Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/I62LBbfBvxPr2_9wQ1iB1KYdlNY.roa
File: I62LBbfBvxPr2_9wQ1iB1KYdlNY.roa (raw, json)
Hash identifier: 5+CR7++MrAws3W2klPBp1JMiJW44lQR6YDbHz0Ck/x0=
Subject key identifier: 23:AD:8B:05:B7:C1:BF:13:EB:DB:FF:70:43:58:81:D4:A6:1D:94:D6
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: B1
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/I62LBbfBvxPr2_9wQ1iB1KYdlNY.roa
Signing time: Wed 04 Dec 2024 19:38:53 +0000
ROA not before: Wed 04 Dec 2024 19:38:53 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 3949
IP address blocks: 61.213.187.0/26 maxlen: 26
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 177 (0xb1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 4 19:38:53 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=23AD8B05B7C1BF13EBDBFF70435881D4A61D94D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:a2:52:40:69:ff:f1:34:25:e3:2d:df:86:8e:
fd:60:61:32:2c:1e:d6:36:0d:96:63:78:fb:c4:de:
57:7e:a6:f0:6a:d9:58:1c:d5:1a:fb:1e:9a:f8:ff:
06:1f:19:53:d6:e5:a3:df:c1:69:da:cb:03:8b:9d:
bb:b2:b0:13:56:59:c5:f7:83:65:a0:1e:fc:88:16:
8e:09:96:df:30:5f:28:3f:44:dc:a1:11:d7:87:91:
b3:04:6e:af:c9:1f:ef:2a:01:b4:d2:6c:3f:51:8f:
9a:57:43:c7:e8:cc:5a:fd:5b:a2:ac:1a:39:5c:4b:
fd:c4:2d:56:62:e6:e2:1e:25:ff:12:6f:0a:16:61:
d6:35:79:f2:ed:38:63:00:31:b1:be:bf:e0:e2:79:
81:e4:3c:10:e6:12:e6:e9:4c:fe:a0:de:4e:92:e2:
ab:78:40:52:45:39:a0:a6:96:e7:2c:eb:65:e7:bf:
c5:bb:e1:fa:7e:d5:5d:60:27:76:9a:c8:bd:68:a7:
e6:a9:6e:ae:07:d9:dd:1d:bd:04:83:84:c6:20:f9:
d8:ed:f9:cd:50:50:1d:cf:ef:bd:91:4d:f0:2a:2a:
87:52:37:44:20:be:4b:74:a8:55:01:7b:d1:93:fc:
4c:9f:b1:9c:4f:12:8d:07:d7:09:d4:f8:c3:ce:c2:
48:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:AD:8B:05:B7:C1:BF:13:EB:DB:FF:70:43:58:81:D4:A6:1D:94:D6
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/I62LBbfBvxPr2_9wQ1iB1KYdlNY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.187.0/26
Signature Algorithm: sha256WithRSAEncryption
33:79:93:eb:f4:7b:b4:2a:e0:fa:bc:25:90:30:90:ed:1a:50:
bc:d1:93:5f:7f:d8:0a:e3:c9:9d:24:5f:da:16:a9:90:d2:83:
6d:cc:57:3b:d1:fe:99:56:8a:df:ad:8e:e9:83:dd:32:56:0a:
4a:9f:fd:98:df:d1:6f:08:b6:a7:20:52:70:d3:c7:dd:07:30:
c0:c2:61:78:95:ce:44:70:4e:05:1c:7a:89:7a:8a:f0:f1:dd:
e7:1f:87:20:4f:eb:d6:15:d3:d9:2a:e0:97:93:e8:b8:4a:2c:
85:d8:27:5b:55:a1:49:f1:c9:9f:15:38:45:2c:c9:55:9d:06:
cb:0f:b0:44:55:6c:cb:06:17:ec:e6:cc:e7:84:b3:b4:30:d9:
8b:86:c8:5a:1b:a8:de:0b:4f:a8:8c:0e:9e:8c:6e:96:74:e7:
20:f5:54:be:d0:8d:b4:e4:ea:ab:89:7a:d4:11:9e:99:26:e3:
c5:03:d5:3b:7d:5b:6c:4c:0a:cf:e2:0f:b5:51:6f:91:cf:72:
56:be:41:1a:a6:aa:cd:7d:9e:5d:9c:f3:0c:45:01:f3:c6:cd:
3b:86:56:85:36:c0:ab:10:f2:30:4f:5b:b1:73:14:80:48:32:
9f:f0:e7:80:37:3e:ac:87:65:5f:fe:b5:c7:1c:60:6e:5a:65:
f8:a9:e3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 19:57:01 2025 by rpki-client