Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/gJ2gdFcGHd2yygfbimP-em9A3_c.roa
File: gJ2gdFcGHd2yygfbimP-em9A3_c.roa (raw, json)
Hash identifier: 4DRm1Ky1H01Ga3a1v+TfG/wRpdO0nbs8T0CLJ8BMiG8=
Subject key identifier: 80:9D:A0:74:57:06:1D:DD:B2:CA:07:DB:8A:63:FE:7A:6F:40:DF:F7
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0637
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gJ2gdFcGHd2yygfbimP-em9A3_c.roa
Signing time: Tue 30 Apr 2024 01:31:23 +0000
ROA not before: Tue 30 Apr 2024 01:31:23 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.184.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1591 (0x637)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:31:23 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=809DA07457061DDDB2CA07DB8A63FE7A6F40DFF7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:3b:d5:a0:d0:1a:d8:e9:b9:d2:82:41:5b:
71:93:c0:9a:70:fd:0c:0b:1d:66:9e:10:0d:40:9b:
70:a5:f5:c1:a7:63:83:a4:e3:aa:bc:80:c0:49:3e:
a3:e7:e1:6a:8d:a1:0f:82:4d:ed:9c:c2:1c:0e:c8:
74:88:78:b9:25:0e:dd:47:b7:c5:93:05:0d:d0:4d:
8e:10:df:cf:58:c5:80:8e:7b:95:84:96:72:98:3a:
55:f6:d7:f2:f2:8a:65:a6:be:22:c7:85:d7:c8:20:
55:73:e8:08:67:68:1d:b6:84:5c:fb:71:ec:5b:aa:
e4:f2:03:fb:a1:c7:f1:33:d1:c6:18:b3:eb:93:0b:
92:50:e2:c4:2d:da:39:c4:ed:8e:56:d7:8d:cf:41:
82:9d:f6:1a:d0:89:65:9c:0c:77:ef:92:a1:cf:a5:
f2:44:ce:d7:55:08:c8:85:b6:99:07:22:0c:54:a1:
f0:c3:aa:a5:26:a3:af:51:bc:02:a1:83:70:f8:44:
b6:44:9d:25:99:35:bf:77:73:96:6e:f6:9f:e7:5b:
e5:95:16:2b:6f:9a:a8:66:de:ca:1a:bf:53:49:69:
5d:0a:b5:9c:5a:70:78:38:ef:68:e0:9d:65:0a:ed:
88:a0:2c:17:dd:f2:ec:6b:62:59:85:54:3f:37:df:
89:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:9D:A0:74:57:06:1D:DD:B2:CA:07:DB:8A:63:FE:7A:6F:40:DF:F7
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/gJ2gdFcGHd2yygfbimP-em9A3_c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.184.0/22
Signature Algorithm: sha256WithRSAEncryption
b9:ea:24:7f:1c:36:bf:86:91:b7:02:5c:17:fc:23:3c:b5:17:
e2:db:f9:64:53:60:c9:3c:54:16:57:ac:00:95:9f:85:b5:cf:
86:3b:d4:62:ee:e5:ef:7a:03:7f:4b:24:53:51:ba:54:79:52:
4f:bb:78:1c:8d:77:11:50:7a:4c:13:63:58:47:34:5d:ef:0d:
e6:b6:20:08:c0:23:a8:9d:f4:96:c0:2d:14:a2:ce:a4:33:7d:
66:ca:d6:9e:27:e3:19:1b:fb:fc:4e:6c:03:f1:8a:cb:93:ed:
58:a4:66:b5:ae:17:c0:0a:3d:52:d2:18:39:53:46:29:ed:a9:
12:37:ff:83:b6:e8:83:7a:91:8a:22:3a:92:9f:87:1f:ed:56:
84:3f:09:27:f2:e5:89:74:cb:28:48:6a:8c:7f:66:7f:be:03:
b7:d1:fe:0d:6e:9a:7b:6d:39:c2:92:c1:5d:b4:43:ce:40:68:
43:b5:47:18:66:94:25:c8:21:d4:7c:0e:a9:40:4b:86:9c:89:
3b:43:8a:6e:9a:bc:63:2a:8b:28:41:be:a6:f7:28:c9:56:f9:
28:f4:40:68:08:e0:6d:b4:26:9b:87:62:54:7b:d2:dc:48:ae:
dd:f8:59:57:ae:94:5f:0e:03:1b:f0:33:6f:58:ce:65:bc:61:
46:ab:ec:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 13:12:47 2025 by rpki-client