Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/utCp3437n7Cj0eyPlIcF5V31WrY.roa
File: utCp3437n7Cj0eyPlIcF5V31WrY.roa (raw, json)
Hash identifier: DqwZLT/8Eun3YmDMP/+afhMHRCzouu4Z8CBqcSoVcFg=
Subject key identifier: BA:D0:A9:DF:8D:FB:9F:B0:A3:D1:EC:8F:94:87:05:E5:5D:F5:5A:B6
Certificate issuer: /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial: 0165
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/utCp3437n7Cj0eyPlIcF5V31WrY.roa
Signing time: Wed 31 Jul 2024 01:31:27 +0000
ROA not before: Wed 31 Jul 2024 01:31:27 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 2497
IP address blocks: 58.138.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 357 (0x165)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Validity
Not Before: Jul 31 01:31:27 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=BAD0A9DF8DFB9FB0A3D1EC8F948705E55DF55AB6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c0:7f:92:2d:3e:4f:d4:d3:99:64:83:08:7a:
3d:ec:98:98:be:52:6b:2d:be:70:43:a1:ce:e6:d4:
97:f6:ce:97:e3:f0:59:2f:e2:18:61:49:c0:1e:ca:
08:2b:00:81:c6:80:8d:07:29:17:2c:99:bd:7e:cf:
ab:8d:3d:53:1c:9f:54:7e:64:de:eb:6f:5e:62:23:
5f:2f:bb:51:8b:e4:94:17:75:2d:8d:ba:52:ee:77:
0e:de:a7:28:2e:01:9c:99:66:a8:b8:13:80:83:0c:
2f:bd:95:70:58:a8:4d:80:32:0b:d5:ef:8b:d2:4a:
8c:95:90:8c:c6:5b:f1:36:96:1a:0b:e2:e3:ef:ba:
77:dd:e0:69:8d:fa:ef:b5:87:f6:0f:5b:e4:b3:8c:
29:4a:a8:3d:08:08:56:28:a5:34:ad:26:86:b6:65:
3e:7b:b4:9f:67:8b:8d:c5:21:79:5c:59:7f:74:33:
cc:e7:76:b1:0d:03:d4:c9:f7:da:f1:d4:cf:01:f7:
c1:c2:ee:ea:0c:8d:ef:a7:99:17:82:a6:95:ef:c6:
bb:3b:84:ab:ef:27:f9:49:51:cf:c1:a1:a7:cc:c2:
ad:01:a6:08:d7:ca:ed:24:6f:c9:2f:0c:67:5e:c9:
61:b7:d2:37:c5:43:12:4f:af:23:a7:86:c6:2b:de:
28:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D0:A9:DF:8D:FB:9F:B0:A3:D1:EC:8F:94:87:05:E5:5D:F5:5A:B6
X509v3 Authority Key Identifier:
keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/utCp3437n7Cj0eyPlIcF5V31WrY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
58.138.128.0/18
Signature Algorithm: sha256WithRSAEncryption
35:6d:5c:86:20:cf:cf:65:ed:e8:3a:37:7a:2d:39:7f:b4:0c:
bf:57:9e:d9:86:b9:c9:0b:2c:96:68:df:cf:9f:c9:1b:6f:ed:
66:0b:fe:f6:c7:3e:b7:48:bf:7a:5c:59:4b:89:52:40:bf:d9:
22:8d:0c:04:d2:ab:59:b7:3f:18:43:b8:db:c9:77:8c:d0:c7:
da:1e:8a:ac:ec:26:93:52:bb:e8:d7:3b:2b:fa:a0:e1:40:75:
aa:ae:7c:3e:a7:3f:b2:92:49:f4:81:b0:95:d6:e8:bb:2c:ec:
24:30:c5:b4:be:58:67:c4:55:22:86:f6:92:2a:59:57:e8:5a:
b8:25:f6:23:e7:5a:f6:88:38:6b:3b:5a:eb:4f:7c:29:0f:b0:
97:17:9d:9b:4e:63:7d:13:51:51:79:d1:f9:7c:09:1b:60:cb:
39:0b:b8:46:27:01:e7:62:7c:41:83:56:82:6c:31:66:a2:b2:
10:60:bf:dd:b2:d5:31:f9:5f:78:36:2d:ae:ce:78:a0:3c:15:
c2:11:25:6b:6f:a3:1b:ad:3e:41:24:e2:bb:d9:c6:dc:e9:a7:
ac:53:75:5e:25:12:68:8b:68:3c:a8:f2:b4:44:b1:de:20:84:
e3:93:e1:20:50:af:7f:62:40:04:e2:68:39:81:b8:c1:3c:f5:
16:02:ce:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 12:29:02 2025 by rpki-client