Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YaINHnbwnaZsFXDiQjjfp3puMJ0.roa
File: YaINHnbwnaZsFXDiQjjfp3puMJ0.roa (raw, json)
Hash identifier: h7AILs/ANAm3FeUbcLQBlQSj+GeAHcdCVlzgeMRBm50=
Subject key identifier: 61:A2:0D:1E:76:F0:9D:A6:6C:15:70:E2:42:38:DF:A7:7A:6E:30:9D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0B02
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YaINHnbwnaZsFXDiQjjfp3puMJ0.roa
Signing time: Fri 31 Jan 2025 01:34:19 +0000
ROA not before: Fri 31 Jan 2025 01:34:19 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 9605
IP address blocks: 1.66.96.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2818 (0xb02)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jan 31 01:34:19 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=61A20D1E76F09DA66C1570E24238DFA77A6E309D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:8f:29:44:c9:fe:2b:ee:f3:2b:0d:a7:6d:47:
ee:dd:1c:3d:a3:db:75:e2:12:60:aa:26:0a:62:91:
de:be:4b:c2:37:5d:3e:c4:2b:01:da:4a:da:7b:cc:
27:e1:0b:20:17:85:f4:cb:8a:e7:15:11:64:5b:1c:
fd:fc:a0:be:de:88:19:d6:9a:e2:0f:39:a7:2d:05:
76:cc:5d:da:c6:87:3d:5d:2d:56:d8:ee:00:a5:68:
ee:10:f1:5b:07:f7:bc:91:52:51:73:4c:c3:d6:23:
34:ce:56:ea:99:9f:a1:95:31:62:06:88:26:4e:7e:
4e:1e:86:09:46:9b:3e:37:f4:8d:65:ba:f0:8b:0d:
9e:d0:8d:74:67:93:70:ca:f7:b1:ac:13:f0:2e:04:
8e:ae:26:f9:c5:b1:18:3c:55:7a:b7:e3:c9:eb:2d:
a5:66:70:9f:2b:8a:1c:b6:b7:c0:8a:64:69:be:a2:
20:7b:a5:1c:00:24:63:3f:70:93:dc:03:bb:f6:96:
32:bc:81:ac:99:f0:34:d1:6f:6a:ce:b0:3e:b0:4b:
ba:d6:ea:78:bb:fd:bd:84:97:c2:63:72:a4:7b:6d:
98:03:b3:90:60:08:69:7f:37:44:37:ea:b5:e5:6a:
c4:93:27:2f:9b:75:f9:fa:cf:da:0d:ec:f6:f9:ad:
5d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:A2:0D:1E:76:F0:9D:A6:6C:15:70:E2:42:38:DF:A7:7A:6E:30:9D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YaINHnbwnaZsFXDiQjjfp3puMJ0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.66.96.0/21
Signature Algorithm: sha256WithRSAEncryption
07:a0:8e:a3:dc:fe:cf:8f:a5:44:07:51:91:2c:75:44:d6:c5:
dc:3e:5f:b2:30:18:fd:2e:c4:70:b0:76:25:12:2b:78:02:0f:
04:8c:77:e6:8b:93:2e:3b:6e:af:7c:66:6b:d1:07:43:6a:18:
32:19:f0:c0:db:7a:1b:38:cc:3c:56:41:35:8a:8c:7e:d8:84:
e5:03:b5:04:ae:eb:a1:c5:b3:fd:40:b4:4d:e6:ce:1a:e5:40:
b3:b8:8e:fc:9e:5c:fe:07:17:ee:4e:7c:ad:74:05:c7:e0:fb:
3c:df:da:36:4a:86:6b:96:30:0a:ec:d9:c5:16:6a:de:71:fe:
3e:a4:e5:92:cc:4c:2f:49:79:77:f5:bb:82:86:67:d0:97:b3:
ea:34:21:63:d1:7b:4d:cc:9f:fd:ec:ab:6c:94:f8:06:1f:64:
c8:37:4d:9e:ff:d9:55:71:c8:be:ca:48:58:b6:0a:6c:94:b8:
8a:01:37:7d:d4:f1:d9:c5:3a:bf:22:74:26:2f:db:af:36:2c:
f2:6b:7f:42:64:1a:55:3e:23:59:3e:e8:81:c6:bc:de:ae:0f:
b4:43:ec:e4:6b:0d:ae:a6:78:33:bb:15:5e:bf:db:cf:4c:ae:
5a:60:6d:e4:df:6b:ba:f3:d4:22:74:36:34:43:ba:5b:b5:6f:
5a:07:d3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 22:10:43 2025 by rpki-client