Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/bmstZ0bDSfDoQ7en7NzkpWUH6Kk.roa
File: bmstZ0bDSfDoQ7en7NzkpWUH6Kk.roa (raw, json)
Hash identifier: +/m8m3WrDcTEid4OUsGfPFnRyZ2iKAv4yxTGyCYBmx4=
Subject key identifier: 6E:6B:2D:67:46:C3:49:F0:E8:43:B7:A7:EC:DC:E4:A5:65:07:E8:A9
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 09D3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bmstZ0bDSfDoQ7en7NzkpWUH6Kk.roa
Signing time: Sun 30 Jun 2024 01:40:31 +0000
ROA not before: Sun 30 Jun 2024 01:40:31 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.67.234.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2515 (0x9d3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:40:31 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=6E6B2D6746C349F0E843B7A7ECDCE4A56507E8A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:90:9b:f7:2a:51:f6:66:64:2f:06:05:f7:7e:
56:92:3a:1f:fe:b4:f0:90:95:8a:08:54:36:56:48:
94:b9:58:7f:57:28:f8:68:ac:8e:7d:3c:0e:23:c0:
95:68:94:ea:9f:4f:76:79:9f:12:8b:8b:eb:55:87:
32:f0:55:7a:37:07:53:2c:e5:18:de:ff:42:97:a0:
09:6f:9f:8b:a6:5d:b3:ce:5a:eb:5b:47:43:41:0c:
c8:d4:22:cf:0b:5b:ce:a5:cd:e6:b7:6d:87:ab:ca:
68:67:c7:e8:34:c8:ea:de:c9:9b:49:fb:76:e1:a4:
fe:55:bf:5e:1b:d2:19:d0:69:7c:67:08:a0:12:e3:
0d:5e:9d:ce:05:a4:2b:32:39:fe:f3:c9:5b:ad:8b:
06:ed:18:48:c6:8c:ba:60:43:c8:76:a9:cf:85:ff:
7d:7b:3e:83:21:8b:6f:c1:ba:cc:b6:6c:8c:9b:a5:
d7:37:65:9c:0c:fb:57:81:01:9d:18:46:64:b9:ef:
5a:7c:9c:4c:0f:a9:a0:3b:58:bb:bb:e1:1c:39:84:
12:ff:16:38:8b:cd:a3:42:97:57:c0:c8:4e:82:9f:
ec:ee:bd:d8:83:cc:c2:17:c5:c9:22:d2:5c:0e:12:
e3:2d:da:5d:21:89:06:54:80:d4:5d:c2:1a:21:bf:
5d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:6B:2D:67:46:C3:49:F0:E8:43:B7:A7:EC:DC:E4:A5:65:07:E8:A9
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/bmstZ0bDSfDoQ7en7NzkpWUH6Kk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.234.0/23
Signature Algorithm: sha256WithRSAEncryption
81:40:cf:4a:23:3a:48:30:aa:67:91:dc:9c:7f:82:4d:a2:47:
0a:f6:bf:44:f1:7e:19:50:8e:9d:a1:cb:bd:8b:fa:f8:bb:7f:
c9:8c:c8:d2:d8:02:84:f5:4d:11:a9:2b:bf:2b:3d:ff:63:ba:
70:85:c5:d6:2b:56:6a:56:51:be:74:7c:4b:60:02:c4:84:02:
03:d7:d8:60:b4:df:27:e2:5e:06:5c:bf:c9:81:f3:82:c5:00:
93:14:8c:10:da:68:c2:12:3a:d7:4b:3b:29:ae:4c:a8:22:68:
82:e0:da:9d:8d:e9:2d:25:af:38:52:9e:54:14:fe:15:de:c1:
0e:34:e6:3b:ad:92:a7:d1:bd:fd:ec:74:df:ab:a1:40:c6:0b:
4e:16:79:94:70:2c:f2:71:31:76:f6:cf:bf:45:96:97:98:f9:
b6:aa:b4:9a:d1:0e:e2:d8:98:e1:39:72:03:45:e4:06:92:01:
72:fd:b0:d0:27:85:b2:0b:d0:be:3b:a0:d2:8f:f1:f9:52:4e:
20:0b:c9:b1:ae:10:e3:2e:f1:28:21:69:a7:ba:39:70:13:50:
bb:b7:50:b3:d9:14:be:34:8a:e6:11:41:fc:a5:43:26:b2:36:
bd:28:3c:11:15:74:7a:c6:61:99:0d:83:4c:ef:7f:6d:ee:d0:
a4:96:a0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:23:03 2025 by rpki-client