Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/UXz5IsiB4LCAiwfIbaoJD1QBaVM.roa
File: UXz5IsiB4LCAiwfIbaoJD1QBaVM.roa (raw, json)
Hash identifier: Ov+glOTNBKdspuWT0RQPAOJO2E/NEaP6V6Eao0KD9Yg=
Subject key identifier: 51:7C:F9:22:C8:81:E0:B0:80:8B:07:C8:6D:AA:09:0F:54:01:69:53
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0753
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UXz5IsiB4LCAiwfIbaoJD1QBaVM.roa
Signing time: Tue 30 Apr 2024 01:58:57 +0000
ROA not before: Tue 30 Apr 2024 01:58:57 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.11.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1875 (0x753)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:58:57 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=517CF922C881E0B0808B07C86DAA090F54016953
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:80:d5:88:12:a3:8d:3e:74:8b:e7:f9:4b:
58:d5:05:12:c3:35:28:9e:b7:b0:5a:3b:8b:d3:35:
9b:a1:56:ad:b2:8c:81:6e:f9:e2:d8:9b:36:51:7b:
45:a2:67:eb:8a:65:a3:ae:2d:6d:04:f3:b5:d6:89:
04:be:66:c4:6d:f5:18:ba:f2:48:f7:2e:3d:45:6f:
f4:0a:5a:7e:1c:03:ea:cd:4b:b1:a2:7d:46:2f:de:
c4:ff:ad:55:27:80:44:c2:b7:5d:8d:23:ed:46:49:
47:e9:ef:d8:65:bd:c3:94:36:15:19:db:3b:a6:c5:
34:89:5b:c8:15:0d:b5:64:48:67:51:73:0c:87:07:
6b:8e:55:9d:06:bc:29:5d:dd:e4:c3:ed:1d:84:d3:
7e:d3:de:c1:02:96:3b:56:9d:ed:cd:35:38:60:b5:
07:21:29:c4:a5:18:5a:65:14:12:2d:69:54:88:0d:
aa:df:fc:a5:1e:51:f7:e5:f7:1d:24:16:4e:6a:db:
5d:d8:c0:7d:2f:52:78:86:b0:ac:97:b3:21:53:74:
ca:29:4f:8b:e4:a5:5f:42:af:91:e2:d7:0c:dc:0c:
77:f1:8f:21:7f:a4:a1:f1:07:fe:03:3a:d9:a4:f9:
e7:a9:22:d6:89:cb:4b:c0:d2:be:76:35:d0:8a:52:
ae:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:7C:F9:22:C8:81:E0:B0:80:8B:07:C8:6D:AA:09:0F:54:01:69:53
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/UXz5IsiB4LCAiwfIbaoJD1QBaVM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.105.11.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:9f:db:32:6a:3b:17:e4:47:74:04:44:47:d6:f2:f5:bf:18:
15:73:97:62:d0:93:d4:b2:5d:ae:87:59:04:9f:62:1b:85:f5:
3e:4e:c9:6c:54:a7:d2:8e:e8:d8:bc:5d:cf:82:43:c8:1f:bf:
c5:d2:be:04:a3:88:06:34:a6:f8:1d:16:f7:a6:9a:be:00:33:
78:8a:5c:f9:b7:e6:78:72:4a:fc:39:f2:e1:4d:46:d9:6d:c1:
47:02:b1:d2:93:ec:4f:32:cc:39:88:90:62:8a:67:2a:d3:dc:
57:fd:97:f8:f2:9e:75:85:7b:3d:f8:f0:31:ad:a4:12:47:04:
b1:ec:95:06:95:1f:5b:65:0a:fc:43:ad:3a:4d:93:d0:2b:c9:
b1:e1:e4:21:46:93:b7:4f:8e:98:2a:59:c9:1c:62:f9:2c:03:
f1:b5:a1:ae:5d:6e:e2:ff:f7:07:75:6e:56:7b:0d:5d:8a:59:
6d:d5:93:9f:5e:e9:e9:42:20:df:ae:77:61:4e:e1:1a:02:04:
28:4f:f3:64:fb:24:00:65:b8:41:0f:33:7b:0f:e8:84:00:cc:
a2:72:96:5d:ab:54:2b:f6:ff:6e:00:28:74:88:7e:0b:d8:84:
e5:49:20:a2:da:2a:78:0c:67:3b:67:87:1e:e2:fa:69:33:f7:
d7:3e:23:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:29:51 2025 by rpki-client