Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XXvZ6d2_2enIG7sAWnyEuSG8ke8.roa
File: XXvZ6d2_2enIG7sAWnyEuSG8ke8.roa (raw, json)
Hash identifier: lAddZjjVuHm+GgbmhE0FBnX5TAlXuzMDEXswpDOVXUI=
Subject key identifier: 5D:7B:D9:E9:DD:BF:D9:E9:C8:1B:BB:00:5A:7C:84:B9:21:BC:91:EF
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 03A2
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XXvZ6d2_2enIG7sAWnyEuSG8ke8.roa
Signing time: Mon 17 Jun 2024 08:56:35 +0000
ROA not before: Mon 17 Jun 2024 08:56:35 +0000
ROA not after: Sun 15 Jun 2025 01:30:03 +0000
asID: 9605
IP address blocks: 240a:61:8000::/37 maxlen: 37
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 930 (0x3a2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Jun 17 08:56:35 2024 GMT
Not After : Jun 15 01:30:03 2025 GMT
Subject: CN=5D7BD9E9DDBFD9E9C81BBB005A7C84B921BC91EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:57:91:31:6c:55:d9:91:ac:9c:f9:61:77:21:
32:09:11:2a:cb:25:5a:24:8e:0c:2d:2f:80:43:96:
b2:8e:03:ee:b0:e6:c1:a4:c6:f7:40:44:ff:34:08:
fa:5b:bd:d7:aa:e8:48:ad:ca:52:ac:46:b0:1e:aa:
2d:b3:40:78:97:57:d2:98:15:59:19:79:24:5e:23:
48:65:82:3e:92:8a:b6:46:b2:23:c1:fa:40:66:da:
2b:24:58:3f:02:54:5a:a9:41:92:0d:ca:75:95:92:
a8:d5:5d:c2:f9:2c:df:10:88:b3:29:57:f7:a8:39:
11:69:9f:de:2b:20:24:20:7e:f8:16:ad:a1:a7:af:
38:47:cb:f0:54:e0:18:82:79:12:6d:22:c5:9b:b0:
bf:62:11:c5:09:be:85:60:f5:63:02:75:a4:f1:d9:
ca:3d:ce:08:61:cb:41:31:6b:cf:0d:6d:d1:fe:81:
5e:40:4a:60:1e:48:65:12:fd:7f:8d:8f:38:78:f3:
64:48:b6:dc:73:d3:f9:ff:31:2d:21:be:b9:f1:39:
eb:80:79:1b:7c:d0:dc:1c:00:9c:60:58:6b:94:3a:
de:d5:36:9f:6e:04:13:f8:d1:a9:3c:d1:2c:ca:16:
2f:ba:96:44:8d:0c:f9:f3:0d:dc:5e:35:e2:9d:04:
bc:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:7B:D9:E9:DD:BF:D9:E9:C8:1B:BB:00:5A:7C:84:B9:21:BC:91:EF
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/XXvZ6d2_2enIG7sAWnyEuSG8ke8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:61:8000::/37
Signature Algorithm: sha256WithRSAEncryption
91:78:c3:23:a5:a8:a5:f1:86:04:73:8f:44:a5:5a:be:37:23:
a1:01:a6:b1:19:f1:b0:9b:8d:a8:42:77:3e:d1:24:ef:ae:1a:
d9:b5:07:f1:e4:76:43:d2:5b:91:ea:61:bc:22:2e:53:a3:a1:
6a:e7:7c:91:7d:e6:54:ef:76:90:8e:4a:e4:11:15:a5:30:e0:
0f:bf:d9:5d:36:58:f1:ad:1f:4f:03:bd:2e:6d:c7:ae:51:f8:
40:41:a2:90:e3:0a:8e:6d:5f:b9:a1:2d:77:93:b4:e9:55:09:
b7:68:cd:52:fc:4b:9e:4b:6b:65:99:8c:8f:b3:db:4c:96:fd:
63:c7:5a:9f:8b:34:d5:be:b2:00:8f:cd:9c:62:10:aa:40:c5:
cf:7d:1c:fe:66:cd:45:9f:2a:ac:2c:84:5d:dc:15:b3:d3:b6:
f4:bf:12:0c:f0:47:fb:27:db:a6:8b:43:65:a8:58:ce:c0:a4:
0d:c8:c8:82:f3:bb:60:83:1d:ab:c5:90:47:aa:9a:37:e4:45:
54:f7:12:44:f6:ba:14:38:02:ec:d0:c0:4b:49:1b:23:1e:19:
ca:b4:b5:40:cc:06:10:f4:5d:e8:d3:1f:58:9f:7d:05:3a:3f:
68:6b:a2:7d:f2:3c:6f:de:55:d7:9b:be:fa:a4:88:89:00:87:
3c:6a:a9:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:29:51 2025 by rpki-client