Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1203/Yhx635DvRZlzmgdBuHrRE4c4_28.roa
File: Yhx635DvRZlzmgdBuHrRE4c4_28.roa (raw, json)
Hash identifier: Dr4ZF6SuBO4Z5zDOspG3LKyyZOcd8mPAJmBEr341AlU=
Subject key identifier: 62:1C:7A:DF:90:EF:45:99:73:9A:07:41:B8:7A:D1:13:87:38:FF:6F
Certificate issuer: /CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773
Certificate serial: 04
Authority key identifier: 85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/Yhx635DvRZlzmgdBuHrRE4c4_28.roa
Signing time: Tue 29 Oct 2024 02:58:31 +0000
ROA not before: Tue 29 Oct 2024 02:58:31 +0000
ROA not after: Wed 29 Oct 2025 02:46:37 +0000
asID: 4694
IP address blocks: 154.34.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 4 (0x4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85A6C369C1A9C7A52C3E3805727A5FD31185A773
Validity
Not Before: Oct 29 02:58:31 2024 GMT
Not After : Oct 29 02:46:37 2025 GMT
Subject: CN=621C7ADF90EF4599739A0741B87AD1138738FF6F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:93:65:77:0c:1b:de:c3:be:c8:3c:e9:d8:8e:
b6:1f:c7:8f:f5:91:ba:1c:57:cf:2a:67:bb:7d:a3:
50:ec:77:36:47:a4:20:4e:5d:4f:32:b7:08:e1:84:
45:92:84:e8:e8:5f:6c:39:cc:c8:1f:8e:f6:64:08:
21:06:6d:53:b4:34:bb:ff:68:5b:04:39:ae:62:82:
85:3e:d0:8f:03:f9:8a:1d:98:99:b8:95:e6:34:37:
0b:27:71:19:ec:8e:33:fe:eb:cb:1a:c4:c2:17:f4:
41:0c:4a:d7:1c:d8:24:e6:b7:fe:6b:22:c9:57:67:
79:ce:de:b6:04:3b:39:b7:ed:c4:ce:7e:02:02:0f:
07:b7:f9:0b:dd:0b:4c:8c:e0:93:ef:a9:70:55:e7:
ac:02:fa:f4:5c:e4:28:a4:34:e0:86:c2:aa:7e:77:
56:3d:14:32:cb:2f:68:6a:10:ae:b2:b8:f3:31:e2:
eb:36:da:f6:4e:14:a0:21:9a:56:89:2c:da:55:ba:
c4:4d:47:78:25:28:72:72:4e:48:c5:00:b9:3c:99:
a3:13:94:cb:83:98:b8:45:e7:61:15:b8:8d:7d:8b:
93:a9:63:c6:1c:dd:f2:2e:32:4a:80:1d:fe:d1:76:
98:12:bf:f2:6b:27:99:2b:fd:1c:46:29:6e:43:71:
b4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:1C:7A:DF:90:EF:45:99:73:9A:07:41:B8:7A:D1:13:87:38:FF:6F
X509v3 Authority Key Identifier:
keyid:85:A6:C3:69:C1:A9:C7:A5:2C:3E:38:05:72:7A:5F:D3:11:85:A7:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/habDacGpx6UsPjgFcnpf0xGFp3M.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/habDacGpx6UsPjgFcnpf0xGFp3M.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1203/Yhx635DvRZlzmgdBuHrRE4c4_28.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
154.34.128.0/17
Signature Algorithm: sha256WithRSAEncryption
5f:d5:2c:4f:72:7b:37:6c:dd:be:ae:a9:e9:b9:8e:43:11:36:
db:b3:6a:34:44:9d:6a:d3:49:e1:47:ca:38:d2:7d:aa:f7:f2:
fb:f3:a1:7e:4e:95:9b:20:f2:1a:8f:00:13:9f:c0:8f:f9:f2:
8c:c7:4f:75:8c:3b:c7:21:c8:ef:aa:95:f2:ac:8a:3b:70:34:
3e:48:b5:05:e7:1d:5c:90:5d:ab:b1:a3:83:56:2f:36:d8:38:
f2:96:8f:b6:40:61:69:4d:f4:21:d7:17:4a:b0:af:89:39:08:
e9:7e:25:25:6f:de:09:a8:a8:f1:35:90:30:85:08:ed:ee:9c:
ac:4d:cf:71:da:bb:c7:94:ac:a5:00:61:4f:fa:ad:60:c0:c4:
82:6f:44:0f:52:a1:cd:c4:3c:73:1c:aa:ce:c9:cb:4f:a2:ee:
df:22:63:20:ba:2e:7d:6a:e7:8e:fe:f3:fa:d7:51:06:2f:04:
c8:61:26:b5:fb:07:4a:ad:ad:22:99:29:0e:f1:aa:c0:17:83:
cc:4a:b6:61:f6:74:2e:ff:f6:99:55:2d:7c:89:e3:9a:9a:e8:
f0:ac:37:43:65:b3:5c:46:1f:91:f7:70:9c:55:94:30:09:d4:
61:29:ac:4b:cf:39:5f:64:f8:19:13:91:1f:00:13:15:99:d4:
3b:85:71:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:21 2025 by rpki-client