Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CabLmOsmHFyglRoMXaLLYC5bmyA.roa
File: CabLmOsmHFyglRoMXaLLYC5bmyA.roa (raw, json)
Hash identifier: RD6rHF/4eQRJ4Ptvp+gMYuP93wc0eocH6L6VCIR2FHM=
Subject key identifier: 09:A6:CB:98:EB:26:1C:5C:A0:95:1A:0C:5D:A2:CB:60:2E:5B:9B:20
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 016A
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CabLmOsmHFyglRoMXaLLYC5bmyA.roa
Signing time: Sun 01 Oct 2023 01:35:51 +0000
ROA not before: Sun 01 Oct 2023 01:35:51 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2516
IP address blocks: 211.9.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 362 (0x16a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 1 01:35:51 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=09A6CB98EB261C5CA0951A0C5DA2CB602E5B9B20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:e0:d9:45:43:80:09:fb:05:5c:2c:92:d9:
71:40:87:e4:f2:8f:a8:5f:52:6a:d0:0d:af:f8:66:
90:1a:bb:d2:ef:3a:98:ba:92:7a:5b:da:9d:34:46:
ef:bf:9c:92:25:e2:7c:52:30:eb:09:32:42:ef:43:
f7:90:d8:81:d7:19:59:12:f8:b6:84:26:fd:53:e4:
15:78:9e:81:11:54:17:96:50:b9:1c:79:2d:3b:3d:
b4:52:b7:04:47:01:1d:29:7c:0d:41:2c:3d:a2:0b:
8c:0d:a0:29:a7:fb:5a:c4:0a:a8:85:a4:5a:3d:a6:
9b:b0:29:b1:96:06:9b:6b:2e:64:76:d9:09:ef:0b:
b9:02:2b:5a:f4:df:fa:36:6c:77:4a:27:d1:36:fd:
be:68:be:65:8a:d8:ab:ea:d7:80:75:db:1c:7f:d5:
c7:da:e2:bf:ec:00:5d:fb:c2:3e:35:50:d2:fb:5f:
1f:cc:3f:4e:89:30:dd:b9:48:62:67:2e:df:d5:a1:
85:c7:e2:3b:61:97:be:a8:19:22:11:46:76:1d:ab:
e1:9a:50:56:1a:4e:ee:6a:a5:1b:9b:8b:b1:49:63:
7a:fa:5d:b9:70:56:a6:0d:16:1d:7e:09:3e:1e:f1:
0d:8b:ed:0b:d7:90:9e:bd:a7:d6:c8:0f:29:ae:ab:
df:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:A6:CB:98:EB:26:1C:5C:A0:95:1A:0C:5D:A2:CB:60:2E:5B:9B:20
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/CabLmOsmHFyglRoMXaLLYC5bmyA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.9.128.0/18
Signature Algorithm: sha256WithRSAEncryption
a6:3b:28:e4:e5:71:4f:95:a6:09:b4:c4:36:7f:fe:ca:ce:ee:
cb:b1:74:8c:ff:1f:13:22:37:9c:83:cc:ee:7f:3c:54:69:09:
b4:8e:b8:61:69:aa:ba:3d:5e:c7:cb:3a:d9:3d:e3:f1:43:9a:
10:3b:0e:8b:67:86:f1:e1:17:0c:20:ef:73:11:23:0c:ef:ad:
73:ae:01:a7:53:bb:5f:b6:ef:bc:4b:7e:d0:5c:79:c9:59:48:
2a:99:cd:ec:04:53:19:95:86:e9:e0:1c:00:64:16:69:b7:ba:
c9:cf:67:f7:0a:b6:fe:78:49:83:46:34:b4:7f:0f:b3:0f:ff:
e6:e3:51:27:96:9d:92:7a:02:68:67:50:76:71:6a:4a:30:f9:
55:5d:b1:f2:3d:46:1f:89:58:57:b8:40:96:88:6b:8e:9d:85:
3d:39:1e:95:1f:ba:54:dd:ac:ef:17:ed:0d:e5:fc:c2:bc:3d:
27:4b:0e:f1:a6:88:d0:21:6d:e4:37:e2:08:0f:5e:90:cf:e5:
ef:97:81:93:e5:ea:8c:49:31:f2:f2:0d:a7:00:01:d2:e1:6c:
df:34:ed:a3:c4:c1:ff:dd:2a:44:e7:2b:28:c2:1c:e7:e4:7f:
05:ba:22:70:b0:5e:4b:52:bb:d9:9a:8a:53:7b:12:1c:d5:16:
4d:e0:ef:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 19:58:06 2025 by rpki-client