Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/KgG3-6fcVslR6IWeedeKMBtP0XA.roa
File: KgG3-6fcVslR6IWeedeKMBtP0XA.roa (raw, json)
Hash identifier: b38vvjnOxP5zJo+mxcGo+FuKRTbfqx3FGgiXRjUPHTM=
Subject key identifier: 2A:01:B7:FB:A7:DC:56:C9:51:E8:85:9E:79:D7:8A:30:1B:4F:D1:70
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 5A
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/KgG3-6fcVslR6IWeedeKMBtP0XA.roa
Signing time: Wed 31 Jul 2024 01:08:57 +0000
ROA not before: Wed 31 Jul 2024 01:08:57 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 2514
IP address blocks: 160.248.232.0/22 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 90 (0x5a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jul 31 01:08:57 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=2A01B7FBA7DC56C951E8859E79D78A301B4FD170
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:61:02:24:80:5a:c2:8b:c8:bb:9a:5b:9c:c4:
6d:e7:68:2d:6a:b5:bd:96:d3:8c:0b:6b:81:e2:71:
d0:37:ae:e9:02:73:82:25:94:f2:86:65:c5:29:42:
1d:aa:d5:b8:11:58:09:c2:59:4d:33:79:eb:e9:31:
54:53:3e:5d:72:65:6a:a7:8b:0d:87:2a:3f:9f:f5:
18:5f:9d:28:f3:a0:43:e5:2e:e8:53:a4:e2:ec:68:
e7:19:9b:7f:8f:31:fa:4e:5f:ba:ee:b5:84:32:7e:
a9:08:02:36:26:0c:db:7b:57:ad:6e:4c:ed:55:6e:
51:27:94:77:f9:12:3e:f2:db:c8:80:00:ba:11:e0:
86:27:36:54:13:42:9e:16:5e:f3:bd:93:f7:55:b8:
44:1b:50:03:8f:ca:6b:af:0c:01:35:33:5d:8c:a6:
f7:8f:95:2b:78:48:cf:26:86:5c:94:82:00:9f:78:
1e:a8:48:ab:06:b7:68:d8:e9:d6:9b:1a:3a:58:47:
73:ee:a0:17:0f:8b:45:78:c8:94:7b:1a:21:70:d0:
f7:5a:37:72:8f:1e:2d:9a:19:eb:6f:64:f0:08:aa:
5b:32:7c:69:b5:b1:f9:c6:37:cf:f8:b7:d6:60:ac:
f9:88:86:86:76:7c:8a:34:4a:6a:a3:7b:62:27:1c:
68:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:01:B7:FB:A7:DC:56:C9:51:E8:85:9E:79:D7:8A:30:1B:4F:D1:70
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/KgG3-6fcVslR6IWeedeKMBtP0XA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.232.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:a8:d8:ed:0f:1a:5f:32:0f:47:43:ab:92:8f:6b:0b:c4:5b:
e0:d4:ac:fe:e5:73:16:99:0e:fa:a0:c8:93:28:98:bb:1d:75:
54:e1:8d:49:41:1f:37:59:9e:cc:79:ac:ab:8c:7a:f1:c7:4a:
dc:9c:17:99:d7:24:08:c2:04:27:47:3b:ae:0d:5c:53:1b:14:
f7:d9:12:89:75:37:4c:52:dd:97:9a:f9:c7:5a:ab:1e:15:eb:
d0:36:c7:bc:ab:56:03:cc:69:84:04:94:e4:1e:07:15:e0:66:
dc:a9:58:9a:68:b9:23:1c:f8:ea:05:54:54:82:05:c1:a3:83:
42:dc:6d:2b:a3:d2:5f:b2:27:b5:37:c3:c9:40:19:23:09:11:
89:e3:f9:91:c3:ba:88:78:ec:5f:58:81:fc:2c:69:8e:00:67:
1a:c9:2d:46:50:ef:f0:ef:f6:2b:55:32:42:65:a7:a2:85:03:
da:ab:99:a2:c6:3f:e8:fa:8f:9c:1f:38:4a:6b:a2:ab:bc:3a:
29:6c:5b:d1:39:7d:03:a6:56:6a:06:0c:ae:58:a1:59:be:dd:
d6:b5:a0:7c:41:8c:6d:11:cb:4b:e4:0e:76:37:4f:fb:bc:ec:
d3:36:9a:65:43:e9:e6:c0:c5:ba:99:d8:b8:00:a2:a8:7f:7f:
cc:d7:3f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:05:11 2025 by rpki-client