Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/TKV0xyZ2ynWutHnasffoyPnppJw.roa
File: TKV0xyZ2ynWutHnasffoyPnppJw.roa (raw, json)
Hash identifier: asDtZ2mScuZKTCRvhJLWG6wTpyuVV0sqsg5yjEe8HTU=
Subject key identifier: 4C:A5:74:C7:26:76:CA:75:AE:B4:79:DA:B1:F7:E8:C8:F9:E9:A4:9C
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 68
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/TKV0xyZ2ynWutHnasffoyPnppJw.roa
Signing time: Sat 30 Nov 2024 01:32:04 +0000
ROA not before: Sat 30 Nov 2024 01:32:04 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 2514
IP address blocks: 143.125.224.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Nov 30 01:32:04 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=4CA574C72676CA75AEB479DAB1F7E8C8F9E9A49C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:7c:9e:c0:b2:0f:12:80:96:03:44:92:41:e4:
cb:be:1e:e9:6d:25:c7:30:a0:02:0d:59:01:71:63:
8b:60:9e:db:08:c4:b6:c2:a3:a8:bd:1f:44:4b:26:
dc:ac:7a:af:29:ba:bb:c9:a1:41:23:2c:f5:ca:9d:
14:0e:97:7b:d8:42:5c:83:19:8d:ab:1a:72:1f:df:
01:cc:b4:17:24:51:bb:62:9d:ed:db:87:5d:b1:c1:
0f:f4:66:e2:4b:2c:8a:41:70:f0:9f:54:ce:a2:8d:
47:25:75:e8:5a:46:f0:75:78:8b:eb:93:a8:7a:7c:
a3:7e:1c:df:15:9a:39:74:45:c8:07:98:09:6e:73:
dd:c5:b8:26:65:d9:49:2a:0f:32:fb:fb:b1:4c:49:
cb:80:37:8c:e2:fe:c2:80:41:81:f6:b0:67:dd:bb:
bc:9a:93:0a:f8:ec:be:4f:f4:74:76:96:7d:6d:c6:
14:16:21:38:23:af:66:ee:35:95:6e:af:5a:58:9f:
5f:11:78:e4:d4:5e:e4:6c:69:5d:be:0b:b2:6f:2b:
d5:66:7a:64:19:af:9f:b3:7c:3c:50:78:9a:01:fc:
46:84:d3:7c:d8:b8:6a:cf:49:f4:b7:36:40:ac:83:
fd:6e:f7:d9:3f:05:5c:58:a6:a2:62:5c:4b:e4:42:
ee:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A5:74:C7:26:76:CA:75:AE:B4:79:DA:B1:F7:E8:C8:F9:E9:A4:9C
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/TKV0xyZ2ynWutHnasffoyPnppJw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.125.224.0/19
Signature Algorithm: sha256WithRSAEncryption
09:78:d8:b7:b7:42:23:fd:bc:a2:8d:b6:50:26:be:1b:ae:da:
f4:97:c0:22:5c:6b:94:40:5d:d3:c4:47:a8:8f:93:87:70:42:
41:8a:26:1f:64:aa:b8:f6:35:38:7d:9b:3a:c6:6b:28:64:5a:
92:71:ab:d5:cb:b6:a9:11:ce:55:a2:7e:98:b9:dd:7d:84:d5:
60:ef:7a:37:5c:d0:8f:7a:bb:03:da:d9:81:dd:df:77:57:60:
f1:46:53:0d:73:51:f6:e3:b5:9e:a5:37:86:a0:58:51:c3:e2:
01:d4:dc:d9:36:ae:44:0f:9a:70:21:3a:cb:11:c2:90:16:d8:
f5:43:c3:c8:3e:2c:87:63:35:94:f5:96:6d:fc:b1:89:dc:d7:
e0:69:09:c2:c1:11:90:69:88:32:5b:04:a8:f4:d2:a7:3f:8d:
4f:84:37:4d:67:b4:2c:bd:07:7e:97:59:64:4a:a9:db:c5:5e:
33:51:e3:65:ac:e0:71:c3:99:d1:a4:b6:51:48:17:be:fa:d6:
83:df:8f:82:e1:04:fc:6f:2a:73:eb:50:7c:56:7a:2a:6a:dc:
a3:9a:03:77:21:2a:34:dd:ae:d2:45:be:b0:bf:61:b1:37:42:
3c:1b:56:82:99:09:a7:57:7b:50:cd:09:1b:55:d6:1b:f8:b8:
93:e4:85:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:35:11 2025 by rpki-client