Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/BKIB2K6A6X-M7CL3Gp4zhm4k39k.roa
File: BKIB2K6A6X-M7CL3Gp4zhm4k39k.roa (raw, json)
Hash identifier: Vh5STXot/s+VqI4Xm2NxOSMqfnDkPgFdLQ993ebIYoY=
Subject key identifier: 04:A2:01:D8:AE:80:E9:7F:8C:EC:22:F7:1A:9E:33:86:6E:24:DF:D9
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 0162
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/BKIB2K6A6X-M7CL3Gp4zhm4k39k.roa
Signing time: Sun 01 Oct 2023 01:35:48 +0000
ROA not before: Sun 01 Oct 2023 01:35:48 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 211.1.100.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 354 (0x162)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:35:48 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=04A201D8AE80E97F8CEC22F71A9E33866E24DFD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:52:df:70:d6:e3:e6:b9:8e:8f:76:fd:e9:8c:
33:ce:f0:a3:28:62:57:66:ce:7d:dd:b9:58:c5:fb:
39:2f:be:48:3f:1e:36:07:8a:41:43:5d:cc:a5:e6:
66:54:7a:0c:88:be:fd:47:ba:23:71:97:46:5e:3b:
c8:94:5c:6c:58:53:29:9d:86:25:69:3d:e1:28:3e:
a1:4e:75:60:f9:e5:4f:b4:a3:87:d0:7b:dc:25:12:
a2:cb:58:80:25:19:72:5d:80:3d:a3:f1:17:1d:b7:
54:de:90:19:c8:ea:1f:15:74:25:01:5a:7e:21:b9:
40:28:8f:4c:fc:cf:88:c4:f4:bd:28:54:83:de:6e:
06:95:d7:57:91:4e:b7:18:46:7f:5e:b8:62:31:22:
50:16:a0:27:06:c0:4d:93:84:a9:f3:48:8a:b0:c1:
16:7d:6e:91:fc:ef:07:76:59:dd:4a:19:4a:a5:dc:
e9:93:cf:80:f2:aa:78:82:e6:90:99:1f:17:a7:b0:
13:9b:e4:ae:52:30:8e:c5:c4:ac:fb:0a:72:d4:44:
d2:46:65:45:2b:26:88:79:6e:bb:c5:2b:69:96:d7:
1e:4c:a5:0d:c7:e6:ad:67:02:1c:42:ca:86:e5:85:
3a:80:2b:4d:44:ef:45:b7:4e:36:06:7f:21:04:46:
60:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:A2:01:D8:AE:80:E9:7F:8C:EC:22:F7:1A:9E:33:86:6E:24:DF:D9
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/BKIB2K6A6X-M7CL3Gp4zhm4k39k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.1.100.0/23
Signature Algorithm: sha256WithRSAEncryption
28:2a:d5:db:aa:d9:73:3b:e7:98:2f:4e:7d:29:f7:e2:8a:ef:
c3:a5:71:b3:26:ef:f6:28:50:87:87:13:b1:60:1d:ad:5b:64:
e4:72:d8:ed:64:2e:95:78:dd:f9:dc:f6:0b:59:dc:3e:43:80:
a4:a5:ff:a4:24:d3:5b:30:8b:5c:80:84:0b:89:83:95:08:0d:
8d:fe:e2:ac:55:17:d3:3e:7d:08:b9:ec:95:f6:ae:de:00:14:
35:52:06:28:e9:03:34:0b:20:38:7b:a7:1b:c8:96:97:56:f7:
ee:c8:ab:8a:d4:01:a2:bc:ed:86:00:e1:e3:5e:4b:47:87:2f:
52:8c:83:97:3c:23:90:76:49:68:3f:88:37:ee:cc:30:2a:8e:
7a:97:83:f9:40:5a:3c:dd:4e:18:3a:57:58:04:2f:38:eb:d1:
89:02:85:18:02:e1:3e:e7:24:cb:96:d7:8e:84:c0:6c:c7:c0:
c8:78:f6:2b:69:32:b5:6f:f2:d4:6c:31:08:81:be:37:0b:ab:
4b:46:72:05:0d:90:11:a0:9a:00:04:45:9a:ba:1d:5b:34:6e:
f3:e5:b4:bb:18:04:6c:e7:e2:6a:e5:29:30:95:ce:19:bc:4f:
29:c5:ce:80:d6:d3:51:4b:db:0a:ba:5a:b0:be:8a:ac:cc:d4:
da:50:34:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:16 2025 by rpki-client