Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/T9HVCWn3oRDx0J-YTo2xeGKMAzM.roa
File: T9HVCWn3oRDx0J-YTo2xeGKMAzM.roa (raw, json)
Hash identifier: doejgvcqSFw3g1bduspj3R7Au5NhP/OEungzZbexI6Q=
Subject key identifier: 4F:D1:D5:09:69:F7:A1:10:F1:D0:9F:98:4E:8D:B1:78:62:8C:03:33
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0810
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/T9HVCWn3oRDx0J-YTo2xeGKMAzM.roa
Signing time: Tue 30 Apr 2024 02:12:27 +0000
ROA not before: Tue 30 Apr 2024 02:12:27 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.88.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2064 (0x810)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:12:27 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=4FD1D50969F7A110F1D09F984E8DB178628C0333
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:2c:c8:c4:b0:99:c1:a8:de:7d:60:af:3c:51:
61:b4:35:02:e6:4a:9c:ea:b2:a4:5f:50:8e:c5:de:
be:77:c9:b6:82:5f:4f:58:25:7b:95:7e:88:2c:1f:
fe:73:6c:e8:7f:e9:70:c1:20:30:bb:01:d8:c8:c7:
d1:3b:54:54:c7:47:f3:7e:df:12:06:d1:b5:e1:bf:
14:23:72:b8:12:9b:56:3b:03:bb:8f:26:2f:d9:52:
c6:a4:5f:b3:7f:cc:1e:40:d5:37:50:bc:99:6f:39:
51:4d:ef:5a:7f:43:a3:d5:4e:f7:46:6f:9c:b9:80:
e2:a2:63:4c:34:8a:84:d3:ae:05:64:47:7f:15:53:
e8:5f:8c:2d:72:04:11:78:15:b7:68:57:40:32:a1:
4c:04:e4:7c:58:05:96:8d:66:3c:b0:a4:8c:a8:60:
99:66:80:32:97:51:69:6f:9b:7d:58:7d:d6:51:a9:
be:e2:33:e8:0c:4f:cf:83:53:5f:ab:1d:f8:7f:99:
4e:b5:6b:e0:66:3a:76:dc:fa:91:35:72:88:cb:c6:
33:59:e0:91:9a:d7:17:19:a8:c4:c3:1e:3d:ea:49:
51:3e:39:7a:9f:9c:ac:e3:b4:4f:1d:2e:53:e7:4e:
8d:74:89:3c:fb:b8:ce:9f:b5:53:61:0d:b3:f2:a4:
d0:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:D1:D5:09:69:F7:A1:10:F1:D0:9F:98:4E:8D:B1:78:62:8C:03:33
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/T9HVCWn3oRDx0J-YTo2xeGKMAzM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.88.0/24
Signature Algorithm: sha256WithRSAEncryption
14:e2:73:d6:dd:a8:e2:e5:40:02:15:26:cf:d7:94:a7:44:bb:
bc:69:60:2a:39:75:5e:e0:38:9a:e8:a0:60:ad:95:c9:08:e9:
04:6a:4e:fb:d6:47:e4:ba:a6:d6:7f:70:f2:dd:24:d7:46:9e:
c2:9e:0e:4f:08:7f:05:b4:13:a8:90:3e:48:2d:ce:c1:c2:c9:
7c:ba:b2:c0:ae:74:87:f3:ee:d4:71:a3:2e:d1:ad:b9:e2:e4:
96:ca:ea:52:07:05:a6:c2:88:05:73:2d:c6:7d:d3:83:c4:d9:
cb:77:7f:f2:37:d0:9c:bc:b2:6b:c6:56:c0:03:4b:9e:50:bf:
63:fd:28:47:f1:6d:3b:0e:03:8f:fa:27:4e:ad:85:ab:6f:7a:
b9:0b:29:1d:b4:6c:05:06:bc:ea:c1:d4:ac:85:cb:17:ae:e1:
04:b9:26:a3:da:75:15:aa:af:a9:d6:ed:9d:00:a5:53:56:6e:
07:12:f2:ac:be:c0:02:3b:80:cb:1d:92:5c:c3:be:c5:9c:ac:
57:b0:d9:99:ea:e2:21:32:4f:67:a0:68:cc:c3:f3:6b:7f:33:
54:48:6c:45:5b:94:58:35:fb:ac:af:f2:29:71:1e:e3:04:4b:
5b:09:03:ff:07:0f:a2:14:3f:32:26:cc:76:c8:95:e4:5a:c6:
5e:2c:f8:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 14:26:39 2025 by rpki-client