Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GQoF6hxBWGTT2nYaWVyiuCx6CjA.roa
File: GQoF6hxBWGTT2nYaWVyiuCx6CjA.roa (raw, json)
Hash identifier: 7hrG7ZoxHCK9QVTecllqWOQSE6lfXuLQ3PixDfF20ZQ=
Subject key identifier: 19:0A:05:EA:1C:41:58:64:D3:DA:76:1A:59:5C:A2:B8:2C:7A:0A:30
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A92
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GQoF6hxBWGTT2nYaWVyiuCx6CjA.roa
Signing time: Sun 30 Jun 2024 01:52:41 +0000
ROA not before: Sun 30 Jun 2024 01:52:41 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.210.105.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2706 (0xa92)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:52:41 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=190A05EA1C415864D3DA761A595CA2B82C7A0A30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:5c:14:ae:ff:c6:48:67:87:cc:c3:a6:e3:
bd:b0:dc:5a:90:0d:e4:3e:0f:18:65:dd:98:15:4c:
bf:06:9e:f3:75:ac:bc:84:03:dd:d6:6c:89:a1:e7:
06:fc:c0:83:ec:fb:f6:4d:33:d8:75:ca:57:4c:03:
b8:26:40:2d:62:51:de:b4:57:0d:0c:c8:7d:1f:6f:
0a:d0:c1:a7:c0:ed:63:62:80:56:8c:c6:a9:ed:65:
2d:95:e5:ad:d8:d2:80:ce:aa:d4:9b:d4:4c:a0:31:
b0:26:88:1d:f5:76:80:25:f1:50:7d:6a:c4:40:a0:
ff:59:36:55:6b:2c:a9:41:3c:90:9b:14:4a:94:c3:
84:9a:ef:2a:81:aa:34:ba:f4:5c:d9:ea:4b:dc:63:
5a:11:81:b9:de:de:43:03:7a:eb:00:f7:09:c2:ad:
97:7a:ea:03:4c:e5:d2:89:eb:d6:38:d8:63:75:74:
ea:62:f5:00:63:dc:5d:49:8b:24:cd:d8:c6:04:90:
a0:5b:4f:e7:a2:20:45:f5:89:4b:e2:44:86:fd:3b:
77:72:f5:9b:e2:7d:b6:a5:05:61:a4:1e:a0:69:36:
4e:4d:7a:10:3a:2c:c8:0f:0a:40:d4:b6:94:69:26:
13:fc:5e:12:da:1f:bc:4f:c7:bb:2a:d8:bb:51:9f:
39:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:0A:05:EA:1C:41:58:64:D3:DA:76:1A:59:5C:A2:B8:2C:7A:0A:30
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GQoF6hxBWGTT2nYaWVyiuCx6CjA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.105.0/24
Signature Algorithm: sha256WithRSAEncryption
76:36:67:50:5e:e5:10:19:bc:92:0a:b1:f4:9d:9f:ba:28:e7:
96:48:a7:93:c9:49:75:d1:22:c6:5e:65:16:07:3c:62:e4:44:
c5:94:00:3c:01:57:05:3d:09:c1:42:80:04:68:c0:3a:aa:7c:
c3:24:dc:cc:89:22:fb:fd:c9:95:cb:89:85:02:0d:a0:69:cc:
c3:75:0a:6a:56:8e:d0:0b:0e:74:be:fd:27:39:bc:3c:43:92:
fa:0f:1d:82:e6:ad:18:0f:2b:df:60:4d:4e:60:6d:b9:30:80:
ce:a5:2c:6b:5e:ae:28:b7:73:7d:aa:76:c7:a3:7c:c4:2e:fc:
1a:9a:3f:82:ad:02:9e:83:10:bb:62:16:bd:28:61:98:ef:b2:
ee:e0:61:cf:36:b1:57:2c:94:2e:f4:00:a5:1b:03:c4:79:02:
a8:55:e7:bf:48:2e:de:35:2e:4b:a4:67:8c:69:17:8c:43:ce:
ae:0f:62:8a:f5:75:91:81:ac:c7:da:fa:2b:65:1c:a1:7f:5f:
a5:51:e2:8f:a9:bc:61:d0:fc:d9:37:cc:3c:e8:af:f9:c5:bf:
74:cc:88:6d:3c:67:d9:77:35:7e:d8:7e:83:21:bf:cd:b7:4b:
69:5e:c3:28:e4:5f:2e:58:30:81:8f:ca:42:47:a2:3a:72:67:
8d:92:48:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:18:33 2025 by rpki-client