Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/o_om8m6RRx29H8FDRYwnOleDqzE.roa
File: o_om8m6RRx29H8FDRYwnOleDqzE.roa (raw, json)
Hash identifier: s4GoEoMHO11p5lDHmHcGc+i4TNMgwbOIZYSuiaRiWc4=
Subject key identifier: A3:FA:26:F2:6E:91:47:1D:BD:1F:C1:43:45:8C:27:3A:57:83:AB:31
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 09EF
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o_om8m6RRx29H8FDRYwnOleDqzE.roa
Signing time: Sun 30 Jun 2024 01:42:25 +0000
ROA not before: Sun 30 Jun 2024 01:42:25 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.210.110.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2543 (0x9ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:42:25 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=A3FA26F26E91471DBD1FC143458C273A5783AB31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:32:13:2f:df:98:c2:6d:ed:94:c3:29:dd:95:
6d:f1:fe:df:c5:11:8f:1d:2b:d1:69:fd:9a:97:91:
49:bd:80:1c:9e:62:00:3d:ac:a9:1d:62:79:a1:5b:
ed:eb:cf:11:07:62:10:72:e8:62:49:d2:07:23:91:
4f:f1:a7:94:9b:1d:da:52:b2:05:f6:69:23:37:39:
b7:9f:7b:a2:ce:c2:a6:82:c2:82:86:ae:4c:84:ea:
7b:f0:d1:2c:cc:eb:b6:dc:aa:b5:ed:17:8f:83:ef:
7a:fb:d8:1d:7c:ba:f2:6e:7b:13:01:df:fb:6d:6a:
0e:ac:f0:49:77:9b:fe:02:46:c4:06:74:40:57:22:
e7:1f:f5:01:56:9b:78:27:b3:84:e9:36:e5:3b:0e:
cc:89:b3:70:a9:9e:35:8c:6b:74:cf:1c:23:50:54:
d7:aa:43:79:4d:1c:f2:e7:81:a6:bd:ce:02:43:77:
94:dd:de:16:15:c5:a9:a1:a8:de:1e:ff:2e:1b:84:
1f:cc:98:99:9b:7d:59:9b:7e:25:90:71:45:25:62:
64:d1:ca:e8:5b:83:ad:2f:07:60:0c:9f:57:b5:a9:
fd:52:8f:26:ba:4d:1f:c2:13:1b:78:e4:fe:47:03:
56:b4:98:b6:26:18:d9:03:a8:ce:0a:12:a5:cb:bd:
4e:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:FA:26:F2:6E:91:47:1D:BD:1F:C1:43:45:8C:27:3A:57:83:AB:31
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/o_om8m6RRx29H8FDRYwnOleDqzE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.210.110.0/23
Signature Algorithm: sha256WithRSAEncryption
95:c3:2a:d8:59:eb:a0:2e:51:50:d9:f9:58:2d:a0:48:43:b5:
14:b3:38:e0:7f:88:8c:2b:92:35:28:25:7f:e9:15:5c:f0:8a:
95:4f:0e:77:19:81:98:a7:46:17:40:5e:2c:c8:a3:0a:84:5e:
f3:05:6a:4a:56:7d:09:ff:5f:a2:ee:99:07:e7:33:ab:d7:f2:
9d:a4:f5:90:78:e9:46:a6:b3:75:fc:84:f7:95:28:80:0e:19:
71:df:b0:02:06:2c:6f:41:40:e7:6e:41:39:fe:36:71:56:50:
38:5a:2c:ce:cf:f5:e2:95:2f:96:6f:c2:64:b9:78:2c:e6:9b:
f1:af:c2:0a:32:dd:82:ce:3c:67:1e:0d:06:44:63:16:ca:69:
fe:fa:7a:97:04:f6:b6:84:b9:8d:ac:81:f6:87:3c:e2:d2:34:
fa:94:a3:2b:41:1a:08:62:e5:a6:94:0f:11:7f:3f:cf:9e:fb:
f9:32:d4:39:51:68:ba:ea:be:1f:53:0e:d8:4b:9f:74:1d:a2:
10:99:d4:56:d9:b1:ea:8c:1a:81:13:b8:18:18:63:72:c1:87:
51:9b:a1:da:2a:71:a1:ef:f6:6c:52:42:55:c2:5f:92:21:31:
0a:2a:23:9a:e9:cc:b8:98:7d:e8:3d:45:3d:ca:44:48:76:65:
4d:49:2e:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:00:41 2025 by rpki-client