Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3YKJQD72C46e-2Kxyywp6Xdnyf0.roa
File: 3YKJQD72C46e-2Kxyywp6Xdnyf0.roa (raw, json)
Hash identifier: vA1+AI2x+2vk6eqbl3kZmOqCtYAGmJKSzuQMHuY6GGk=
Subject key identifier: DD:82:89:40:3E:F6:0B:8E:9E:FB:62:B1:CB:2C:29:E9:77:67:C9:FD
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: DD
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3YKJQD72C46e-2Kxyywp6Xdnyf0.roa
Signing time: Fri 01 Sep 2023 01:30:56 +0000
ROA not before: Fri 01 Sep 2023 01:30:56 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2516
IP address blocks: 210.229.144.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 221 (0xdd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Sep 1 01:30:56 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=DD8289403EF60B8E9EFB62B1CB2C29E97767C9FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:ec:14:20:e5:bb:af:06:ed:d2:48:8e:82:10:
98:49:00:d0:30:bf:3a:cb:80:b4:6a:c8:96:23:14:
aa:df:16:8b:cb:30:d4:e2:72:f4:ea:23:20:91:91:
52:13:4a:40:6b:d2:38:d9:ba:b9:c9:f6:42:25:07:
64:e1:77:c2:8a:91:d0:2c:1d:cc:55:82:15:8d:d5:
0f:ed:a8:ac:4f:27:f9:87:96:07:3e:fa:04:df:a5:
24:1d:2d:2f:49:7f:f0:ab:18:6d:a2:5e:5e:8b:83:
ff:a4:28:d2:6b:d8:a4:1a:d8:5b:a4:e6:21:0a:98:
a9:45:dd:e5:bf:5b:a5:09:13:fe:3e:2a:ef:ed:c1:
05:87:11:65:aa:3f:09:76:7b:ed:50:bb:df:27:df:
c2:9a:88:26:6a:b7:22:05:e7:cd:c7:8d:f4:75:fe:
2f:e2:1b:fc:7b:cd:38:2c:31:16:e4:76:78:e2:91:
c1:33:16:a2:c4:3d:d2:e9:4e:e6:14:2a:f0:9f:c0:
eb:52:8c:c0:ca:c4:de:79:11:a0:aa:19:2a:54:ce:
d1:b7:ed:aa:95:b6:6b:68:c7:c1:21:3f:48:d3:41:
73:81:fe:bd:df:13:d4:28:bc:8a:f6:48:e5:b4:43:
e1:fe:72:8c:c4:8f:cf:9a:e4:3d:56:8b:cc:83:eb:
66:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:82:89:40:3E:F6:0B:8E:9E:FB:62:B1:CB:2C:29:E9:77:67:C9:FD
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/3YKJQD72C46e-2Kxyywp6Xdnyf0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.229.144.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:4d:e3:d6:d7:9b:44:91:6f:fa:e7:ce:96:c3:ea:ae:c5:7c:
df:2f:36:c4:19:b6:a1:2b:5f:3c:87:70:fd:57:29:eb:5b:92:
29:c1:f2:75:e0:99:52:8c:ed:b8:50:ba:e0:f8:83:d6:0f:a4:
13:df:1e:ef:ed:ed:6e:9c:1f:e1:58:76:67:45:01:aa:99:a4:
5e:00:c3:ed:21:0b:bf:27:a7:1e:16:2b:dc:e9:e8:0b:de:8b:
a1:92:fe:49:06:c0:83:1e:5d:31:ec:0d:67:f8:60:26:73:cb:
68:a7:d3:bb:b9:5b:bc:4e:6f:db:12:17:91:55:12:96:1f:83:
f5:28:4a:fc:25:a7:43:e9:3a:2b:89:be:76:d5:3f:e6:b4:73:
e2:22:a1:98:70:c9:17:24:65:18:52:1a:2d:f4:bc:af:ea:ef:
85:70:2e:d1:98:df:26:cc:0e:1f:2d:84:a5:b6:6e:52:b3:11:
cf:c5:80:0c:23:9d:05:41:d8:c7:c4:cb:c8:e5:4c:77:31:35:
9b:a2:3a:70:b8:b7:0b:90:50:1b:94:f3:4f:69:79:a7:d3:a9:
a0:34:e2:ba:d7:67:67:6f:88:43:6b:7a:ec:3f:d0:73:49:8f:
fa:25:c3:a6:87:ba:bd:73:ab:fd:20:94:06:62:b4:46:3a:cb:
cb:3a:de:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:26 2025 by rpki-client