Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30003/O4qq2Afe-SVmxVx_dkOeMKOxU7o.roa
File: O4qq2Afe-SVmxVx_dkOeMKOxU7o.roa (raw, json)
Hash identifier: PxOykq77LscBiXeP6WviP2Jbm6+wKUhQkSqad1e7XSg=
Subject key identifier: 3B:8A:AA:D8:07:DE:F9:25:66:C5:5C:7F:76:43:9E:30:A3:B1:53:BA
Certificate issuer: /CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Certificate serial: 5E
Authority key identifier: EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/O4qq2Afe-SVmxVx_dkOeMKOxU7o.roa
Signing time: Fri 31 Jan 2025 01:30:48 +0000
ROA not before: Fri 31 Jan 2025 01:30:48 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 0
IP address blocks: 2001:7fa:0:3::/64 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 94 (0x5e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=EA6B49B0752AD3BE3DD683B8AEEA2205F5AFD279
Validity
Not Before: Jan 31 01:30:48 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=3B8AAAD807DEF92566C55C7F76439E30A3B153BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:20:e7:cf:13:24:5d:8b:33:8e:b9:2c:89:3d:
5a:73:5b:15:95:cb:54:ab:3f:55:9b:67:70:02:b0:
b3:a7:ca:20:44:e6:72:70:74:c1:43:cd:a5:61:46:
56:63:fb:51:1c:74:c2:34:af:0e:01:6e:03:f5:35:
11:5e:48:63:70:f7:19:51:d6:ea:b9:86:54:b2:0b:
d7:e2:95:9f:56:73:0a:42:35:98:e3:b7:6e:d6:49:
15:22:d6:08:f6:74:c1:ec:92:2d:30:77:32:88:3e:
3e:03:32:ac:a7:56:03:05:99:b6:52:46:c4:26:68:
ef:00:1f:3b:5c:38:67:d8:6f:dc:61:18:0e:ba:b8:
4e:4f:94:3b:d3:f8:0f:bf:e9:37:63:c2:a4:51:0f:
5f:2d:60:c3:a2:d2:d3:12:c3:c4:1f:4d:cf:0c:a0:
c2:3f:d0:e0:06:2e:9d:f2:d7:87:0a:2c:04:83:e0:
29:02:fc:90:20:d5:dc:ff:62:9d:50:b0:df:20:85:
4a:d9:56:d0:e7:7c:bb:56:cf:1e:c6:8c:ef:f6:9b:
0d:84:1d:2e:d9:e9:ea:3d:5f:f3:3e:57:0f:f3:47:
d7:be:48:be:74:62:9c:ea:19:ba:12:80:7e:40:bd:
b0:3a:35:8e:37:a8:48:39:58:8d:4c:92:76:cc:12:
9b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8A:AA:D8:07:DE:F9:25:66:C5:5C:7F:76:43:9E:30:A3:B1:53:BA
X509v3 Authority Key Identifier:
keyid:EA:6B:49:B0:75:2A:D3:BE:3D:D6:83:B8:AE:EA:22:05:F5:AF:D2:79
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/6mtJsHUq07491oO4ruoiBfWv0nk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6mtJsHUq07491oO4ruoiBfWv0nk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30003/O4qq2Afe-SVmxVx_dkOeMKOxU7o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:7fa:0:3::/64
Signature Algorithm: sha256WithRSAEncryption
24:11:c1:ee:77:96:23:e1:3c:ad:6c:8a:74:8d:a2:dd:cb:36:
f1:63:68:c3:5e:ca:39:09:93:b7:a9:08:c0:15:3b:be:d5:70:
3e:68:64:a8:ae:c9:d6:65:ce:74:93:fa:e6:25:c9:53:b4:8c:
81:67:c5:59:0e:94:70:b2:17:d6:9a:48:5c:e9:01:b7:0a:b4:
a4:5a:ea:8e:88:3a:ac:63:5d:dc:9a:2d:d9:52:03:2f:c1:e5:
e0:4d:e3:fb:4c:8f:2d:3a:18:d0:0c:4b:3c:2c:ce:70:ab:bb:
e0:96:3b:2f:e6:01:44:2b:cc:f5:b0:81:fa:9a:6a:35:30:5a:
84:89:eb:29:66:b5:1e:87:a9:59:7e:e9:a1:92:4d:ed:3e:ca:
6c:52:5f:d0:92:9e:23:37:96:53:4f:64:90:7d:09:72:76:ed:
db:b5:83:32:62:3e:c5:b4:5d:09:bc:e7:5d:90:c7:d5:0c:ae:
20:44:80:99:0c:a8:ae:68:2c:7c:fd:06:f5:6e:18:80:69:38:
80:c5:09:ec:02:5c:08:3e:98:59:4b:91:70:75:01:07:82:db:
0e:14:14:0a:2c:72:6b:81:55:08:59:fb:be:1d:dc:8b:83:96:
91:44:3f:64:b2:8f:18:70:af:82:08:bc:eb:72:39:74:d8:54:
86:b2:4d:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:52:20 2025 by rpki-client