Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/R91zBVAhWttnfzSXwq7mhRAXP98.roa
File: R91zBVAhWttnfzSXwq7mhRAXP98.roa (raw, json)
Hash identifier: tNjZsBoDOeBcL+N3MGBSd1HYN9tgVLRAitlbSsABm4g=
Subject key identifier: 47:DD:73:05:50:21:5A:DB:67:7F:34:97:C2:AE:E6:85:10:17:3F:DF
Certificate issuer: /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial: 0120
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/R91zBVAhWttnfzSXwq7mhRAXP98.roa
Signing time: Sat 01 Jan 2022 01:31:26 +0000
ROA not before: Sat 01 Jan 2022 01:31:26 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 49.212.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 288 (0x120)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Validity
Not Before: Jan 1 01:31:26 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=47DD730550215ADB677F3497C2AEE68510173FDF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:56:e0:41:e5:43:23:92:e3:bf:ec:54:9d:d2:
89:c9:19:1e:d3:c5:e0:cb:a3:9e:33:8a:4e:d5:82:
46:6f:9f:73:c6:13:07:e7:0f:8a:90:d1:3a:6b:96:
45:5b:f9:38:0c:f7:60:3c:13:18:5e:f9:e1:7b:23:
34:78:3a:b3:be:9c:ef:ff:01:02:48:c0:7b:d1:ac:
fc:bd:b0:ec:bc:20:18:02:0a:9a:ab:bb:6e:fa:2f:
8f:68:12:55:7b:aa:ca:fa:f0:8b:2f:8e:4b:3a:e5:
cf:60:d1:bd:ac:01:d8:b6:83:3d:b8:12:4e:23:b4:
db:1e:6d:92:4f:08:20:0f:b3:36:c1:a4:27:e8:fd:
06:88:5c:c0:70:d9:ec:4d:eb:a8:aa:89:96:4b:6e:
de:89:c0:b5:4c:1a:6e:77:30:c4:61:f6:50:4d:61:
3f:53:b0:5f:06:d6:c2:5d:a4:ad:be:bc:67:8d:95:
76:dc:62:0f:fb:8a:7f:ec:3c:97:cb:1f:6e:45:59:
b1:8c:81:c9:13:d5:d2:1e:ce:d0:62:40:72:93:9f:
8d:2d:31:92:89:c0:d1:5e:93:26:34:f0:02:e5:5a:
95:84:bd:11:6a:81:96:d5:0d:f5:9d:60:d1:ab:b5:
c5:c6:27:61:1d:34:9f:ef:f7:7e:cd:1a:ff:6d:93:
19:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:DD:73:05:50:21:5A:DB:67:7F:34:97:C2:AE:E6:85:10:17:3F:DF
X509v3 Authority Key Identifier:
keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/R91zBVAhWttnfzSXwq7mhRAXP98.roa
sbgp-ipAddrBlock: critical
IPv4:
49.212.0.0/16
Signature Algorithm: sha256WithRSAEncryption
ce:9d:b1:0b:64:d8:e7:3b:44:22:e4:62:86:bf:6b:99:00:80:
cb:58:80:9a:08:9f:bb:a5:81:3a:71:a3:88:b0:7c:93:bf:97:
99:ee:21:6f:62:f3:c0:0f:ae:54:89:32:d7:56:6e:6a:df:56:
f3:c0:f7:67:85:ca:a5:44:b7:33:ee:b4:c5:81:1d:26:46:12:
b2:4d:a8:ee:0b:34:e7:8a:74:09:4c:56:3c:c5:1c:0b:15:a5:
75:c5:cd:a6:e8:5d:5d:7c:44:9f:2d:cb:3e:da:79:c9:b3:eb:
c7:59:e5:63:83:37:b9:f0:cf:73:6f:b4:4c:9e:70:f0:de:7b:
f1:1e:29:2d:57:56:07:b9:04:98:d5:b5:2c:8d:e1:31:f9:9a:
d2:39:72:4b:9e:86:21:83:79:04:25:23:74:4c:5b:b5:d4:8d:
25:1c:70:c8:e3:c6:f1:f8:0b:37:60:69:26:16:e2:43:ff:8d:
6a:4e:0b:5f:bf:b5:19:47:e6:14:42:b8:83:16:d3:bf:ad:67:
b6:4f:db:1c:51:cf:af:f8:f6:e9:25:d3:e4:28:26:f9:1f:38:
91:36:0e:95:de:ea:ba:b8:dc:9f:90:19:df:5e:ba:18:bc:0f:
6b:62:b0:08:e4:22:11:a8:2b:b8:28:59:82:3c:10:37:bc:10:
70:4f:6c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:44 2025 by rpki-client