Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/eG7vBfXNgCwlVv-Hbe9Q_yW0MZM.roa
File: eG7vBfXNgCwlVv-Hbe9Q_yW0MZM.roa (raw, json)
Hash identifier: cVbz2Jt+Zo/ju5dR3n4YLg5m8oftU4OpOUWpi+IHtEk=
Subject key identifier: 78:6E:EF:05:F5:CD:80:2C:25:56:FF:87:6D:EF:50:FF:25:B4:31:93
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 7D
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/eG7vBfXNgCwlVv-Hbe9Q_yW0MZM.roa
Signing time: Sat 30 Nov 2024 01:32:12 +0000
ROA not before: Sat 30 Nov 2024 01:32:12 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 2514
IP address blocks: 160.248.87.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Nov 30 01:32:12 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=786EEF05F5CD802C2556FF876DEF50FF25B43193
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:02:0c:52:5c:e8:c7:a7:18:38:e0:9d:33:8e:
0a:e4:ee:28:eb:19:14:60:2f:a7:ca:76:e4:0c:18:
c7:3e:a2:32:52:93:bf:a6:a2:a5:42:13:e1:7c:0d:
ee:de:ce:91:51:7a:eb:83:8c:35:0c:c0:67:17:f1:
7d:a1:36:6d:08:a6:1b:6a:ce:ad:37:2a:85:d0:8a:
0b:2a:66:f0:75:ea:82:cc:e1:cc:0f:cd:a5:c1:56:
a2:e9:ad:c2:29:cd:0c:dd:22:83:71:d2:3b:b5:c8:
df:1d:37:eb:33:09:14:a1:21:ff:b3:80:61:84:27:
40:e8:b8:b3:06:d3:70:7c:56:33:e2:9b:01:2c:e4:
7a:c8:57:a5:59:e1:1c:f4:de:67:c2:4a:e6:21:06:
e3:50:14:eb:f3:d4:bd:f7:00:2f:80:76:56:d6:af:
63:c5:78:d3:3f:ff:c0:43:e0:1b:ba:72:9b:5f:4e:
cb:09:22:ce:03:35:d5:c0:30:6a:5e:47:25:60:6c:
dc:ad:16:c9:d3:90:1f:a5:eb:b6:8a:4d:2f:84:09:
9f:2c:d4:65:89:60:3d:4e:48:a5:11:ce:9c:41:20:
ef:1c:93:be:e0:7b:22:cb:74:ac:3b:14:cf:73:a0:
f9:c6:1e:1c:2f:d4:ad:2a:82:a3:50:79:a1:6a:8d:
f2:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:6E:EF:05:F5:CD:80:2C:25:56:FF:87:6D:EF:50:FF:25:B4:31:93
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/eG7vBfXNgCwlVv-Hbe9Q_yW0MZM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.87.0/24
Signature Algorithm: sha256WithRSAEncryption
89:f3:e4:4a:44:e9:38:f2:fc:20:8a:ac:b5:bc:11:ba:ab:34:
6a:44:2e:db:c2:d1:b8:a2:8b:8e:04:a0:16:91:fc:38:35:7b:
05:8d:e4:51:9e:c8:bd:7e:91:78:09:2f:ed:4f:8d:86:9c:cd:
59:f1:55:41:87:1d:07:0e:07:09:25:b3:1c:c8:e4:a2:6b:90:
0c:01:ee:2e:97:77:2d:fc:e7:a4:50:6b:6f:79:ec:6f:df:8b:
52:75:e8:be:d8:ef:57:5e:f4:67:97:a1:13:fc:da:cf:56:85:
65:99:c6:39:63:cf:97:e6:6d:2e:94:b8:74:66:ac:f9:e7:c1:
fe:8a:78:49:cc:3a:f1:42:58:45:08:5e:5c:a2:e9:19:0d:a7:
3c:3d:1f:6e:6a:25:65:1a:db:1f:96:43:ae:ac:f8:3f:ef:40:
7e:5b:c2:20:32:f7:ba:65:91:24:a7:1b:58:f2:24:e1:ab:a8:
a3:71:1a:46:5e:c8:e1:e1:d9:49:c5:eb:a3:e9:c2:50:7b:24:
9f:b8:c9:e9:cd:64:49:60:11:d7:4b:dd:3a:bb:9d:47:cc:31:
aa:9b:52:d2:4e:bf:72:99:91:a6:b9:5f:59:6d:52:f4:55:cd:
1d:82:0d:09:e7:8d:70:64:d6:e1:81:2c:4c:76:e7:9d:fb:91:
3f:1e:cc:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:08:52 2025 by rpki-client