Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1toNKuRoSUgTqYq5XdMke3hWUJQ.roa
File: 1toNKuRoSUgTqYq5XdMke3hWUJQ.roa (raw, json)
Hash identifier: 53c35+71xTJw0MHiFSAk9G/t32ogAlZVxEU3mM63PBg=
Subject key identifier: D6:DA:0D:2A:E4:68:49:48:13:A9:8A:B9:5D:D3:24:7B:78:56:50:94
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B2A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1toNKuRoSUgTqYq5XdMke3hWUJQ.roa
Signing time: Fri 31 Jan 2025 01:38:03 +0000
ROA not before: Fri 31 Jan 2025 01:38:03 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.72.8.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2858 (0xb2a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 31 01:38:03 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=D6DA0D2AE468494813A98AB95DD3247B78565094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:7d:be:3b:c8:76:36:e6:5e:69:42:0f:0e:20:
b5:7c:87:a7:44:4a:9b:bf:0a:b3:fd:cf:47:e7:1e:
cc:ac:58:a8:31:b6:c8:78:05:fc:c9:84:b3:92:12:
c9:4d:a4:9d:f8:62:2b:f8:c9:ef:da:2f:cc:2f:d8:
d8:40:31:b1:da:5b:ce:44:13:47:44:e9:2a:3b:52:
af:c5:95:51:ad:e6:75:46:dc:00:f6:bc:6c:c3:8b:
de:b1:73:4c:22:7b:b0:6b:21:81:1c:2e:78:9a:a6:
b0:2e:64:26:75:1f:ba:72:51:0a:99:68:62:7f:54:
0b:58:39:aa:e6:fd:79:ae:b4:e2:b0:7d:7b:26:b8:
7d:09:d3:65:a9:5c:02:13:23:c7:a9:9e:09:e7:71:
a2:26:46:7a:7c:81:9c:19:bc:50:93:ea:9e:68:8a:
27:8b:74:34:c0:f5:b5:66:0a:2a:dd:fc:33:f4:fb:
6d:44:ba:5a:32:ae:0a:9e:9b:9b:ee:b0:75:06:6e:
bc:98:b2:24:e7:a8:1d:e4:3b:8e:20:51:20:8d:35:
07:73:a3:2e:f8:b2:d2:ac:cc:48:c8:4d:70:36:86:
48:5f:26:b1:bf:6b:0e:d6:0a:fe:30:fc:af:38:2f:
c0:e3:ac:36:7b:20:96:40:0e:0f:6a:52:f6:e8:95:
73:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:DA:0D:2A:E4:68:49:48:13:A9:8A:B9:5D:D3:24:7B:78:56:50:94
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1toNKuRoSUgTqYq5XdMke3hWUJQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.8.0/24
Signature Algorithm: sha256WithRSAEncryption
ac:e9:06:e4:2d:38:33:ad:20:f4:a3:51:cf:db:22:b7:9e:89:
08:90:74:bf:5d:3e:09:e7:20:39:3c:8e:db:7d:03:60:8e:ff:
f0:45:ab:21:4d:fe:d4:ea:f8:40:d9:32:bc:3b:88:4b:87:90:
4a:aa:14:58:0b:27:f9:52:01:6b:59:6f:ee:ba:a7:6a:23:48:
01:0e:c3:2d:5a:90:2d:9c:ea:d9:43:2b:de:58:c0:3e:9a:cc:
11:50:a9:42:79:f8:63:56:1a:98:66:77:30:06:a7:ed:b4:2b:
a2:bd:86:07:5c:ea:d5:03:c0:f5:24:8f:3f:76:bc:59:a0:69:
60:d2:5c:27:00:18:fa:24:1d:77:57:c1:94:6d:51:aa:b4:a2:
df:24:36:70:db:b2:cb:64:92:41:3d:24:01:2c:fe:8e:61:d3:
bf:88:31:13:46:c8:08:7a:89:38:06:53:01:0e:d3:35:6c:6f:
b5:7c:05:0e:50:67:60:1a:ec:3b:64:07:5e:0a:d7:0f:94:92:
54:a8:bb:c4:f7:fa:40:c0:0d:19:6c:fe:98:cc:cc:0d:3e:40:
5c:c2:37:c6:0e:ab:5a:d1:69:05:11:69:b3:b2:55:f0:12:a8:
f5:f6:3e:db:3f:9a:aa:46:92:03:04:85:04:a3:43:b1:d5:31:
e5:d8:58:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:23:47 2025 by rpki-client