Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/CKgZCPwFOg9Rq_bU9nWGTjm5paw.roa
File: CKgZCPwFOg9Rq_bU9nWGTjm5paw.roa (raw, json)
Hash identifier: Qu9jaIKR+pNNGl8vN7t2aJalQl/PEeni4oJDazfeydE=
Subject key identifier: 08:A8:19:08:FC:05:3A:0F:51:AB:F6:D4:F6:75:86:4E:39:B9:A5:AC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 06E5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CKgZCPwFOg9Rq_bU9nWGTjm5paw.roa
Signing time: Tue 30 Apr 2024 01:49:39 +0000
ROA not before: Tue 30 Apr 2024 01:49:39 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.31.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1765 (0x6e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:49:39 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=08A81908FC053A0F51ABF6D4F675864E39B9A5AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:09:12:7e:90:55:44:d6:f1:bf:2d:c0:36:f1:
1b:f4:a8:c3:95:39:f4:2a:ad:1c:9a:c9:cd:9e:10:
3e:b3:74:be:ee:64:11:fc:35:b0:a0:b9:84:27:f1:
d0:03:b4:82:70:b5:cb:24:2e:77:01:78:26:9a:b4:
cd:7e:18:76:03:f1:14:0e:1b:d6:bd:90:aa:13:96:
d3:63:1e:93:28:e5:10:0e:a0:85:a7:f1:f2:7d:1f:
9c:30:38:47:0b:aa:28:ef:64:f8:85:23:72:19:46:
d9:ab:54:26:a4:e7:ab:5c:2c:77:4f:4b:27:64:a6:
b4:6d:87:8c:88:ff:cf:ce:10:a4:56:2c:4d:b1:71:
6a:22:cc:e8:c0:5f:59:f4:26:4d:10:f7:44:13:46:
dd:4a:11:a4:94:74:fc:83:55:b2:39:24:c9:53:12:
01:e5:64:46:1b:c2:3a:05:61:1c:b9:d9:28:f7:8d:
39:d5:65:0d:b0:07:a8:30:62:be:68:2f:63:65:73:
0c:c7:b0:f7:a9:6f:4e:de:12:a4:bb:43:28:77:1c:
50:ea:10:d3:ad:4e:78:53:90:30:95:a0:6b:56:98:
cb:25:fd:28:36:37:4a:7d:65:06:a4:92:34:46:80:
d1:45:df:59:20:f8:8b:ae:7e:1d:58:0e:f6:ab:a5:
4b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:A8:19:08:FC:05:3A:0F:51:AB:F6:D4:F6:75:86:4E:39:B9:A5:AC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/CKgZCPwFOg9Rq_bU9nWGTjm5paw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.31.0/24
Signature Algorithm: sha256WithRSAEncryption
40:ba:4f:b9:1d:99:a7:ef:49:6c:c7:fe:cf:27:6a:09:95:ca:
0f:36:c5:f4:02:b5:fc:89:eb:65:be:00:0e:ac:d2:36:69:28:
e6:1f:2d:7b:4c:2a:4f:6a:f2:5d:00:7d:aa:f9:de:ee:a6:64:
9f:fe:c2:1d:f5:dc:fb:94:cf:18:30:cb:76:af:90:e7:79:c9:
bb:cb:a7:58:50:ad:f4:03:bb:78:7f:3c:7f:6e:79:d6:3a:7a:
19:a9:7f:6e:c3:4c:0b:6c:31:d1:eb:98:38:ef:12:63:1f:c8:
b3:e8:7d:41:28:a0:bc:0f:e8:2c:85:54:3f:95:8f:ee:dd:71:
88:da:6a:03:e3:0d:f6:cb:ab:7b:6a:bb:41:80:ce:ca:ef:18:
11:10:06:3e:8f:e5:0d:e8:d1:f0:ca:06:1d:b4:88:bf:a5:c4:
4b:6c:ef:bf:3a:18:c2:ae:58:4e:5d:fb:1d:2e:c8:00:fd:a0:
89:f2:a9:08:9d:5a:df:30:45:fb:5a:2f:4c:c6:d3:e1:56:8c:
94:e2:36:23:25:1c:26:ff:ad:62:15:1f:23:11:52:dc:d7:19:
6a:00:69:aa:38:06:fa:a5:eb:b3:fa:59:9c:36:df:13:d9:c6:
80:5b:d6:c3:36:a9:5a:09:d2:d8:2f:36:5a:24:28:23:fd:be:
87:6a:bc:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 23:11:12 2025 by rpki-client