Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/hfDS2j10s8YTxJAvEaVvF0_kEqw.roa
File: hfDS2j10s8YTxJAvEaVvF0_kEqw.roa (raw, json)
Hash identifier: Od2U0ZLSWlvdD80T8kvpeK1ohJY/6IuTOmkB7BdlGS0=
Subject key identifier: 85:F0:D2:DA:3D:74:B3:C6:13:C4:90:2F:11:A5:6F:17:4F:E4:12:AC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A47
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hfDS2j10s8YTxJAvEaVvF0_kEqw.roa
Signing time: Sun 30 Jun 2024 01:48:26 +0000
ROA not before: Sun 30 Jun 2024 01:48:26 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 49.108.225.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2631 (0xa47)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:48:26 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=85F0D2DA3D74B3C613C4902F11A56F174FE412AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f4:83:66:14:d9:9b:e2:ee:64:99:b6:46:3f:
bf:61:4b:de:53:22:4d:ce:62:b3:06:86:02:88:24:
b3:53:a3:d1:d1:75:6d:36:13:03:fc:1f:d0:16:f1:
c8:f9:67:81:e7:d4:d5:95:2c:73:97:7f:08:19:83:
cd:b0:f8:85:59:eb:d7:ee:a3:ec:df:e4:b7:49:ab:
23:8f:5e:85:2f:8b:66:85:43:99:0b:60:49:3f:b7:
62:ba:79:b3:d2:0d:ec:d7:22:8c:52:1a:d5:2d:c1:
13:c1:44:08:1d:e2:91:bc:7e:a5:4b:4f:d4:44:f1:
ce:e8:f6:e0:b1:74:c6:a9:b2:11:ed:1d:00:43:1d:
79:05:c9:89:7f:d7:66:98:da:ac:66:85:ba:ff:c1:
20:44:50:91:70:91:78:fe:be:f2:ee:aa:e5:0c:47:
e9:74:6f:d8:fe:63:c6:e2:d9:45:44:23:7c:28:1e:
40:5e:0e:f9:d2:fd:2c:87:61:37:1e:c6:86:39:da:
df:02:9d:d6:50:ff:c3:01:93:57:6f:67:7f:65:7c:
41:58:c1:97:80:87:91:09:62:a9:76:b0:b5:84:b8:
c4:49:0d:d4:0a:58:16:86:69:fc:14:35:15:69:53:
8a:c5:47:b5:7e:c7:18:d4:0c:a2:8d:ba:6a:44:5c:
ba:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:F0:D2:DA:3D:74:B3:C6:13:C4:90:2F:11:A5:6F:17:4F:E4:12:AC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/hfDS2j10s8YTxJAvEaVvF0_kEqw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.108.225.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:84:b7:c9:7c:3a:c0:35:81:97:7a:19:8a:7d:0e:c6:89:77:
ad:7a:30:8d:56:85:60:9d:b0:0a:81:5f:36:61:d2:69:37:df:
ce:09:21:9c:ef:ae:48:e8:4c:9a:87:6d:31:dd:df:bc:84:94:
af:8a:a9:72:80:7b:29:e8:58:89:af:a5:19:62:b9:a9:28:64:
de:1e:93:a0:6b:fc:f8:e5:74:3e:5b:f1:ff:a1:00:c9:72:d7:
f3:87:51:52:2f:7d:aa:04:b8:d7:40:2f:2f:52:f8:76:69:c9:
07:43:c4:1c:22:ba:ee:a1:5b:6c:b6:7d:de:a7:63:a6:ca:f7:
0a:ef:eb:2b:87:d8:bd:b0:4d:0d:48:da:92:4a:fe:35:28:71:
43:73:d5:9e:20:bd:87:d1:6c:56:0d:7f:3f:4f:44:2c:5a:6a:
8a:13:61:7f:fa:1b:18:c6:fa:cc:63:a9:53:6f:58:3c:fd:51:
ae:f5:dc:a3:ca:05:12:94:c8:b2:55:78:c8:2e:05:2d:cb:9f:
19:0b:5c:44:64:ba:f6:76:df:af:1a:01:e5:d4:94:6d:d4:65:
63:d9:57:08:68:6b:12:ad:cc:02:0b:10:f4:18:1a:fa:24:3d:
0b:7f:68:3d:ba:36:12:fd:e4:6d:3a:78:ea:e4:cd:60:57:c4:
a4:ce:b7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 14:55:04 2025 by rpki-client