Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/uDpEzCIXd15K8XtFuPN69hUOtM0.roa
File: uDpEzCIXd15K8XtFuPN69hUOtM0.roa (raw, json)
Hash identifier: jcRdf3WF+1SKYjLup7079spOm4SqlSyK2CVrzQVCKqE=
Subject key identifier: B8:3A:44:CC:22:17:77:5E:4A:F1:7B:45:B8:F3:7A:F6:15:0E:B4:CD
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 8A
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/uDpEzCIXd15K8XtFuPN69hUOtM0.roa
Signing time: Tue 31 Dec 2024 01:31:07 +0000
ROA not before: Tue 31 Dec 2024 01:31:07 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2514
IP address blocks: 160.248.207.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Dec 31 01:31:07 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=B83A44CC2217775E4AF17B45B8F37AF6150EB4CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:23:00:03:c5:17:8f:7b:dc:41:2a:ac:78:
8c:45:6f:eb:3d:b2:47:28:32:a2:c8:33:d8:da:49:
45:a3:c8:f0:65:e2:c6:8a:a5:b9:d4:8f:2c:f8:98:
07:6d:13:23:bb:08:25:68:ee:e4:70:da:07:1e:06:
7c:91:01:d3:d4:5b:c9:71:66:c3:65:0e:53:af:69:
78:b8:68:16:d2:8a:9b:df:e7:b5:52:9b:81:5b:fe:
cf:9f:68:59:7a:bb:13:1b:09:cf:df:76:27:0c:14:
ab:7c:de:75:3a:2d:d5:0c:2c:0a:50:90:b1:ec:06:
c6:95:13:08:0f:c4:d2:61:a2:70:fb:20:ab:a7:3f:
d3:5e:07:11:02:58:95:6e:73:ac:3a:3e:61:68:03:
3a:65:7a:f2:69:ad:bb:20:67:38:4a:02:0a:f0:fa:
0a:99:f1:cb:de:db:49:50:6b:ec:95:ce:33:5a:c2:
18:0f:a6:9a:ce:a4:9c:84:94:a8:48:cf:3b:c4:cc:
1c:95:d9:95:df:b6:e6:00:1e:32:31:c3:ba:4f:2e:
25:9c:88:2f:3a:c1:c4:7e:f2:a1:d1:b6:3a:da:26:
6f:91:30:0d:c2:aa:ec:8c:cd:b3:77:8e:eb:3d:b6:
fc:29:04:ab:0b:92:58:79:30:14:b3:57:9a:a9:19:
89:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:3A:44:CC:22:17:77:5E:4A:F1:7B:45:B8:F3:7A:F6:15:0E:B4:CD
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/uDpEzCIXd15K8XtFuPN69hUOtM0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.207.0/24
Signature Algorithm: sha256WithRSAEncryption
99:22:81:6a:a8:1b:dd:2c:26:5d:89:27:63:1d:66:5e:f8:f3:
ae:d6:5d:0b:78:47:7e:bb:9e:73:dc:fd:22:9c:92:bc:b6:ef:
71:fd:3e:1b:d1:19:54:54:30:9f:d2:28:4a:09:2e:81:77:a4:
cd:b9:52:26:9a:92:01:17:2f:9b:4d:2f:bd:3f:8b:dc:e0:e2:
2d:fe:09:85:49:d6:cf:20:10:9d:3f:1b:d6:55:f3:ea:8f:d3:
b8:1b:66:48:fb:a6:eb:ca:e9:18:59:e5:3a:5d:22:36:5f:dd:
d3:e6:8b:1d:92:bc:f9:22:53:88:db:89:bc:1d:a8:da:7a:d7:
e6:b3:ac:7a:b4:e6:67:16:01:6c:f6:13:78:19:85:ad:67:01:
72:7b:1b:6e:dd:11:70:a2:81:c6:b7:3c:31:ec:4b:3e:72:73:
ce:5e:27:d7:03:4c:e0:11:34:f6:a7:30:4f:0d:da:61:77:f4:
6f:b5:01:6d:bc:9f:7a:9b:2b:ca:b3:cd:bc:3c:fd:cd:61:9b:
b1:6d:fb:5e:04:c2:14:a7:d7:e9:aa:6c:93:ec:1a:08:b7:55:
00:c7:c3:d5:47:55:2f:50:36:70:22:0b:7d:e3:96:69:8e:0f:
22:be:cc:0a:f7:6b:2c:e6:42:a4:5e:b8:3e:65:b6:40:bb:d5:
21:ad:6c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 20:26:09 2025 by rpki-client