Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/j7vYZLo-SGZjyCSTVsZ_D9Hj4ls.roa
File: j7vYZLo-SGZjyCSTVsZ_D9Hj4ls.roa (raw, json)
Hash identifier: nCpTpd7jSt8+7mcnctp8sLij6ALI2Q9DEpdKRh+eeIo=
Subject key identifier: 8F:BB:D8:64:BA:3E:48:66:63:C8:24:93:56:C6:7F:0F:D1:E3:E2:5B
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 97
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/j7vYZLo-SGZjyCSTVsZ_D9Hj4ls.roa
Signing time: Wed 04 Dec 2024 19:14:55 +0000
ROA not before: Wed 04 Dec 2024 19:14:55 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 137922
IP address blocks: 124.40.55.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 151 (0x97)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 4 19:14:55 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=8FBBD864BA3E486663C8249356C67F0FD1E3E25B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:75:04:d3:e6:6e:ad:e5:38:2c:80:76:78:42:
f7:c5:95:24:86:ed:32:32:59:3e:e7:50:ce:2c:b2:
4f:7c:c6:8b:de:a2:f3:45:fe:ae:9b:df:c8:79:d5:
0e:f5:bd:e1:63:08:fe:ed:11:52:fd:73:b6:d5:85:
96:e6:d7:7e:53:e7:a1:47:bd:c5:23:1a:81:50:a8:
b4:f4:e0:4a:c4:7c:aa:bc:1e:b9:b6:fb:fc:c9:52:
ef:4b:fb:3e:24:7a:77:e2:22:50:40:5b:75:de:50:
a0:bb:5a:fd:4b:9f:b5:cc:e8:e5:a1:c2:8a:1c:06:
72:9b:ee:88:a2:33:8a:fe:df:94:7f:dd:d2:45:b4:
b6:e8:01:99:0a:66:12:33:de:74:c9:b0:94:fb:87:
ba:24:06:3d:d0:75:9b:8d:ba:bf:bc:83:ec:ed:03:
c1:f9:6b:8a:bd:85:7f:eb:1a:e6:66:20:74:c6:50:
5a:42:6b:6f:6f:b3:75:1a:62:b6:d4:3c:bc:e4:a6:
dc:2c:21:7e:de:f6:69:70:bc:6a:23:a7:0e:3d:9f:
18:55:d5:54:50:08:fe:6d:56:5d:f1:b9:8d:97:ba:
30:bf:7c:28:19:70:4d:6a:6c:b8:f2:65:61:1f:db:
5a:35:76:59:51:38:ce:b7:2f:db:d4:08:b6:82:bf:
dc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:BB:D8:64:BA:3E:48:66:63:C8:24:93:56:C6:7F:0F:D1:E3:E2:5B
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/j7vYZLo-SGZjyCSTVsZ_D9Hj4ls.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.40.55.0/24
Signature Algorithm: sha256WithRSAEncryption
49:38:94:24:bf:f4:e9:6f:b3:40:9d:d5:1b:fa:62:6a:03:10:
ba:37:b6:c3:55:05:08:13:59:e2:c3:d4:69:94:47:22:ba:97:
3e:75:12:ee:33:26:8b:60:9f:2e:d0:a8:a6:97:a6:37:16:c3:
ad:4d:3f:c7:37:54:f5:f7:9c:9c:54:e7:3a:8d:2d:69:71:8d:
f8:31:81:26:bd:6c:02:2d:f0:e2:35:ab:5e:03:8f:db:1f:e7:
e9:20:12:10:71:fd:14:7f:46:10:b8:28:b4:38:9f:21:55:83:
1a:00:26:19:e1:3f:e9:db:44:b4:b5:4a:28:f3:62:91:9a:4c:
1f:a6:99:32:38:73:37:9d:8e:0b:d5:38:53:d4:88:62:47:93:
66:4d:b2:12:0e:c7:92:16:8d:c6:ae:7f:f7:15:63:eb:1d:6a:
86:34:36:ea:db:a2:c9:1d:31:ce:8d:fd:14:04:1d:d4:82:f8:
f6:59:b2:ab:df:67:9e:88:1f:0a:f1:c3:c7:c1:ac:ee:bf:b9:
7c:c1:15:1e:44:f4:fe:22:57:24:34:c7:d8:4a:fd:20:75:31:
e8:ba:47:35:c7:91:c4:ff:05:ab:95:9e:e3:3a:31:9a:09:4a:
51:43:a5:fe:cc:37:31:a5:ba:af:47:db:1e:e8:9b:f3:65:7a:
07:45:71:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 16:24:00 2025 by rpki-client