Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30024/Lbb4HV_85rn7HyVZ4iw4WHBr1zY.roa
File: Lbb4HV_85rn7HyVZ4iw4WHBr1zY.roa (raw, json)
Hash identifier: XLEG1pzS4CIK1tpJCkVrOKJhx9BfORYaWN+p6NN4JcQ=
Subject key identifier: 2D:B6:F8:1D:5F:FC:E6:B9:FB:1F:25:59:E2:2C:38:58:70:6B:D7:36
Certificate issuer: /CN=C704C9A0D115D26062A916A8ADD698F218E00A87
Certificate serial: 02
Authority key identifier: C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/Lbb4HV_85rn7HyVZ4iw4WHBr1zY.roa
Signing time: Fri 27 Sep 2024 00:51:49 +0000
ROA not before: Fri 27 Sep 2024 00:51:49 +0000
ROA not after: Sat 27 Sep 2025 00:42:41 +0000
asID: 2907
IP address blocks: 2001:2f8::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C704C9A0D115D26062A916A8ADD698F218E00A87
Validity
Not Before: Sep 27 00:51:49 2024 GMT
Not After : Sep 27 00:42:41 2025 GMT
Subject: CN=2DB6F81D5FFCE6B9FB1F2559E22C3858706BD736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:41:c7:be:8f:8d:29:cc:c3:c4:a7:c2:01:d3:
2c:7d:d3:95:ef:a4:30:8a:eb:f6:ef:55:63:02:a0:
a2:c7:a3:3f:c1:1f:a5:d7:82:70:16:42:c1:4c:a4:
78:e1:dc:ed:f4:29:bc:2c:ba:b7:ed:8a:b7:64:79:
eb:37:83:34:cf:4e:23:a3:73:40:70:4a:95:67:6f:
3c:9e:ec:77:5a:57:95:9d:a3:26:e8:4d:12:84:75:
f7:20:db:23:34:ec:a3:9b:29:d8:76:c0:2f:27:80:
ff:d4:23:bc:9a:c1:77:af:84:a6:32:62:70:34:ab:
a3:7f:27:69:ce:9a:8e:c1:d8:46:be:47:c8:f4:cc:
b8:65:d8:74:41:f6:4a:eb:fa:7f:bf:16:d5:97:e0:
ea:6d:d5:b4:d9:99:dd:8e:31:46:54:1a:14:14:68:
e6:d4:c4:90:2d:31:6e:07:c0:d9:2a:5c:8e:81:c1:
2c:a6:20:e9:53:a4:f2:36:f8:f9:c1:f4:e6:00:92:
3b:d9:31:91:88:1c:ad:ce:14:f3:ea:cd:c8:b0:15:
90:5a:c7:71:3f:c7:c7:cb:07:15:22:04:76:6d:0e:
d5:4d:92:4f:28:b8:cf:e4:6d:7d:6b:40:b1:e7:a9:
1a:6e:19:d0:23:92:41:35:eb:18:7e:e9:f5:d2:02:
33:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:B6:F8:1D:5F:FC:E6:B9:FB:1F:25:59:E2:2C:38:58:70:6B:D7:36
X509v3 Authority Key Identifier:
keyid:C7:04:C9:A0:D1:15:D2:60:62:A9:16:A8:AD:D6:98:F2:18:E0:0A:87
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/xwTJoNEV0mBiqRaordaY8hjgCoc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xwTJoNEV0mBiqRaordaY8hjgCoc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30024/Lbb4HV_85rn7HyVZ4iw4WHBr1zY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:2f8::/32
Signature Algorithm: sha256WithRSAEncryption
73:4c:85:3a:b0:b1:db:7a:81:ea:76:7e:46:6a:2c:fd:9b:47:
c1:63:20:2b:ca:cb:1a:33:54:8c:74:ea:64:c5:2d:43:72:bc:
10:2c:b2:8d:05:92:57:4d:c3:40:76:87:77:ed:4a:97:cb:56:
d4:2d:b7:08:c7:e4:4d:8c:1e:cd:62:61:13:26:81:cb:93:a0:
52:55:18:79:70:a8:a4:86:4e:ec:b4:f1:db:6d:9c:42:e4:c0:
26:4e:93:19:f1:ed:f3:63:d3:6c:ce:a2:6f:60:68:9a:a3:71:
c3:e7:e9:22:e6:79:84:1e:8b:c1:0e:e5:e0:1a:47:ab:c6:7c:
17:f7:86:f5:1c:9a:90:99:73:c4:b3:71:64:bd:58:af:0c:96:
42:cb:e0:40:0a:e4:67:a4:0d:8f:98:0c:8a:ea:2d:a5:4d:cb:
57:1e:63:d6:a3:34:16:47:c4:48:f3:4f:82:db:99:09:24:a8:
54:ac:3a:33:38:d8:f4:7a:a6:38:72:c4:21:60:8c:28:bd:b9:
06:63:69:88:12:5a:70:6f:a2:73:71:0a:2e:6e:d2:b4:60:8b:
46:89:f7:5e:6d:11:9f:e3:bc:5e:dc:03:64:5c:93:a2:e8:80:
1d:da:3a:3d:82:3f:19:7d:4e:4e:90:9a:17:6d:ae:2d:91:30:
a2:7d:9c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:29:40 2025 by rpki-client