Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VZ-u38XMcSZNkY_H6GuX-FpkpJM.roa
File: VZ-u38XMcSZNkY_H6GuX-FpkpJM.roa (raw, json)
Hash identifier: DqYhY6Htq72Ib7lu0E9p4kXHHN3qB7GNLD4dxsID6Is=
Subject key identifier: 55:9F:AE:DF:C5:CC:71:26:4D:91:8F:C7:E8:6B:97:F8:5A:64:A4:93
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 096E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VZ-u38XMcSZNkY_H6GuX-FpkpJM.roa
Signing time: Sun 30 Jun 2024 01:33:38 +0000
ROA not before: Sun 30 Jun 2024 01:33:38 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 27.230.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2414 (0x96e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:33:38 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=559FAEDFC5CC71264D918FC7E86B97F85A64A493
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0f:01:02:e2:c2:13:34:27:e9:db:d5:fd:a1:
68:4f:1e:a8:6e:b4:b2:0d:09:a6:1d:2d:d3:f4:de:
96:7e:ce:9f:4e:30:93:c1:85:2c:d2:f8:1f:de:94:
34:49:53:93:1e:38:62:be:3a:9c:1a:2c:b4:10:3f:
af:eb:ae:8b:f3:cf:ab:c8:54:fe:fc:75:e6:8d:8b:
1a:42:b3:ab:4c:37:a4:9e:e8:d5:d4:da:20:5b:e1:
ca:6a:cd:b2:90:53:b4:34:dd:6a:d8:b0:20:fa:9f:
24:0a:a8:b2:54:b2:0b:de:66:f0:28:f7:5a:59:a6:
ee:33:db:28:01:f0:d8:c5:21:cb:0d:3c:d6:d3:fa:
f0:70:ed:dd:64:7d:e4:ee:99:4e:c8:ed:fd:5a:af:
98:0c:9a:84:66:87:0c:86:38:c5:93:f1:42:01:17:
92:98:0b:3c:1f:3f:48:6c:60:42:c1:be:87:6c:16:
f4:c3:2f:fc:b6:6d:45:81:e7:47:ee:31:77:83:0f:
44:92:f2:d5:21:40:c9:94:1d:5d:75:ec:ea:c4:df:
ec:ed:f0:7e:c8:5e:c8:1f:d6:80:06:a3:33:e4:3f:
30:d3:24:9d:81:17:f2:82:e2:ff:12:cf:d0:30:1e:
49:0f:67:71:94:12:e5:58:6d:d6:71:3a:1e:d9:ca:
d6:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:9F:AE:DF:C5:CC:71:26:4D:91:8F:C7:E8:6B:97:F8:5A:64:A4:93
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VZ-u38XMcSZNkY_H6GuX-FpkpJM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.230.102.0/23
Signature Algorithm: sha256WithRSAEncryption
e7:b1:ed:b7:3e:49:da:67:a5:1e:60:ff:c1:f4:64:57:fb:8e:
2c:30:c4:d8:7b:b0:cd:1b:78:df:34:15:1d:8c:59:3b:1f:6b:
ca:2e:ef:ac:35:c9:95:b9:1b:46:73:38:2f:d2:5f:ea:7b:52:
98:0e:37:4c:cb:52:77:fc:45:30:2e:03:af:75:93:88:79:07:
42:4c:73:d8:e5:93:f3:f4:0d:a7:68:b4:f5:ae:d8:92:cb:ac:
99:ea:bc:c3:0d:59:19:b3:d7:2b:9b:1f:17:90:f0:4f:88:af:
e2:dd:ce:72:99:42:e7:df:58:35:2c:1f:27:19:49:5c:48:79:
e2:1b:3f:b4:32:52:24:cd:81:be:c9:5b:72:6d:e7:9f:1e:ef:
9e:12:88:89:bc:53:c3:3a:b3:0b:57:53:5f:d5:90:76:ba:86:
9f:02:3f:26:b8:b6:4c:d3:4f:82:10:fe:b8:af:e8:e3:1d:18:
be:3b:f4:a2:b0:96:86:e6:44:04:5b:92:d6:1c:43:b0:33:d7:
82:d6:05:7e:cd:6f:22:5b:b1:f5:ec:29:3c:da:e6:72:69:5f:
33:e9:11:e6:91:54:93:d7:46:0e:69:54:21:2e:02:4c:5d:12:
b8:8f:c6:14:f2:31:3a:7d:8f:b0:3e:6b:55:db:7d:91:fe:d5:
cc:34:14:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 22:23:56 2025 by rpki-client