Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/u1iJEaGYvFPMF9k25p8KEuwruA4.roa
File: u1iJEaGYvFPMF9k25p8KEuwruA4.roa (raw, json)
Hash identifier: fh5BeAKi1U7XlfJpC9iKV5ENfsiSxs4q6x/yhwOP6Tg=
Subject key identifier: BB:58:89:11:A1:98:BC:53:CC:17:D9:36:E6:9F:0A:12:EC:2B:B8:0E
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: 016A
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/u1iJEaGYvFPMF9k25p8KEuwruA4.roa
Signing time: Thu 31 Oct 2024 01:34:21 +0000
ROA not before: Thu 31 Oct 2024 01:34:21 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 2527
IP address blocks: 211.10.32.0/19 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Oct 31 01:34:21 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=BB588911A198BC53CC17D936E69F0A12EC2BB80E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:d2:7c:94:f4:6d:ee:38:41:21:cf:78:8c:a9:
4e:d3:06:ba:6e:f0:07:13:97:a0:75:4c:4b:c1:f6:
ec:43:31:0b:01:b5:9c:b0:50:47:0c:14:0f:5d:7b:
df:d8:ff:f6:77:8c:24:db:1e:35:c6:3a:94:9c:7b:
ad:3b:a7:ae:85:13:2d:33:21:06:1f:a2:fe:d3:34:
78:7c:a5:c6:3b:70:93:1d:be:79:7b:e8:25:b8:b9:
c3:a6:5e:ef:94:78:33:a3:ed:d5:5c:2e:db:83:b0:
b4:b4:77:52:be:e2:dc:cf:57:b9:04:eb:fa:11:b1:
17:05:a1:6a:31:b0:bb:42:ae:6b:71:51:02:12:5b:
28:cc:45:de:78:45:13:f0:7e:7a:56:cd:e9:84:83:
be:6e:3a:3c:7c:f5:c3:c0:af:73:23:9d:20:4c:4d:
5b:e7:04:8d:01:2d:20:fe:b9:d7:0e:3e:5f:43:f9:
05:6b:52:c5:65:ce:78:33:f5:24:92:c8:6a:a0:54:
fe:c0:f9:72:62:82:d0:95:e6:e3:40:14:a1:2d:a8:
fb:1f:d1:69:04:20:55:6a:c1:2e:c5:b6:85:21:f1:
54:46:ad:e7:0f:6c:78:db:e8:84:d5:78:fd:6d:58:
d3:18:20:1d:4f:38:98:55:a5:5b:46:d9:38:03:e2:
65:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:58:89:11:A1:98:BC:53:CC:17:D9:36:E6:9F:0A:12:EC:2B:B8:0E
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/u1iJEaGYvFPMF9k25p8KEuwruA4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.10.32.0/19
Signature Algorithm: sha256WithRSAEncryption
85:77:36:e2:82:00:11:04:d4:a2:57:2b:9d:a8:8f:64:55:96:
7d:f3:8e:cd:33:39:0b:77:14:a3:53:28:aa:fa:ec:b5:63:b8:
77:cf:1f:59:56:b4:1e:84:4b:06:89:24:6e:63:28:dc:f0:71:
ac:39:57:b9:b7:68:22:ec:a1:44:1f:11:1f:c6:bb:54:66:31:
03:e7:18:bd:89:d3:47:1f:f5:be:b4:36:ac:22:f5:50:11:82:
11:b8:c7:6e:33:dc:35:09:c5:7c:73:8f:90:b9:44:45:40:b1:
43:3d:a2:6c:25:49:14:4f:4c:58:ba:1a:93:08:7a:5a:82:68:
4b:15:69:1c:02:b4:70:56:3e:73:9d:b4:01:34:59:5d:4f:c6:
5d:bd:e8:4a:29:22:1e:10:07:5a:1d:f4:b5:a9:91:66:b5:f2:
5f:3d:f4:06:dd:fc:99:e3:d7:c2:38:75:58:fd:88:d6:73:d8:
06:c5:36:df:cb:93:31:00:43:94:a6:78:18:6c:eb:05:c4:bd:
03:c7:0e:ee:d6:03:22:7a:96:3f:e7:a4:b5:12:58:b2:59:fc:
ac:b1:7d:d4:3e:63:d0:d4:92:ff:fd:5d:4d:3f:fe:39:4e:a2:
44:b5:1e:8b:32:18:d4:2e:1e:1e:09:67:69:7c:29:f6:0f:32:
45:09:61:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 03:40:07 2025 by rpki-client