Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ggvi7PX71Y4Sw7CQ6kqeMG8qMeM.roa
File: Ggvi7PX71Y4Sw7CQ6kqeMG8qMeM.roa (raw, json)
Hash identifier: HbaijFL/0pa/3Y6qjRaskpKJQ/jOvtYmYZHCyajauss=
Subject key identifier: 1A:0B:E2:EC:F5:FB:D5:8E:12:C3:B0:90:EA:4A:9E:30:6F:2A:31:E3
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 090C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ggvi7PX71Y4Sw7CQ6kqeMG8qMeM.roa
Signing time: Tue 30 Apr 2024 02:28:42 +0000
ROA not before: Tue 30 Apr 2024 02:28:42 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 1.75.210.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2316 (0x90c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:28:42 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=1A0BE2ECF5FBD58E12C3B090EA4A9E306F2A31E3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:af:ea:59:d5:8f:e0:cc:40:1c:c4:2b:ef:49:
fe:e2:66:7b:47:e1:61:ce:d3:0e:63:54:7e:a1:20:
88:49:06:23:9c:80:ed:72:1a:cb:c9:6f:23:a3:bb:
70:b0:5b:f1:25:8d:e6:5f:1a:9a:ee:9b:f4:d6:df:
39:69:46:85:ea:c7:9c:35:82:2d:58:04:5c:66:be:
3c:5e:f1:ea:75:de:16:ce:1b:37:08:e4:d7:a7:d2:
4b:4e:d1:ad:0a:d5:93:65:53:22:fc:3d:b5:22:6b:
a1:8f:28:d5:da:9f:aa:07:28:59:85:54:83:b4:bc:
a0:2a:11:83:4a:a4:75:e4:71:b4:ac:82:fd:6e:5b:
ae:d6:01:21:fe:54:24:86:10:43:29:fe:f3:50:c8:
39:18:79:71:fe:61:af:d0:92:d0:5b:96:c4:20:4c:
68:e6:a2:85:70:fb:d6:8e:06:97:58:2c:be:bf:ba:
8d:68:29:86:37:10:21:45:1d:b3:fc:f6:9c:20:1a:
d0:ee:d1:08:c1:82:77:fe:ef:91:7a:c8:d0:30:35:
d4:1b:9c:d6:d1:21:1d:d8:33:7f:08:9b:64:6e:c9:
39:a3:68:ea:b0:27:b5:59:03:cb:97:5a:50:86:75:
fc:5b:4b:8c:0b:3a:df:9d:dd:a8:72:90:c8:8d:f3:
e5:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:0B:E2:EC:F5:FB:D5:8E:12:C3:B0:90:EA:4A:9E:30:6F:2A:31:E3
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ggvi7PX71Y4Sw7CQ6kqeMG8qMeM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.210.0/23
Signature Algorithm: sha256WithRSAEncryption
14:8d:17:18:61:d2:0f:3e:bf:be:c2:58:24:93:bb:ad:13:74:
2e:49:fa:c4:c8:40:84:a4:00:e2:a8:3c:d9:4e:b2:14:89:10:
4e:c4:e8:2f:a9:8c:41:55:84:a6:ff:b6:3c:fe:8f:01:ed:c4:
91:0c:72:98:d9:4a:20:df:b1:2b:a0:ff:97:94:4b:c2:d7:a9:
69:71:2c:98:97:d2:5e:7e:ae:80:95:6d:bc:94:0f:f4:49:78:
e0:09:c9:be:1a:4d:fc:4e:25:86:58:cc:93:e6:e6:77:e4:fc:
83:dd:49:3a:23:b4:82:2a:3f:69:ce:4e:59:fe:b9:92:a2:20:
08:9c:75:15:3f:c3:18:3f:f3:9d:7b:8b:c8:11:91:17:8b:54:
07:e1:91:93:12:cd:e1:9f:10:a7:9b:71:d3:18:ff:6a:80:77:
87:43:e1:f0:e8:7b:7b:c0:c9:02:8c:9b:df:e3:70:3e:5c:7d:
35:c0:5f:4f:3a:34:e4:7d:dc:08:ed:2d:5b:85:86:60:c5:4b:
2f:3a:89:f8:9b:b7:fe:5f:3c:0b:9a:d2:fa:3b:8f:04:14:9b:
51:ee:9c:c0:98:8c:24:d7:13:28:27:7d:de:ba:3c:ba:3e:e0:
2a:c3:86:df:df:e9:79:17:28:b5:e0:54:3e:85:ed:e5:b8:aa:
57:e1:40:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:44:39 2025 by rpki-client