Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/q61pgXX-eUFqofO5ODK4ZSpgl1w.roa
File: q61pgXX-eUFqofO5ODK4ZSpgl1w.roa (raw, json)
Hash identifier: 8Zas3ZpE6/LGWrJPfo9jcS4S4UtoghFIXKcQjgQk10U=
Subject key identifier: AB:AD:69:81:75:FE:79:41:6A:A1:F3:B9:38:32:B8:65:2A:60:97:5C
Certificate issuer: /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial: 68
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/q61pgXX-eUFqofO5ODK4ZSpgl1w.roa
Signing time: Wed 31 Jul 2024 01:31:14 +0000
ROA not before: Wed 31 Jul 2024 01:31:14 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 2497
IP address blocks: 157.65.176.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 104 (0x68)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
Validity
Not Before: Jul 31 01:31:14 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=ABAD698175FE79416AA1F3B93832B8652A60975C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:40:0d:1d:f7:d0:a8:1d:83:98:fa:fc:df:
14:0f:5e:d2:26:0c:f9:bb:1a:0e:8d:04:28:88:6c:
a0:bf:68:14:c7:6f:8d:c4:51:84:31:0b:73:3b:ba:
25:d8:72:fb:16:7f:2f:03:d9:be:f5:60:34:fe:f4:
d3:bc:75:da:ee:69:82:c1:96:eb:ba:dd:aa:bb:1b:
70:c6:12:39:c3:e7:da:db:48:03:15:eb:bd:86:aa:
4d:ec:10:65:09:56:24:98:1c:87:5f:2f:6b:10:c5:
15:f7:ea:60:95:aa:7c:61:e1:af:b3:49:2a:0b:af:
6f:d9:04:4b:f7:0f:57:ef:3b:6c:34:6a:be:2f:7a:
bc:75:b0:c6:b8:bd:13:64:9d:1d:07:3e:30:0d:ee:
de:4e:53:80:29:41:4b:65:5f:27:05:28:84:e8:0a:
b3:d3:50:83:01:02:e9:68:83:11:a0:e0:49:57:03:
dc:a6:9e:f5:cc:b8:cf:5c:0e:ae:86:0c:40:cc:6d:
b7:49:32:a2:33:99:40:79:c1:2e:6a:7c:23:8c:b9:
3c:86:9e:18:d6:e2:a5:bb:23:5e:9c:75:f0:ff:cc:
c8:8d:84:dd:f1:00:58:a5:42:bc:13:a3:26:22:51:
5d:9c:cb:1b:6a:05:5e:e4:7d:00:29:c9:06:cc:bd:
73:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AD:69:81:75:FE:79:41:6A:A1:F3:B9:38:32:B8:65:2A:60:97:5C
X509v3 Authority Key Identifier:
keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/q61pgXX-eUFqofO5ODK4ZSpgl1w.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.65.176.0/21
Signature Algorithm: sha256WithRSAEncryption
c2:48:95:c0:bc:36:c9:e9:1d:eb:51:b7:8c:f3:cf:59:38:1e:
8a:a9:34:27:51:80:1f:00:9a:88:77:ab:bc:cf:cb:da:91:2e:
7e:de:a8:44:0e:18:15:b0:38:ca:2e:b3:e1:c6:f1:99:a2:07:
4c:a1:63:bf:b8:1c:d2:31:c6:f6:e7:fd:61:b4:aa:0b:e2:44:
dd:95:53:92:c2:a3:e3:3e:2b:31:91:57:98:23:91:88:d4:46:
34:c4:d2:2c:c9:74:d1:b9:09:71:be:dc:b1:36:a0:ce:37:91:
6b:8d:5f:77:16:ac:25:22:ec:6b:bf:2f:49:bc:84:9c:60:03:
ca:82:0c:07:80:20:89:60:5f:0d:0a:18:ef:8b:2f:ab:44:c0:
c6:be:1e:7c:5e:66:56:43:c4:bb:72:2f:b6:e7:d2:92:ec:a4:
34:84:e9:b4:2f:3d:72:5a:de:fe:e9:47:e1:2b:8f:4d:ba:1e:
cf:dd:56:98:6c:cc:bf:f6:db:c1:3c:e7:a5:05:75:97:20:6a:
82:80:6b:f5:d9:38:72:6d:ae:a3:dd:bf:f7:5c:5c:83:1d:8b:
99:b7:0d:e2:82:07:10:0f:f5:6b:99:84:e9:4e:57:fc:93:1f:
98:6a:da:ed:dd:e1:39:38:82:94:96:7f:96:57:11:10:8f:0a:
d7:c5:95:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:32:48 2025 by rpki-client