Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lk-4GMNX0D_ACTC8VKQ4RWMWTuI.roa
File: Lk-4GMNX0D_ACTC8VKQ4RWMWTuI.roa (raw, json)
Hash identifier: kYArsW+RINFogx3/aGxTvRjdvIG2kY+KohEHaWjP2SA=
Subject key identifier: 2E:4F:B8:18:C3:57:D0:3F:C0:09:30:BC:54:A4:38:45:63:16:4E:E2
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 08C8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lk-4GMNX0D_ACTC8VKQ4RWMWTuI.roa
Signing time: Tue 30 Apr 2024 02:24:36 +0000
ROA not before: Tue 30 Apr 2024 02:24:36 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.97.86.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2248 (0x8c8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:24:36 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=2E4FB818C357D03FC00930BC54A4384563164EE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:80:25:ee:30:cc:52:8e:d0:f2:bc:88:62:38:
a4:a7:8a:cd:2e:9a:62:29:e0:8c:cc:52:31:89:81:
34:3e:5b:1a:e6:fe:3b:cd:83:49:77:aa:40:af:a3:
dc:f0:37:45:a7:e4:4d:50:05:de:ae:f6:79:aa:88:
77:fe:d5:a5:46:37:02:1c:4b:b4:6b:b5:c4:b6:82:
de:f5:bf:e5:45:98:97:ee:bd:0e:5b:ce:80:42:c5:
5a:8a:c5:e2:25:49:ce:ec:8c:29:65:78:48:a5:29:
e9:df:2a:a2:cd:a9:1f:55:57:78:62:3a:33:13:45:
be:27:51:00:5f:1c:86:c4:60:36:f1:2c:a8:5b:e9:
55:91:f2:f7:b5:a2:c7:43:7a:51:66:a3:da:83:39:
f9:b1:6a:7e:38:44:10:21:26:65:0c:51:4d:39:89:
ee:76:d3:4a:e9:b8:43:42:b0:c0:46:89:73:dd:e7:
e5:0a:70:bc:14:87:a7:c6:51:dc:69:f6:a0:e5:17:
eb:cd:c1:d2:93:94:12:4f:dd:73:ac:e5:d6:44:66:
a4:9c:17:5c:37:66:0a:15:b8:22:12:d4:cf:2f:35:
ae:09:4a:7e:05:6f:ca:34:9c:d1:c0:ec:e9:2a:d1:
d6:b8:69:a9:92:36:c4:9f:f7:fa:44:02:ae:4a:81:
51:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:4F:B8:18:C3:57:D0:3F:C0:09:30:BC:54:A4:38:45:63:16:4E:E2
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lk-4GMNX0D_ACTC8VKQ4RWMWTuI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.97.86.0/24
Signature Algorithm: sha256WithRSAEncryption
04:2e:d2:da:b3:a1:8c:7b:6d:da:42:b8:94:f6:c6:1c:24:69:
4b:b1:36:2f:94:ea:64:99:3c:ac:67:e3:bc:be:07:1f:ee:5c:
a7:a1:19:a7:9a:9e:c2:17:31:cf:fd:9c:25:f7:40:a2:ec:34:
36:25:3b:9e:30:f9:79:a9:fb:1e:50:a6:ba:db:be:ed:3c:cc:
62:e3:89:23:ea:c9:b7:e7:42:47:46:63:0c:75:27:d6:20:75:
1f:cb:45:32:0f:de:8a:ec:b0:ca:03:e8:24:5c:ab:05:6f:ba:
29:e3:ff:51:60:e6:24:0f:ab:d5:2e:14:e7:2d:fe:04:f0:f1:
ea:4a:81:b1:95:32:6c:f9:8a:ff:d4:ab:a2:45:f3:ad:c9:e1:
8b:eb:91:ab:b1:2a:12:4e:68:79:f0:3b:0e:c8:c1:de:12:a9:
fd:02:40:e2:99:ed:ef:78:a7:62:0c:42:98:58:ef:60:2e:f1:
7a:88:1d:af:21:a6:3f:d7:65:a8:06:22:00:09:71:36:cd:fc:
e1:20:82:b7:d7:da:f2:3f:ad:3a:5e:f7:38:95:f0:e0:de:42:
6f:92:ce:05:b9:07:6c:2b:9b:93:6f:fc:be:2f:5d:6d:2d:e1:
c3:e7:35:05:56:62:d8:fa:1b:75:fd:d2:14:65:cf:71:f1:5e:
a5:e6:41:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 10:13:16 2025 by rpki-client