Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LFP-OapdqpiqALIuLhPnRUlYqm4.roa
File: LFP-OapdqpiqALIuLhPnRUlYqm4.roa (raw, json)
Hash identifier: yPNT2HP1z/ugsHz/ABgGegO8coPjpGzPdU5nEZ1hf+4=
Subject key identifier: 2C:53:FE:39:AA:5D:AA:98:AA:00:B2:2E:2E:13:E7:45:49:58:AA:6E
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: C0
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LFP-OapdqpiqALIuLhPnRUlYqm4.roa
Signing time: Thu 05 Dec 2024 16:47:14 +0000
ROA not before: Thu 05 Dec 2024 16:47:14 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 2914
IP address blocks: 120.88.48.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 192 (0xc0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 5 16:47:14 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=2C53FE39AA5DAA98AA00B22E2E13E7454958AA6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:2d:32:9a:01:fa:71:16:3f:7d:55:fc:18:
8d:57:a7:47:63:ba:0b:6f:df:91:35:c3:34:33:3b:
27:f7:c9:74:7e:5f:00:09:62:3b:67:43:3b:1c:7a:
ab:c1:fc:27:be:f3:14:e4:fa:69:ba:c7:ef:03:26:
b9:28:21:30:5c:d0:82:bd:bf:99:40:ea:42:18:18:
a3:a8:e5:5e:5e:ba:b9:1d:a7:d8:07:b1:1a:29:95:
29:18:c7:f9:13:1f:75:8f:25:1c:a6:ec:29:27:67:
a6:c2:ad:0b:56:21:65:25:dd:97:65:83:a9:c7:d9:
1d:e6:71:f9:47:49:98:87:60:93:df:3e:f8:72:80:
b6:40:0b:3d:5c:91:88:36:dd:3b:3c:03:e0:48:01:
c8:de:2c:43:1e:ca:40:16:d3:4c:bb:05:3c:d9:e3:
73:cb:05:e1:95:53:26:9e:88:db:c0:ec:c4:6a:ba:
0e:b3:ec:bc:e9:be:61:40:ac:e1:07:39:99:08:ce:
1e:1f:95:d1:9f:e4:4f:61:ba:27:14:a1:94:23:84:
a0:fe:1b:d2:a9:02:ec:21:46:1c:ff:e6:2d:79:48:
2f:4e:78:6a:86:22:a8:0c:46:d9:cf:b2:d8:84:3d:
2b:9d:fa:b1:63:e6:6e:83:d6:d4:de:ca:02:01:5c:
77:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:53:FE:39:AA:5D:AA:98:AA:00:B2:2E:2E:13:E7:45:49:58:AA:6E
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/LFP-OapdqpiqALIuLhPnRUlYqm4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.88.48.0/20
Signature Algorithm: sha256WithRSAEncryption
9c:02:20:be:bd:54:a1:1a:48:2e:29:11:1d:87:b7:fe:24:ac:
eb:f3:c9:5c:07:c0:cd:3b:3f:e4:d9:2e:3c:e9:8d:43:6e:1a:
31:d7:58:83:5c:f3:7b:74:d1:41:db:e2:c8:9e:3d:78:63:24:
ee:62:55:27:d3:10:39:b2:35:58:50:43:0c:84:8b:aa:06:f0:
25:06:5e:af:33:d5:0f:0b:a2:af:39:b3:86:09:1c:8b:2a:49:
97:70:75:93:b2:fa:99:dd:5a:a4:e5:8d:8c:e0:4d:d9:ba:60:
ab:26:25:bd:60:68:62:14:4b:67:70:39:bd:79:26:25:e8:2b:
02:6c:c8:b7:0e:a8:56:a0:ab:2f:78:9d:d4:73:53:f5:14:cf:
d5:86:a3:8a:75:46:10:90:d5:53:9b:34:fd:a4:ae:05:9b:34:
00:36:47:0e:8b:60:6f:40:8c:3c:ef:df:65:af:26:06:17:32:
52:2b:aa:35:b7:37:42:8c:47:67:1b:a6:4f:8a:36:b2:1e:c7:
aa:2f:6e:f9:34:45:62:b2:71:26:43:29:58:c7:57:44:9b:49:
6f:d0:19:43:99:c7:aa:4b:19:55:29:a9:18:b6:b7:e3:90:99:
30:ca:8e:ea:cd:65:a9:25:fc:b8:45:54:46:f2:90:31:e2:82:
eb:ee:53:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 00:52:05 2025 by rpki-client