Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30159/IWEaDib74erm2XbaPR7vJOODhX0.roa
File: IWEaDib74erm2XbaPR7vJOODhX0.roa (raw, json)
Hash identifier: 1IwFXkgtqrcgFP5fFSvjt04xivmPiyFzNNAakuEIT4Y=
Subject key identifier: 21:61:1A:0E:26:FB:E1:EA:E6:D9:76:DA:3D:1E:EF:24:E3:83:85:7D
Certificate issuer: /CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Certificate serial: 02
Authority key identifier: B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/IWEaDib74erm2XbaPR7vJOODhX0.roa
Signing time: Thu 19 Dec 2024 13:06:40 +0000
ROA not before: Thu 19 Dec 2024 13:06:40 +0000
ROA not after: Fri 19 Dec 2025 12:59:01 +0000
asID: 17953
IP address blocks: 2404:7a00::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B0EF0194A50D1CFB1C7B994BEFE4BE7DA6AC1968
Validity
Not Before: Dec 19 13:06:40 2024 GMT
Not After : Dec 19 12:59:01 2025 GMT
Subject: CN=21611A0E26FBE1EAE6D976DA3D1EEF24E383857D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:73:5f:3f:d1:4a:99:6f:16:7c:05:15:0e:8b:
a3:51:34:2a:13:65:30:fb:bc:d3:3b:54:97:f8:54:
07:65:90:a1:90:fa:2f:a8:a6:87:51:47:cd:06:46:
f0:5a:77:09:4f:0b:ef:84:e6:f3:34:20:28:15:4d:
ce:53:82:1f:ab:92:ce:4b:e8:b3:8c:a6:6c:2d:e0:
a1:e3:d6:b1:90:3b:84:18:25:53:c8:dc:9f:bc:7a:
77:eb:1f:26:0a:e7:fb:fa:13:b7:89:b3:28:66:dd:
4b:37:c7:da:2e:2f:54:b1:47:f5:70:e6:c6:08:01:
7a:97:f5:11:46:2e:b0:15:cf:cf:91:8b:9a:d4:ec:
2e:21:92:57:ef:5a:6b:d1:13:01:2c:43:5e:9b:b0:
f0:40:f4:ec:5e:d0:97:b7:9c:f0:d1:02:c9:8b:c1:
29:a4:f8:e6:8e:bd:e4:51:31:cc:27:fe:b8:a1:d3:
e8:d3:f8:03:e3:99:c7:21:aa:16:3c:c6:02:dd:2a:
0b:40:78:df:d1:9e:63:d2:d9:51:13:e4:f8:86:40:
91:55:31:dc:63:37:35:bf:b5:c6:ca:ca:5e:8b:45:
95:db:a7:89:0d:56:19:96:6e:d4:55:7e:82:20:73:
4b:ad:bc:c8:d1:45:4c:5f:46:a9:6e:6a:55:d5:3c:
5b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:61:1A:0E:26:FB:E1:EA:E6:D9:76:DA:3D:1E:EF:24:E3:83:85:7D
X509v3 Authority Key Identifier:
keyid:B0:EF:01:94:A5:0D:1C:FB:1C:7B:99:4B:EF:E4:BE:7D:A6:AC:19:68
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/sO8BlKUNHPsce5lL7-S-faasGWg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/sO8BlKUNHPsce5lL7-S-faasGWg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30159/IWEaDib74erm2XbaPR7vJOODhX0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:7a00::/32
Signature Algorithm: sha256WithRSAEncryption
3e:b0:65:2c:04:49:a0:14:74:10:da:bc:2b:4a:73:4a:eb:9d:
eb:73:55:81:02:16:a8:ec:0e:45:ef:a3:fb:54:53:d2:3a:c4:
f9:87:4e:d2:e3:5e:d2:17:41:5e:5f:70:8a:88:80:f2:08:20:
0a:6f:82:5d:14:44:ad:20:7e:ba:04:fe:ef:a8:ae:f9:4d:e1:
a8:12:ca:d7:51:c3:2b:b7:4a:58:c7:6c:dc:41:0f:79:9a:e1:
b5:dc:2f:a6:71:f0:4e:38:d3:23:b9:59:49:ae:51:2e:0c:c4:
5e:39:9d:03:7d:9c:f2:c0:97:b1:ba:24:d0:e8:84:8a:f4:bc:
5c:86:f9:e4:73:06:d8:ce:f6:14:6b:71:66:5d:99:d8:53:12:
87:32:5b:5b:91:d7:d6:24:e2:7b:6f:00:59:dd:1d:28:45:f2:
d1:00:a2:88:27:10:4b:d8:5d:9f:a8:9d:fe:94:c9:4d:c9:d2:
a7:f1:88:82:e2:65:a3:ab:bb:4f:59:e0:33:03:ed:75:14:3c:
c3:f9:04:1c:83:f1:60:de:e9:82:d3:a6:67:ac:60:c1:25:53:
8b:b4:f0:5e:ec:26:79:8e:90:8f:82:43:32:8d:0b:35:ed:55:
93:91:fe:68:e4:a3:9f:6d:d0:18:c6:ca:61:f7:8d:ba:70:22:
1a:09:2d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 15:52:30 2025 by rpki-client