Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n5c4bqIVIeWyauqWWy-abKxWdy8.roa
File: n5c4bqIVIeWyauqWWy-abKxWdy8.roa (raw, json)
Hash identifier: LTB3wry277Ry1Sq6vVUqHfs18Sc0/q7XgRa+myMQQAQ=
Subject key identifier: 9F:97:38:6E:A2:15:21:E5:B2:6A:EA:96:5B:2F:9A:6C:AC:56:77:2F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0898
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n5c4bqIVIeWyauqWWy-abKxWdy8.roa
Signing time: Tue 30 Apr 2024 02:20:40 +0000
ROA not before: Tue 30 Apr 2024 02:20:40 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.88.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2200 (0x898)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:20:40 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=9F97386EA21521E5B26AEA965B2F9A6CAC56772F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:01:a9:be:81:75:d1:10:a2:92:54:20:12:e0:
ae:23:7f:a9:34:7b:d9:c7:1d:24:d7:cd:f1:25:95:
62:69:4b:f4:9f:da:4a:e8:de:30:be:b7:cb:44:c2:
a8:24:95:74:c9:99:e8:bb:5f:dd:7d:49:11:35:3e:
3d:0d:5d:62:c2:9a:ea:9c:88:aa:9f:ae:d2:42:62:
c5:2c:f9:7a:6b:ad:87:a3:9f:59:18:18:d6:71:14:
fd:f9:48:da:21:45:02:ba:f7:d8:98:bd:e1:88:0a:
61:ac:27:0c:cf:5d:ed:25:42:d2:20:c2:ef:57:8c:
2f:c2:2c:1a:b9:29:ea:e9:78:44:2f:fe:e0:e6:e7:
a6:5a:cc:f5:24:c8:a7:6a:a2:c3:0d:2b:bb:9d:6b:
56:e9:64:5c:74:31:ec:81:86:72:7c:d5:dc:4a:3e:
01:b9:8d:7c:64:05:c3:2d:36:23:e0:6a:93:31:82:
7b:57:91:d2:11:89:dd:a6:26:c5:0a:13:80:f1:e7:
3e:ac:bb:cd:94:32:9b:c1:6a:69:e3:d5:ce:df:33:
5d:0a:94:bb:bd:ef:71:0a:64:04:43:66:cb:18:9c:
0d:51:bb:6b:fe:f2:4a:6f:fc:e6:7e:a0:4b:0a:fb:
c1:09:20:46:7f:51:3e:0f:d3:f6:4c:29:f2:75:69:
9c:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:97:38:6E:A2:15:21:E5:B2:6A:EA:96:5B:2F:9A:6C:AC:56:77:2F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n5c4bqIVIeWyauqWWy-abKxWdy8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.105.88.0/23
Signature Algorithm: sha256WithRSAEncryption
8f:f4:72:9c:d8:38:bd:ca:4d:b3:c5:1a:b5:b7:65:4e:8e:de:
60:7f:d9:d5:9c:1e:d2:09:4e:43:0c:c8:c3:c1:41:81:fd:83:
dc:74:fc:76:d2:53:3a:7b:42:5b:a2:6e:64:95:b2:df:de:13:
3f:c4:c6:93:17:9f:99:2e:e0:3a:3c:60:e3:fe:61:f4:f8:1d:
93:d9:d0:8a:aa:f1:db:f2:38:c7:cd:9e:0d:8c:7a:00:56:12:
db:72:43:d3:35:98:65:d3:eb:0b:27:c9:87:65:e3:99:77:41:
36:23:f8:d7:5b:3a:54:1b:45:b1:9f:f8:86:9a:0e:a6:5d:b4:
b0:00:51:e8:3d:3a:5b:12:fb:ee:d5:3f:7a:a5:0a:eb:4f:0b:
69:60:c9:61:f7:fb:99:32:b9:58:87:f4:19:73:a3:6a:6f:03:
e8:bf:ee:f4:98:e0:78:8d:8e:ae:a3:81:73:e0:04:7f:7f:31:
6c:7a:11:7f:58:e6:68:2c:16:9b:04:5f:58:ad:ff:eb:78:19:
3c:3d:87:b3:43:37:3d:fe:57:56:2d:9f:00:ac:41:cb:84:09:
07:14:ee:4e:f5:80:07:1e:67:b8:3e:dc:54:e4:54:2a:b4:de:
82:16:f5:1a:57:72:04:99:82:f1:65:62:e7:b9:0b:47:27:7a:
4d:ec:58:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 19:45:03 2025 by rpki-client