Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20273/IrO07XN0ygV3p8E3j-Ibr-5dLrs.roa
File: IrO07XN0ygV3p8E3j-Ibr-5dLrs.roa (raw, json)
Hash identifier: RFD0/MiZ2XMMFDXGHNUq1tUkxRE45H8+FZlzI/E+j8M=
Subject key identifier: 22:B3:B4:ED:73:74:CA:05:77:A7:C1:37:8F:E2:1B:AF:EE:5D:2E:BB
Certificate issuer: /CN=895716F04D35F0F8BA47469217046A965E7A9B7A
Certificate serial: 02
Authority key identifier: 89:57:16:F0:4D:35:F0:F8:BA:47:46:92:17:04:6A:96:5E:7A:9B:7A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iVcW8E018Pi6R0aSFwRqll56m3o.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/IrO07XN0ygV3p8E3j-Ibr-5dLrs.roa
Signing time: Sun 19 Jan 2025 23:54:07 +0000
ROA not before: Sun 19 Jan 2025 23:54:07 +0000
ROA not after: Mon 19 Jan 2026 14:26:04 +0000
asID: 38656
IP address blocks: 161.248.40.0/23 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=895716F04D35F0F8BA47469217046A965E7A9B7A
Validity
Not Before: Jan 19 23:54:07 2025 GMT
Not After : Jan 19 14:26:04 2026 GMT
Subject: CN=22B3B4ED7374CA0577A7C1378FE21BAFEE5D2EBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b3:0b:e7:a4:cb:6c:28:e9:a5:b6:c1:e7:c4:
31:73:36:be:7f:4f:f0:8d:b4:f6:cf:f4:e8:a0:bc:
cf:70:73:da:09:7f:b4:dd:f8:d8:e4:0c:e8:13:34:
a5:5c:3c:d5:d9:b4:7c:47:d4:a1:78:61:58:d2:7b:
89:7c:9c:27:ae:e9:46:4f:05:05:d7:7d:14:a1:84:
5e:98:3a:6c:1d:76:07:7b:12:fc:06:ec:90:6f:a6:
01:c5:49:77:87:7d:bc:f0:2f:e1:91:60:1b:fc:5f:
20:1d:f4:73:8e:a0:f9:8e:92:f8:cc:6c:ba:4f:43:
93:72:13:48:9c:92:01:3d:a0:0a:8c:a0:8d:eb:4e:
1e:60:7b:d2:17:81:95:ca:e0:ed:53:92:6e:a9:be:
ab:d3:63:42:43:b0:b2:64:81:e7:23:89:bb:8b:31:
01:d0:a9:0a:2a:bf:29:0d:e8:57:3c:0e:37:e8:52:
d2:11:cd:f8:51:55:37:8c:63:52:1b:de:a8:cb:21:
27:26:9d:36:bc:d7:ed:ed:05:af:47:1d:12:b0:2c:
13:4e:d1:0d:dd:e8:73:9d:ca:5b:a7:3e:67:7b:79:
80:6d:71:65:2a:78:e8:16:0d:10:ec:67:74:29:11:
cc:83:a3:df:69:21:ef:d6:82:7f:c1:01:50:9a:82:
e6:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:B3:B4:ED:73:74:CA:05:77:A7:C1:37:8F:E2:1B:AF:EE:5D:2E:BB
X509v3 Authority Key Identifier:
keyid:89:57:16:F0:4D:35:F0:F8:BA:47:46:92:17:04:6A:96:5E:7A:9B:7A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/iVcW8E018Pi6R0aSFwRqll56m3o.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iVcW8E018Pi6R0aSFwRqll56m3o.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20273/IrO07XN0ygV3p8E3j-Ibr-5dLrs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
161.248.40.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:02:8b:8a:58:5c:50:a7:66:58:b3:2a:50:39:8c:32:9a:b0:
ac:55:a0:1e:45:e4:b2:52:56:16:9b:26:5f:2f:8e:23:d3:54:
66:81:cb:4d:b0:17:f6:8b:06:5f:d7:92:0a:d8:40:36:91:18:
18:6c:96:c0:e2:66:b3:0c:dd:fc:ad:2f:97:5d:f2:ad:8b:94:
b4:76:5d:a3:ce:e0:87:14:62:0a:f1:1d:6f:f8:d3:a5:6d:67:
c1:a5:d9:0f:84:ad:c0:2f:8a:2c:f3:e3:78:89:44:59:5d:22:
a5:d6:51:00:67:3c:3b:1f:25:c0:b5:a2:f3:c9:67:36:02:2e:
8e:fd:e3:d7:69:fd:8e:c1:ce:0a:08:be:82:4b:ec:1f:ee:b6:
b6:26:ee:1b:05:cc:02:cf:e5:0b:52:84:f3:9f:b2:15:d2:b8:
2b:c5:77:8d:65:af:fa:16:1f:82:cf:90:48:8c:5d:e1:12:af:
b7:a0:7a:10:82:19:e1:32:99:1f:29:8d:63:fd:86:f8:d0:92:
14:39:dc:75:bf:e3:79:e7:c5:43:f0:1a:a4:41:77:4a:70:ea:
72:0e:ec:39:a0:a0:ce:1e:a9:64:8d:aa:83:b6:89:94:d3:41:
0b:d4:22:e5:f7:07:46:0d:8e:48:8b:94:03:13:7b:9f:c0:07:
dc:2b:c3:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 28 22:30:04 2025 by rpki-client