Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1NTGpj_UyoSXCly_M0mappTNsrM.roa
File: 1NTGpj_UyoSXCly_M0mappTNsrM.roa (raw, json)
Hash identifier: u3/sXYuRIp8BPzpIpR30/6OK1fQoeScmQkgNjVzJf+g=
Subject key identifier: D4:D4:C6:A6:3F:D4:CA:84:97:0A:5C:BF:33:49:9A:A6:94:CD:B2:B3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 087D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1NTGpj_UyoSXCly_M0mappTNsrM.roa
Signing time: Tue 30 Apr 2024 02:18:37 +0000
ROA not before: Tue 30 Apr 2024 02:18:37 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.30.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2173 (0x87d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:18:37 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=D4D4C6A63FD4CA84970A5CBF33499AA694CDB2B3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:de:27:e1:8d:3d:27:58:c4:27:11:60:31:ec:
7b:b8:90:de:31:d2:32:8b:65:9b:33:09:8e:29:cf:
5b:e6:cc:72:11:13:10:68:02:75:12:31:08:27:d2:
40:3d:4d:5a:5e:ce:9e:15:3f:52:22:57:05:ed:6b:
0d:ee:b3:6e:7f:a6:d1:49:4b:7b:d5:79:48:65:ed:
b4:ee:d3:7b:15:b5:51:1e:2f:26:78:01:be:4d:26:
17:1b:5e:d5:df:ff:d6:be:1f:66:5b:6e:ef:f0:7a:
62:05:21:3a:e1:44:ba:6d:85:f9:f2:4f:08:b8:ed:
eb:27:23:c0:2d:7d:d9:1c:ea:5d:23:10:de:83:af:
aa:f6:30:3f:67:3e:65:cb:dd:a5:89:e0:75:0d:82:
a2:67:c9:b3:c9:c7:b2:9f:f9:a6:61:a5:f8:ef:8b:
0f:3d:35:c5:f9:dd:cb:d0:03:19:b2:25:d7:5c:da:
b8:20:18:ae:10:fa:0c:b9:f1:9f:17:fd:9d:e2:b0:
03:18:18:27:f7:f5:0d:36:8c:5a:0b:bb:ea:e6:a2:
7f:c4:cf:f1:58:3c:a3:93:e6:15:79:82:96:d6:28:
ec:1e:47:01:0b:12:b7:f0:15:6e:97:5d:9f:d1:96:
53:d7:91:ca:92:0c:17:52:88:eb:51:bd:62:96:3a:
3a:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D4:C6:A6:3F:D4:CA:84:97:0A:5C:BF:33:49:9A:A6:94:CD:B2:B3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1NTGpj_UyoSXCly_M0mappTNsrM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.30.0/23
Signature Algorithm: sha256WithRSAEncryption
07:3a:cb:cf:7e:ee:df:8c:57:1d:11:c4:88:58:ac:00:e5:e5:
3c:ca:70:a9:4e:d5:0c:11:2b:40:65:d8:83:09:2c:cb:dc:c8:
cd:31:fa:40:07:45:aa:c5:f7:d7:d9:96:b7:49:60:f9:01:aa:
28:da:9b:a1:c4:d6:f4:c2:6d:f6:67:e5:65:2a:1a:d3:39:65:
fc:f2:64:ea:ec:63:f1:60:76:c4:cf:be:eb:d5:89:b4:f9:9b:
e4:1f:db:d9:8d:38:85:c6:48:12:0d:b1:83:3e:82:93:05:42:
0d:e7:df:81:e1:0d:ef:63:c2:7d:6f:be:51:ba:a6:54:ea:55:
d7:9b:d0:47:3f:7e:81:84:6f:df:0e:7b:51:40:94:02:63:0f:
07:8d:2b:da:cc:2c:8a:a3:2c:bb:c6:1a:ce:08:d5:bd:0e:88:
3a:ac:27:60:46:a7:e3:28:45:36:39:80:a9:9f:18:c9:e0:0c:
ee:f1:8e:f7:51:cd:c5:4e:36:be:db:bf:9e:27:2d:3b:42:7d:
d8:9c:17:08:1e:52:db:0e:5e:4b:fe:08:c2:31:39:28:64:d9:
f7:e9:88:d9:e3:81:ce:8a:88:bf:15:a0:f4:56:c7:90:fb:9e:
91:a1:7d:75:0d:95:fd:07:2e:9f:fe:e4:06:9b:3a:0f:f8:ae:
d3:d1:fb:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:19:13 2025 by rpki-client