Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QNTyonYLpLeK45sFrtcs3G0s_rE.roa
File: QNTyonYLpLeK45sFrtcs3G0s_rE.roa (raw, json)
Hash identifier: xm0HjvIRL1q6eHcVIegKdo4A9UANVScU5U/hsHYdNFA=
Subject key identifier: 40:D4:F2:A2:76:0B:A4:B7:8A:E3:9B:05:AE:D7:2C:DC:6D:2C:FE:B1
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 08F8
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QNTyonYLpLeK45sFrtcs3G0s_rE.roa
Signing time: Tue 30 Apr 2024 02:26:36 +0000
ROA not before: Tue 30 Apr 2024 02:26:36 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.40.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2296 (0x8f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:26:36 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=40D4F2A2760BA4B78AE39B05AED72CDC6D2CFEB1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:4e:e2:84:a3:82:ed:6a:53:e0:f4:26:c1:21:
fa:31:53:78:e8:a8:b6:69:f4:cf:75:84:e0:6b:b2:
c8:3f:3c:52:15:b6:b4:02:8b:f5:40:70:c1:0e:e5:
bd:3d:41:e1:c4:54:26:e5:a6:c7:0b:18:7f:a9:c5:
32:4f:10:bf:88:08:5f:b6:da:40:0b:59:7e:8d:c7:
36:71:1d:0e:27:1d:e9:26:43:ec:22:4d:77:a6:8d:
17:7f:90:66:a9:65:ee:8d:e5:3c:52:d1:13:66:ce:
9a:18:2e:12:b3:b5:22:46:3f:2c:0f:88:f4:78:f4:
df:d4:cd:19:79:4c:53:c3:fd:fd:e3:a8:2e:8e:b0:
be:30:3b:ab:86:2f:f8:6a:89:08:28:33:e6:0b:a7:
ff:d6:0a:ca:20:97:75:8c:35:89:b9:b9:d1:13:44:
53:29:44:46:f2:9e:d4:ff:05:c1:42:d9:55:0a:41:
ee:99:95:a4:97:a3:65:2c:2a:42:b9:27:a1:67:fd:
c9:52:1a:db:d6:13:b6:d1:a9:cb:92:6e:e7:22:fe:
35:98:81:9b:0a:1c:61:78:16:8f:44:1e:cf:d1:97:
31:62:6d:b2:07:9d:6b:e3:d4:3a:bc:74:61:c5:ab:
1b:d8:78:45:47:e1:ce:48:44:df:f4:74:a9:d6:50:
b2:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D4:F2:A2:76:0B:A4:B7:8A:E3:9B:05:AE:D7:2C:DC:6D:2C:FE:B1
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QNTyonYLpLeK45sFrtcs3G0s_rE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.40.0/24
Signature Algorithm: sha256WithRSAEncryption
83:20:0c:42:ec:f8:e5:2d:d6:79:94:31:ee:38:55:80:67:29:
37:74:f8:6e:9d:d4:47:32:0e:22:0e:46:33:d1:9e:37:b7:57:
03:2f:1e:dc:2c:38:d8:e7:84:9c:f9:14:7c:eb:4b:f9:04:ac:
e8:95:3e:64:a7:4e:34:f0:a8:0f:0c:31:85:bf:37:27:40:ed:
15:00:55:9e:f4:47:c8:72:6d:cd:f4:0e:6f:5b:35:ff:83:ed:
c3:1e:13:66:ae:83:55:3c:76:ce:09:69:d9:d8:9b:de:5d:9d:
4e:ee:22:26:ce:46:bc:16:26:5f:29:f9:a9:e7:23:5e:3f:12:
14:1d:0f:70:da:94:56:ea:00:e8:31:eb:4f:ce:12:65:a9:83:
08:e3:32:a9:c5:47:aa:ff:e7:7d:df:f0:69:9f:5d:b2:4e:98:
87:aa:5e:8f:e4:1f:c2:91:c1:67:69:40:b5:95:15:c6:a4:f1:
f2:37:3d:ff:d5:14:84:7c:f3:aa:9d:cb:a6:ef:c9:2d:24:50:
d7:4d:cc:4c:33:06:be:fd:f0:87:d2:ed:9f:fd:b2:21:53:8f:
ba:8c:f7:dd:42:aa:0d:30:bf:2c:0a:cd:34:7a:6b:c2:28:58:
35:92:83:4b:63:a1:97:f1:93:82:c5:5e:ba:97:a9:4a:d2:cd:
34:08:64:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 06:09:46 2025 by rpki-client