Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/YoLQjCmfObIoj61z4CZlpm0a7d4.roa
File: YoLQjCmfObIoj61z4CZlpm0a7d4.roa (raw, json)
Hash identifier: vK2ElveBt3u8ks/rNJKEoknKWklqGf09ZVjCAR4sUCA=
Subject key identifier: 62:82:D0:8C:29:9F:39:B2:28:8F:AD:73:E0:26:65:A6:6D:1A:ED:DE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A31
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YoLQjCmfObIoj61z4CZlpm0a7d4.roa
Signing time: Sun 30 Jun 2024 01:46:33 +0000
ROA not before: Sun 30 Jun 2024 01:46:33 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.79.48.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2609 (0xa31)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:46:33 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=6282D08C299F39B2288FAD73E02665A66D1AEDDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:13:b6:b1:a7:04:07:90:29:eb:b5:ff:cd:d2:
5a:fb:c8:6c:85:6a:f5:94:79:40:03:6c:8d:f3:d3:
13:54:17:8a:b7:a1:a9:92:45:54:56:41:cf:e3:eb:
b8:63:a3:49:4b:d9:95:b1:e7:be:ec:d9:e3:72:b8:
24:24:d6:c4:b3:e8:88:ee:8a:27:72:67:b3:6c:ac:
c6:b1:a9:96:7f:95:9f:8d:4e:e6:3e:b6:f0:14:a1:
a9:7f:46:db:9a:ad:9f:49:e0:28:83:a1:58:e1:9c:
40:5f:04:6f:48:07:e4:50:03:74:58:29:b4:14:9f:
13:c0:42:9b:22:30:18:ae:39:3a:7f:cf:35:f0:54:
a4:e7:9e:95:bd:8a:a1:c6:48:96:72:fb:36:76:84:
c8:cb:61:0e:37:9f:9e:63:d8:25:e1:0a:1e:47:6d:
f6:64:8e:23:06:6b:05:b9:e9:4b:0a:b8:e0:2c:48:
2f:49:25:e7:a4:34:44:87:69:15:8e:fe:3a:b9:15:
bc:f9:34:f7:1c:24:91:b8:eb:46:49:6d:47:66:61:
7b:a1:75:1d:49:e4:b1:f7:8a:c1:bb:e2:db:e4:31:
3b:26:a0:8a:b6:e5:0e:47:f7:e5:14:4f:9b:7f:5a:
5b:e5:64:87:a9:8a:10:af:e3:1a:35:6e:c3:17:b4:
ea:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:82:D0:8C:29:9F:39:B2:28:8F:AD:73:E0:26:65:A6:6D:1A:ED:DE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/YoLQjCmfObIoj61z4CZlpm0a7d4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.48.0/21
Signature Algorithm: sha256WithRSAEncryption
4f:11:54:de:1e:c5:fe:1a:59:0b:76:3f:e4:a3:7a:3a:29:de:
d3:02:3a:5a:21:2e:f4:e6:09:0e:8c:3c:f7:84:8c:28:e8:0a:
42:cf:92:2f:dc:87:8d:25:6c:a1:91:53:74:a2:3e:34:bc:99:
fb:15:e2:e9:70:2b:52:fd:b3:89:44:c4:44:c8:d3:fb:1a:e1:
45:24:9c:f4:06:d8:5f:7b:41:dd:f0:0b:f6:b4:86:f5:6f:7b:
97:3f:37:8b:03:06:75:5c:dd:dd:dd:18:dc:20:e2:05:39:b8:
77:74:bf:f9:9d:b6:11:17:10:02:6f:54:7a:52:07:96:8f:c8:
df:37:86:3c:54:03:b6:b3:77:cf:0f:0f:94:5f:e3:5f:a3:3b:
52:9f:3a:88:82:d8:f9:90:77:2c:6d:25:70:ee:3b:71:7a:72:
96:80:6f:78:5f:f1:0a:82:b5:9b:f6:b1:00:f0:77:78:0c:d5:
33:ff:1a:3f:11:2e:95:ed:ed:cd:03:24:5a:7a:cd:b6:cd:5a:
97:0c:26:95:1b:8f:d1:f3:1e:f7:a5:39:e1:b1:30:8e:ff:37:
84:a4:bf:b8:86:6a:4a:89:8b:f4:7c:1a:d3:62:24:39:4e:c7:
d0:2a:60:57:ba:35:34:8a:40:7f:2e:d4:34:58:3f:2d:e3:d2:
19:48:9d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 08:08:58 2025 by rpki-client