc:89:
ef:c2:67:7a:37:93:00:0a:6f:ab:6a:78:af:f4:3e:
ba:5b:e1:64:2c:3e:c5:9c:54:da:99:e0:2a:7b:90:
9a:4b:1c:49:e4:b4:02:15:a8:96:19:07:a2:4c:27:
1c:1b:0f:a0:ec:95:0e:d7:2c:43:5f:da:b1:f1:3c:
91:69:5d:cc:6d:41:18:31:4e:6b:11:00:d3:58:c9:
a7:eb:d7:0e:f4:53:fd:8b:78:a1:dd:4b:2b:25:3c:
db:6c:56:0a:a5:92:77:75:a3:85:8b:0b:d6:7f:68:
fa:54:72:7c:dc:01:f6:25:78:25:6c:0c:f1:3b:b0:
a2:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:37:85:72:C4:37:6E:37:5F:F7:35:1D:A6:D2:79:DA:5A:83:3E:4B
X509v3 Authority Key Identifier:
keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/izeFcsQ3bjdf9zUdptJ52lqDPks.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
203.104.144.0/21
Signature Algorithm: sha256WithRSAEncryption
63:b9:97:0f:71:b6:31:26:67:8a:2e:c0:27:59:ef:e9:18:b1:
23:02:fc:a8:de:f8:a6:fa:77:3f:fc:d9:dc:a9:85:88:d3:76:
ac:c3:83:c8:a4:c1:6d:b4:aa:eb:09:d2:c1:a5:c9:eb:f0:ef:
87:6a:15:3c:64:83:68:65:e9:8f:cb:6e:90:7f:c6:b1:64:0a:
ba:c0:35:36:14:c7:fe:83:3f:f5:1a:49:62:a0:08:ae:21:87:
39:80:9a:89:ab:12:be:e5:40:da:ed:db:c0:85:64:b0:15:2f:
d2:5a:ea:89:db:bf:7a:53:58:9e:5a:81:03:4a:2c:30:40:a6:
6c:8b:ca:d4:02:97:d6:43:10:7c:3f:5e:2e:75:a0:6f:e1:a7:
84:b0:63:7b:7c:c4:2a:e3:94:7f:e0:9c:7d:03:90:1c:2d:af:
5a:e2:54:35:0c:54:a4:f9:a8:33:d0:d1:34:d3:54:d5:56:fd:
a4:e5:05:e3:91:af:23:36:46:9f:f6:58:0b:af:1d:f4:81:3a:
78:4c:ef:76:a9:6f:32:44:1b:79:79:8e:ef:a6:8d:75:61:71:
55:47:e3:9e:d7:f1:26:c8:65:86:c8:73:ab:6a:2d:ef:57:d0:
30:38:99:d2:1d:0d:ca:ba:92:ac:d5:e3:bc:c7:2e:5c:f0:ab:
8a:54:60:ff
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 23:03:41 2025 by rpki-client