Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ng6mVUBfwW5iCU8YlipSTqLp7mU.roa
File: ng6mVUBfwW5iCU8YlipSTqLp7mU.roa (raw, json)
Hash identifier: 9/YEkfQa6N2HwajtV2Je4ccnqKJ3xlMpf7+26CBkST8=
Subject key identifier: 9E:0E:A6:55:40:5F:C1:6E:62:09:4F:18:96:2A:52:4E:A2:E9:EE:65
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A41
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ng6mVUBfwW5iCU8YlipSTqLp7mU.roa
Signing time: Sun 30 Jun 2024 01:48:22 +0000
ROA not before: Sun 30 Jun 2024 01:48:22 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.77.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2625 (0xa41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:48:22 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=9E0EA655405FC16E62094F18962A524EA2E9EE65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:4d:3a:c0:0f:2b:1f:7a:86:f3:a7:95:fb:ec:
b2:f8:d6:7b:49:8a:f5:e4:00:a1:11:57:76:d9:1d:
e3:84:83:d4:64:27:4a:c5:b9:3e:89:49:ca:bc:87:
df:e5:1b:56:f0:a5:9c:42:3f:08:98:75:76:d7:0d:
d3:11:ce:e1:a1:28:c7:bb:8f:1c:51:4c:ff:8a:4c:
a5:41:09:2e:5d:73:48:0f:09:96:a3:7b:fd:04:48:
10:1e:b9:07:86:42:0e:fd:83:0d:cf:20:be:92:be:
d1:35:20:6b:f7:2b:51:f0:fe:eb:9b:0f:ef:be:c6:
be:e6:af:b8:0e:31:e5:8b:f7:29:16:e9:5b:be:e3:
67:61:32:74:ea:6c:b2:d3:b4:ab:85:a8:dc:56:c6:
0a:e1:2a:fb:4c:6a:cb:5b:1f:f2:f5:23:7c:02:4a:
66:9c:52:57:15:c4:b0:ac:d0:af:d7:ac:9c:45:9a:
13:f2:c7:24:84:ed:e3:43:03:2b:d0:f6:73:28:1a:
7e:78:c4:41:cf:8d:09:0f:4a:3b:cb:0e:eb:6c:f0:
81:f9:60:32:79:a6:65:55:84:31:7a:bf:0a:7f:05:
f7:00:5e:d0:77:7f:76:31:bc:bf:d4:9f:22:de:8d:
ee:9a:0f:08:ab:5c:9b:1f:0c:82:38:a8:cd:60:9e:
8c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0E:A6:55:40:5F:C1:6E:62:09:4F:18:96:2A:52:4E:A2:E9:EE:65
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ng6mVUBfwW5iCU8YlipSTqLp7mU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.77.0.0/17
Signature Algorithm: sha256WithRSAEncryption
96:43:7a:80:3c:4e:56:0c:65:43:d6:a1:d9:34:bf:0a:53:b0:
7c:7f:be:29:44:96:a0:32:69:82:e7:e4:81:51:20:24:6a:10:
8c:3f:77:58:92:ab:cc:7f:f0:56:dc:f9:6c:55:46:88:8f:ff:
57:92:a1:e2:7d:45:68:8e:0f:65:05:42:4e:28:e6:56:c0:0a:
5a:32:3f:52:b8:f8:e8:bc:4a:ac:65:7b:31:5e:f2:c7:c6:71:
2f:c2:82:10:7f:eb:8a:a6:dd:2e:4a:23:90:6e:10:c3:ac:de:
0a:93:f7:95:3a:8f:47:d3:51:9e:cf:d2:74:11:b7:a0:4e:d4:
41:3f:8f:35:10:73:d1:41:69:95:d0:ce:74:c7:38:70:b6:ca:
34:de:2a:e3:99:dc:ea:19:79:d7:ea:ca:ea:e4:48:6a:9f:5e:
93:e7:7d:65:19:58:bb:df:25:c0:f2:22:0c:d3:3a:94:f7:23:
aa:23:23:7a:a8:47:8f:45:23:9b:39:f6:83:30:58:74:36:28:
ec:d1:81:32:7b:23:00:7e:be:49:39:63:1a:ca:3e:6c:50:e6:
69:13:03:4e:62:46:29:86:4d:10:35:e6:40:e2:9f:11:38:4d:
1a:f0:d1:e4:1e:57:97:e8:85:fd:db:91:d4:8d:ae:fb:c3:ad:
32:18:a5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 16:50:06 2025 by rpki-client