Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/B7fvN9cdlWOfcuPRIhoXKpeYWDw.roa
File: B7fvN9cdlWOfcuPRIhoXKpeYWDw.roa (raw, json)
Hash identifier: l6Re0g1kdvefESW2h9q50Qo2iVR0+Z7wLU0h8Sr18J8=
Subject key identifier: 07:B7:EF:37:D7:1D:95:63:9F:72:E3:D1:22:1A:17:2A:97:98:58:3C
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 51
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/B7fvN9cdlWOfcuPRIhoXKpeYWDw.roa
Signing time: Wed 31 Jul 2024 01:00:54 +0000
ROA not before: Wed 31 Jul 2024 01:00:54 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 2514
IP address blocks: 128.53.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 81 (0x51)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jul 31 01:00:54 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=07B7EF37D71D95639F72E3D1221A172A9798583C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ba:df:2f:d1:dc:07:95:64:3a:40:39:50:13:
29:09:0e:c1:d1:7a:ea:3c:a7:f3:d7:c7:1d:4f:8d:
85:21:af:6c:61:34:92:3a:bd:16:a6:ff:b3:9e:5e:
c2:78:c1:70:2e:7a:de:11:1f:9a:55:3e:8f:e0:4a:
25:aa:ce:0b:3b:21:cb:f5:22:f7:75:fd:c5:6e:f3:
2e:6b:41:c6:f0:f9:ff:bb:5c:68:7e:b8:21:53:b3:
b2:52:d1:72:5c:b3:ab:1a:46:d0:71:10:f0:22:eb:
5e:2c:3b:83:44:5f:64:fb:a2:44:e1:e6:15:6b:fb:
76:3b:aa:01:14:8c:a0:f9:0f:41:09:8e:50:a8:21:
0b:c5:5e:ae:18:af:72:4e:4f:8c:e0:a7:89:0f:82:
c6:e9:b5:b5:a4:e7:e7:4b:11:28:de:d9:2e:91:1a:
5f:9a:3b:4f:9e:38:35:70:d6:ac:f1:7c:b5:cf:74:
e8:c0:60:8c:08:21:82:2b:47:e5:bc:2f:2a:d4:11:
4e:88:bd:24:f3:78:ff:1b:cc:0c:54:63:7e:49:41:
b7:b1:f2:51:98:56:9e:1b:da:41:c9:8c:70:5b:32:
a2:19:9d:b2:e3:c4:f9:d1:84:0e:1d:ae:a4:88:e2:
fa:a4:b5:d6:15:57:b8:4a:1e:fe:77:cf:0c:3b:a5:
9f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B7:EF:37:D7:1D:95:63:9F:72:E3:D1:22:1A:17:2A:97:98:58:3C
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/B7fvN9cdlWOfcuPRIhoXKpeYWDw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
128.53.0.0/16
Signature Algorithm: sha256WithRSAEncryption
a3:f2:24:b8:ab:09:2d:9d:e4:f7:6d:33:2a:ab:2d:7c:e0:19:
64:d9:18:6c:4e:44:64:6a:a4:d8:b2:c4:49:4e:2f:78:fe:45:
9c:38:e3:bc:c8:a8:c3:11:4a:88:95:2d:f5:fe:3b:72:53:88:
93:a5:a6:fb:bc:53:ab:6d:8c:8a:d1:21:19:f2:c3:ad:50:4c:
d2:78:63:4a:19:0a:5e:ec:67:40:94:ee:47:f2:fb:bc:96:fa:
6c:e4:27:b4:b7:4b:16:80:27:d8:4e:7e:ca:08:e8:9d:14:74:
fc:64:8f:bf:de:69:07:ca:15:64:7f:89:4a:89:63:46:29:dc:
31:a0:a7:b1:22:80:4f:46:12:34:75:5b:69:98:96:89:26:32:
88:39:03:3e:18:4f:dd:3f:55:d3:3d:58:94:78:d2:95:ed:5b:
7a:5b:8c:eb:0c:46:89:03:75:c4:e6:57:eb:cf:84:f8:36:ae:
63:af:63:c8:25:06:fa:28:f6:34:61:d6:cb:d8:dd:c0:47:70:
0b:6b:dd:05:a4:0d:6b:3e:32:d6:c5:7d:c1:04:96:61:ad:e6:
6a:da:59:0c:9e:b5:6a:17:2f:16:f6:95:f2:2d:7b:0f:cf:f6:
cc:dc:ea:42:1e:a5:78:bf:b2:60:d6:4d:06:5c:76:93:ca:43:
ee:34:36:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:39:30 2025 by rpki-client