Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zg7WlqAH8bDYCECaCwRJndv3Qw4.roa
File: Zg7WlqAH8bDYCECaCwRJndv3Qw4.roa (raw, json)
Hash identifier: rD6KK9/ASgvw5nvASE9Sl3FiaZmYww7hdpWu3vSwSew=
Subject key identifier: 66:0E:D6:96:A0:07:F1:B0:D8:08:40:9A:0B:04:49:9D:DB:F7:43:0E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 06E1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zg7WlqAH8bDYCECaCwRJndv3Qw4.roa
Signing time: Tue 30 Apr 2024 01:49:38 +0000
ROA not before: Tue 30 Apr 2024 01:49:38 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 1.78.14.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1761 (0x6e1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:49:38 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=660ED696A007F1B0D808409A0B04499DDBF7430E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:c1:c3:29:7a:d4:0f:46:05:39:cc:bc:7e:
3e:b7:cb:8f:3c:bf:31:15:38:b9:78:e6:fe:5a:28:
23:98:2e:88:c4:1f:8c:e6:a9:46:0a:d5:2a:21:eb:
3b:36:46:4e:8e:ff:2e:67:20:cb:23:db:4c:ca:6f:
dd:ca:c2:8c:3b:9d:7d:c6:31:c3:2b:a7:ae:c3:7f:
7e:a0:ea:1a:8d:76:79:3a:40:3f:a5:2c:c4:87:31:
00:23:c2:66:e5:bc:55:72:28:ff:d5:5f:b4:66:24:
56:fb:1f:cc:82:39:33:8e:be:ee:11:92:28:a7:c7:
d5:a1:ce:d2:7a:d4:c0:7b:80:95:a0:b0:ed:8e:06:
65:61:1b:36:de:78:fe:52:e3:a7:be:a0:50:de:ad:
ad:9c:2e:8d:c6:b7:04:3d:be:b6:46:d6:06:a0:56:
cc:70:b5:fe:99:7c:0c:21:f8:26:1d:f3:72:ba:8e:
a0:35:21:13:ca:f9:df:06:46:8e:eb:5f:e5:34:96:
a5:6b:30:07:96:1b:a7:76:34:61:d0:f2:aa:12:0d:
0d:65:ff:c2:fc:50:98:94:33:e7:24:8a:8d:96:c9:
3d:b3:ce:4f:ef:ef:58:cc:1d:76:52:95:15:70:f3:
92:5b:94:78:c3:6e:52:ed:71:7b:98:aa:42:f6:1d:
4b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:0E:D6:96:A0:07:F1:B0:D8:08:40:9A:0B:04:49:9D:DB:F7:43:0E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Zg7WlqAH8bDYCECaCwRJndv3Qw4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.78.14.0/23
Signature Algorithm: sha256WithRSAEncryption
e6:34:cb:dc:5c:4d:43:18:b5:1b:f9:eb:0b:06:2c:9f:85:9c:
31:c5:4a:b0:ae:c9:a9:0e:46:cf:0c:fe:05:26:a8:08:21:24:
a2:45:f0:60:16:72:d3:14:47:40:59:ca:fc:a1:c7:24:2b:49:
d6:4c:d1:a0:e4:0a:b2:f9:b8:86:cb:4b:ac:d4:d6:66:2f:fe:
b9:1e:fd:fb:16:a7:e3:b6:d8:12:21:48:c3:ca:45:65:a7:9d:
e1:26:ea:6d:fd:9a:4a:f1:a9:d4:21:ee:76:e8:9e:09:54:53:
fe:bf:cf:dc:84:0c:0a:e7:fa:36:cf:ea:fd:92:b3:c0:74:40:
a2:24:45:94:a3:90:75:6d:35:bd:ac:de:c2:ad:55:35:8c:85:
02:27:e4:54:e6:bd:ce:4d:d6:c2:7c:3e:dd:50:c2:44:db:e7:
14:d8:8a:d3:dc:4e:90:26:67:57:5d:02:4e:0b:df:41:b3:b3:
06:b6:f5:1f:92:b1:c1:04:09:97:80:02:03:06:1c:a1:9f:19:
a3:17:ea:54:9e:ac:ec:5d:24:ba:52:60:a7:ec:b9:0f:58:05:
67:a6:90:eb:b5:4c:41:d3:21:6e:31:a3:39:45:97:d2:97:77:
d4:0e:4a:da:8f:f0:75:8e:9b:38:e2:20:50:f9:b6:43:ab:04:
69:ab:33:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 04:18:50 2025 by rpki-client