Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ctQhBxnqa0hCGdhR0kxK7tw5ORs.roa
File: ctQhBxnqa0hCGdhR0kxK7tw5ORs.roa (raw, json)
Hash identifier: HlUtah1ODYsLYchkQy7P6htOoKGj//wbWkb29n8iWeI=
Subject key identifier: 72:D4:21:07:19:EA:6B:48:42:19:D8:51:D2:4C:4A:EE:DC:39:39:1B
Certificate issuer: /CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
Certificate serial: 4F
Authority key identifier: B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ctQhBxnqa0hCGdhR0kxK7tw5ORs.roa
Signing time: Thu 29 Feb 2024 01:29:19 +0000
ROA not before: Thu 29 Feb 2024 01:29:19 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 55391
IP address blocks: 14.0.8.0/22 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 79 (0x4f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=B79C47CD54D327D3C1777CF5E41F162C9876BB65
Validity
Not Before: Feb 29 01:29:19 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=72D4210719EA6B484219D851D24C4AEEDC39391B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:0d:29:4e:f7:57:b5:df:3e:6a:0b:3b:d1:f9:
0d:a3:ba:d7:3c:db:58:e7:19:1b:d3:a1:15:9e:f4:
a8:e3:e4:cd:f4:58:aa:22:36:66:3a:df:0b:02:19:
56:a8:c5:28:04:9d:db:94:fe:0a:34:c2:5e:1d:77:
40:eb:ce:90:08:4e:d1:f7:70:a4:fa:15:4f:2b:2a:
d6:97:0d:22:0a:fd:a8:ae:48:d9:22:c3:59:fe:05:
d7:39:7f:17:2a:8f:30:a5:1c:7c:6c:cf:fd:88:ce:
61:ec:85:2e:2e:12:00:f7:1e:3c:4a:e8:be:8e:15:
54:86:1a:4a:f6:f4:cd:b3:4a:82:ee:b4:b1:b2:cb:
09:6f:73:66:e4:35:1c:d5:fc:c0:86:ef:1d:eb:c7:
fa:86:42:30:3c:83:bc:98:2d:c2:ef:7f:66:aa:df:
de:4a:93:e0:fe:3e:ea:c8:68:02:6a:8c:74:1d:57:
91:21:e3:f5:d9:90:25:2f:1f:9a:83:5c:4e:c9:ee:
26:2b:ca:de:bf:7e:bd:ed:1f:73:1f:b0:fc:e9:71:
9a:28:5d:1f:2e:1f:63:5a:ad:44:04:9c:98:f4:dc:
53:ae:df:4a:3e:69:58:74:5c:bb:2b:2c:85:ea:49:
40:e2:3d:8a:be:df:a3:91:40:a3:f3:72:21:d0:d2:
d7:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:D4:21:07:19:EA:6B:48:42:19:D8:51:D2:4C:4A:EE:DC:39:39:1B
X509v3 Authority Key Identifier:
keyid:B7:9C:47:CD:54:D3:27:D3:C1:77:7C:F5:E4:1F:16:2C:98:76:BB:65
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/t5xHzVTTJ9PBd3z15B8WLJh2u2U.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/t5xHzVTTJ9PBd3z15B8WLJh2u2U.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/ctQhBxnqa0hCGdhR0kxK7tw5ORs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.0.8.0/22
Signature Algorithm: sha256WithRSAEncryption
26:dd:5f:42:d1:90:bb:38:a4:e8:c7:2d:13:6e:0d:7c:79:fa:
c8:bb:c7:e9:6e:8b:7b:e3:7c:5a:33:8c:86:e2:a6:af:6e:e2:
da:67:76:13:47:e5:18:12:e0:db:d6:ec:f1:8b:98:ff:61:e3:
bf:1c:d2:db:2e:ad:22:d7:45:6a:cf:54:f8:32:95:aa:c7:ba:
7c:bd:12:60:44:97:bb:6d:6e:81:b6:d3:36:97:68:5c:9d:bf:
08:68:c5:b4:69:e0:3c:49:54:11:f8:7d:70:43:4f:9c:f0:00:
94:57:53:11:94:bf:ca:92:c4:f3:b7:7d:18:d2:ec:ba:6b:47:
b5:12:69:77:ae:73:21:fb:4c:ea:64:9b:30:90:f6:1d:6d:a9:
69:25:d7:f5:58:59:28:24:90:5d:06:c7:23:8b:c4:94:a4:3c:
39:71:6c:a2:ed:57:de:7c:ed:b8:ba:5b:6f:15:6a:c6:d6:de:
98:0b:82:15:d8:9d:7a:b4:7e:50:67:30:82:60:6a:af:82:04:
22:6b:23:2f:5b:f1:bd:e8:83:8f:3a:68:8d:de:ec:8a:11:45:
db:35:02:4c:0e:35:41:d9:03:cd:dd:fe:93:27:0d:4d:3e:e8:
2d:36:36:47:65:15:30:c2:56:44:d3:68:48:5e:30:b6:70:e6:
0f:bc:61:a6
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:57 2025 by rpki-client