Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/46mbIDencrZrtmqoyCYyWCZG9PU.roa
File: 46mbIDencrZrtmqoyCYyWCZG9PU.roa (raw, json)
Hash identifier: Dsd+Mz1pVh3mBOciYpQN4/ymyvv+5Q0mO83JPZEyRl8=
Subject key identifier: E3:A9:9B:20:37:A7:72:B6:6B:B6:6A:A8:C8:26:32:58:26:46:F4:F5
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0AA6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/46mbIDencrZrtmqoyCYyWCZG9PU.roa
Signing time: Sun 30 Jun 2024 01:54:26 +0000
ROA not before: Sun 30 Jun 2024 01:54:26 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.76.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2726 (0xaa6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:54:26 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=E3A99B2037A772B66BB66AA8C82632582646F4F5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:1b:a3:05:c6:81:45:07:1a:f6:56:4a:ca:01:
00:4e:d1:5f:8e:11:13:27:59:52:27:34:3e:b2:0f:
ea:b5:21:d5:11:36:b2:10:25:99:37:d0:d5:8d:ab:
c7:a2:1c:3f:7b:0a:cd:67:4f:08:55:bd:ac:c3:54:
3d:1c:76:69:c4:4e:0b:c9:ab:b2:be:b9:99:cb:9b:
43:bd:6f:c0:70:16:ed:fd:6d:f0:01:14:b3:23:02:
1c:7a:7c:c0:c2:82:ef:bb:57:69:38:1f:f5:28:a1:
4d:77:63:5d:36:72:7b:9d:fa:a8:a5:da:c8:cd:ee:
56:6a:0f:e1:10:18:82:09:5d:24:c5:f4:27:91:43:
46:0a:73:d8:4a:6e:32:74:0d:b9:7e:d3:d1:65:06:
5f:19:18:34:1b:8c:af:b7:38:63:de:0f:66:a8:69:
00:60:18:4c:c9:d5:f6:b8:80:b0:7b:8a:bc:3f:c0:
fc:55:5e:65:e1:42:9b:7d:ac:31:e7:0c:44:67:21:
3a:6e:b8:e0:ee:a9:c7:61:5d:7a:77:28:b7:e6:07:
f9:35:1a:54:7c:94:26:3f:4d:40:65:37:b4:68:8e:
ed:80:cd:dc:ae:fc:88:c0:0f:11:6d:e5:24:09:0e:
ce:82:77:b7:da:8d:b9:b6:ef:63:5e:79:b1:60:31:
e5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:A9:9B:20:37:A7:72:B6:6B:B6:6A:A8:C8:26:32:58:26:46:F4:F5
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/46mbIDencrZrtmqoyCYyWCZG9PU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.76.80.0/22
Signature Algorithm: sha256WithRSAEncryption
6d:27:5f:9e:dc:ad:58:1f:52:25:b7:2d:23:9c:dc:c8:b2:be:
12:d9:15:a0:03:33:6a:9b:ea:98:45:36:19:3d:1c:ab:c0:27:
77:a2:ae:61:5d:b9:fa:2a:3d:1d:34:a5:e1:a4:45:56:c1:4e:
13:c9:ba:e8:da:95:26:02:f0:77:2d:f0:60:b1:8d:91:86:b4:
d8:a5:6a:1a:f7:a1:48:87:62:7b:c9:3c:d5:0d:9e:4d:b8:b6:
e9:43:7d:65:13:36:b5:d9:a7:ac:a2:6b:e1:d1:28:99:0c:f1:
37:9b:72:4a:c3:3a:e8:b1:09:71:50:1f:7f:f5:9a:7e:ce:8c:
f0:cd:78:f3:bf:39:dc:4d:ff:1e:e2:8f:1d:02:ff:d4:2c:09:
91:c8:0a:ba:79:46:f6:6f:77:2e:0b:fb:18:0a:f7:bb:c3:e2:
0f:55:c5:31:4c:92:10:f6:83:af:f1:d9:1f:09:58:82:24:ec:
bf:d4:fd:34:8f:47:d6:0a:b5:6e:8b:58:a6:23:1b:79:58:60:
58:07:b2:d6:14:f0:d2:5b:74:e9:6b:5b:f1:d4:67:ff:6c:91:
ed:6a:e5:23:75:71:f1:0e:24:12:f5:a2:08:35:14:3c:ec:3f:
59:42:88:5f:02:42:54:c7:cf:e4:3a:99:d1:c9:87:2f:44:fb:
1b:08:3f:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:05:13 2025 by rpki-client