Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/u4D5zfB464ADza-7GpU_hqBXSs8.roa
File: u4D5zfB464ADza-7GpU_hqBXSs8.roa (raw, json)
Hash identifier: VLl+uBXrbih1WaDMt7Or30lGUdIqjfEp6lSg4PnJX4k=
Subject key identifier: BB:80:F9:CD:F0:78:EB:80:03:CD:AF:BB:1A:95:3F:86:A0:57:4A:CF
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 033F
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/u4D5zfB464ADza-7GpU_hqBXSs8.roa
Signing time: Thu 23 Jan 2025 01:10:43 +0000
ROA not before: Thu 23 Jan 2025 01:10:43 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10013
IP address blocks: 180.131.104.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 831 (0x33f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jan 23 01:10:43 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=BB80F9CDF078EB8003CDAFBB1A953F86A0574ACF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e2:3e:c4:d3:57:57:33:92:76:6c:eb:30:91:
87:5a:92:3e:93:6c:36:6a:a2:4e:4c:7e:fa:bd:7f:
22:b1:60:fd:7e:63:84:73:e6:22:24:d1:5b:ed:fc:
a2:c8:b1:95:79:f2:3d:b4:94:16:7d:c4:55:47:93:
2e:8c:22:33:09:9a:13:69:e6:de:96:26:23:e2:52:
86:21:d8:6a:d4:c3:1b:98:fb:a9:72:d0:9d:4f:41:
2c:b8:5a:70:16:43:0c:5a:7c:88:db:e9:7d:9d:51:
3b:65:fb:48:77:9f:48:f2:51:d9:d6:32:50:90:a2:
6b:db:eb:ea:2d:b6:f3:eb:5f:11:d5:9d:5b:7a:d2:
49:67:c7:73:60:ae:0c:02:22:35:96:4e:99:cd:7a:
f3:d7:5c:4e:06:11:ad:8d:26:57:04:a3:e2:dd:73:
4f:e7:b0:aa:1f:4c:b0:8d:e9:e6:46:cc:48:f1:da:
d5:07:8c:7f:88:70:3d:cf:6c:28:c3:6b:c5:0f:c5:
93:01:6d:b2:d1:46:c9:8e:da:cc:d6:9b:5f:39:09:
fc:bb:90:fe:bc:49:0a:2f:ce:1e:e3:56:99:3c:b6:
0d:5f:3d:5f:8e:ca:f8:dd:29:42:a0:3e:8b:3b:95:
cc:7b:52:08:3a:83:85:55:5c:99:41:fc:a6:c7:87:
b6:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:80:F9:CD:F0:78:EB:80:03:CD:AF:BB:1A:95:3F:86:A0:57:4A:CF
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/u4D5zfB464ADza-7GpU_hqBXSs8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
180.131.104.0/22
Signature Algorithm: sha256WithRSAEncryption
08:d3:e6:37:da:ec:a6:bc:46:63:72:d0:30:19:62:ca:8a:8e:
a0:4a:1f:59:0d:84:da:2e:33:34:46:4b:9f:58:aa:b4:39:6c:
62:ce:3d:5b:8c:05:03:2f:6d:0a:b7:2d:3b:1d:f3:c7:2f:d9:
03:a9:64:97:45:d9:a6:f7:f8:b0:30:41:66:3c:28:2b:a8:5c:
55:81:90:b6:6e:9a:26:66:6f:50:4f:bd:c2:37:c9:be:9e:30:
11:a6:a3:46:96:d3:a8:8f:9f:fa:70:90:74:62:2c:60:fc:1c:
f9:10:fa:e7:ba:23:75:3e:cc:49:b5:1e:75:99:e0:6c:72:9a:
fe:bd:c2:50:bb:f7:31:0c:f6:c1:8c:47:08:fe:87:7c:2d:a3:
84:b4:46:86:05:40:67:8a:ea:8d:4b:cf:8a:37:3e:12:f5:90:
80:e4:89:87:ae:3c:84:c8:b1:f9:f1:5e:5f:39:4e:51:d7:aa:
f4:89:4c:dc:f7:e6:d9:3b:5b:ee:0a:c3:6d:a3:af:a1:48:6d:
f6:c7:52:b2:d9:cf:93:55:52:b9:d4:6b:bd:a1:4f:f4:29:fc:
3f:be:c3:15:4a:32:7f:fc:e4:6c:f9:1a:15:2d:5d:61:06:00:
9c:b0:f5:c0:77:c8:b3:b5:ee:a1:6c:47:e0:67:5b:28:53:4c:
62:59:b4:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 30 02:00:31 2025 by rpki-client