Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IMZAEUjNSLRPSL1BpDJtN-rRmAw.roa
File: IMZAEUjNSLRPSL1BpDJtN-rRmAw.roa (raw, json)
Hash identifier: tEGMnUir0FKTNinCDx9FHeKgl9+TCPa3/oy7IdzydkY=
Subject key identifier: 20:C6:40:11:48:CD:48:B4:4F:48:BD:41:A4:32:6D:37:EA:D1:98:0C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B0F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IMZAEUjNSLRPSL1BpDJtN-rRmAw.roa
Signing time: Fri 31 Jan 2025 01:34:25 +0000
ROA not before: Fri 31 Jan 2025 01:34:25 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.73.227.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2831 (0xb0f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 31 01:34:25 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=20C6401148CD48B44F48BD41A4326D37EAD1980C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:84:86:bd:51:cf:1f:58:f0:7a:f6:8c:60:1f:
c1:95:3c:60:c7:f8:05:f5:a2:06:a8:39:ed:e6:ce:
76:60:3e:f9:8a:07:cb:dc:21:d2:4e:ba:4a:d6:2e:
99:dc:37:74:95:7e:a2:8f:b0:d9:aa:bc:f4:dc:97:
d4:c3:83:75:78:43:9a:a3:0a:33:dd:33:1d:5e:d3:
a8:64:a8:64:cd:77:19:99:4a:c1:7d:78:93:1d:4d:
5f:ac:8c:eb:e6:02:f4:19:01:63:40:fe:61:1f:81:
8d:94:2e:61:b0:2f:be:cf:9b:b7:34:28:c9:ea:33:
f1:79:92:bf:e3:b3:aa:7b:b0:da:a5:d8:45:6d:0e:
a1:9a:e8:70:9d:fc:30:16:ea:d4:29:ea:01:66:15:
77:e0:4d:34:97:dd:3b:dc:73:d9:f1:b6:56:98:f3:
cc:9f:e1:24:a8:23:e8:e2:4d:66:33:67:be:e5:85:
d2:59:8c:1c:bf:2d:eb:1d:f6:94:82:2a:42:c8:2c:
9e:b8:9b:31:30:b6:cc:75:34:34:20:00:35:02:66:
6d:83:ca:ae:90:28:12:71:94:18:3a:d3:6f:36:81:
6b:4b:ee:d4:19:fc:35:15:0f:b1:8b:27:d6:70:fc:
9c:a0:fd:f0:e4:ce:db:3f:6f:cd:bc:48:17:b0:e3:
7b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:C6:40:11:48:CD:48:B4:4F:48:BD:41:A4:32:6D:37:EA:D1:98:0C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IMZAEUjNSLRPSL1BpDJtN-rRmAw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.73.227.0/24
Signature Algorithm: sha256WithRSAEncryption
c9:f2:39:50:b4:cb:b6:02:bf:8b:40:15:2c:f3:49:10:3b:cb:
1c:81:dd:df:de:0f:6b:97:68:c5:ea:90:bf:2f:69:68:1f:28:
a9:0f:46:22:f2:58:ba:eb:de:12:dd:04:07:d0:ad:32:92:80:
85:78:4f:1b:f0:1d:cb:95:ed:c6:1e:62:fc:a5:4c:a1:e7:03:
cf:0e:78:12:01:03:01:7c:1e:2c:62:82:e0:39:9a:a8:94:64:
c8:78:0d:32:df:5b:16:4e:25:ca:6f:3a:19:ab:35:a4:e0:af:
1f:5e:7f:ec:b7:4a:0a:fe:36:be:35:d1:ab:b3:43:b2:14:36:
e6:08:f3:1c:2e:56:3d:77:38:43:97:2b:1d:3a:fc:06:5e:6a:
73:0f:2b:66:69:08:f0:ca:0b:0b:af:bb:7b:e2:3f:91:2f:de:
9d:0f:1d:20:9f:df:ee:43:e7:e4:dd:c0:2f:cd:4f:6c:b0:d7:
09:df:30:d7:11:2b:50:47:20:47:91:d8:c9:dc:d1:2c:d4:95:
36:c7:46:c7:2a:e0:49:7d:d5:b6:4a:be:a5:ff:04:8f:2e:02:
05:b7:24:fe:87:2d:b5:f3:cc:f0:cb:94:b7:c2:d6:e3:3b:67:
1e:ff:a0:14:19:a1:59:10:84:a5:75:32:78:84:53:31:24:6a:
77:46:d1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:02:07 2025 by rpki-client