Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/-QxVoo4X3wScnWDqnF9HC7JwZ3E.roa
File: -QxVoo4X3wScnWDqnF9HC7JwZ3E.roa (raw, json)
Hash identifier: ItIDoBdZJqF3QNQFYtq5hNewh7YV5/nWymhJgAPsr7E=
Subject key identifier: F9:0C:55:A2:8E:17:DF:04:9C:9D:60:EA:9C:5F:47:0B:B2:70:67:71
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04D0
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-QxVoo4X3wScnWDqnF9HC7JwZ3E.roa
Signing time: Wed 18 Dec 2024 02:36:57 +0000
ROA not before: Wed 18 Dec 2024 02:36:57 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 211.7.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1232 (0x4d0)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:36:57 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=F90C55A28E17DF049C9D60EA9C5F470BB2706771
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:34:d9:cc:9b:71:66:e0:13:f7:dd:15:6a:
4f:eb:de:a3:62:89:b5:49:d2:c4:88:aa:ba:c3:85:
2a:d1:dc:5e:f6:32:03:48:5e:41:d8:ad:da:7b:a3:
2f:1a:db:04:61:3c:33:19:df:ae:e3:8f:6b:52:c0:
78:ff:ee:4c:ca:c1:fb:45:b2:33:dc:93:dc:6a:97:
cd:17:0f:a6:f9:d4:58:43:8b:11:ce:52:83:c1:a9:
55:dc:01:a8:52:34:09:ee:00:32:34:7e:36:24:26:
f6:0d:8d:7d:2f:e2:f0:1b:01:93:8a:14:d6:ef:c2:
cd:33:96:c0:4a:83:41:5a:21:01:1f:00:6c:19:9a:
9d:7b:cb:e1:f1:f5:54:6b:79:b6:7c:8a:73:a6:e0:
11:59:5e:3b:83:76:35:c7:47:e3:5b:95:33:f8:3f:
c2:ae:df:44:b3:2e:46:bd:d1:eb:49:98:3a:81:7f:
4e:38:0e:4a:99:14:fc:6e:4a:b9:87:1b:39:d5:8d:
dc:71:7b:59:ec:eb:4a:d4:b9:95:87:dd:04:6d:c2:
7e:a8:89:92:69:5f:82:e1:9d:fd:7e:3f:f4:1f:90:
0f:34:b3:b7:71:1c:39:83:de:8b:5e:ae:f6:7e:ef:
4a:20:68:99:00:2e:b7:f8:c1:6b:d0:9c:fa:1b:07:
da:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0C:55:A2:8E:17:DF:04:9C:9D:60:EA:9C:5F:47:0B:B2:70:67:71
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/-QxVoo4X3wScnWDqnF9HC7JwZ3E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.7.152.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:ba:72:24:19:2e:d1:5d:68:6c:fc:4a:36:f2:27:d4:16:d7:
b6:3a:d3:5d:d3:e3:d4:9c:2e:5d:a8:c2:d4:36:ea:f1:3e:b0:
51:f6:27:05:c6:68:5e:9e:05:40:26:57:de:20:be:99:b9:2d:
88:65:1a:51:64:d5:39:77:27:61:e3:6c:79:e9:84:69:58:fd:
1d:50:45:dd:50:a4:54:7e:c9:3b:fe:b0:1a:eb:fe:15:60:f7:
99:fe:80:06:a9:f8:7f:e9:9a:ac:3b:04:bc:00:ff:fa:20:16:
14:b1:30:d5:72:77:04:8a:81:4f:60:1e:96:90:25:70:3e:51:
07:74:6a:c8:e9:91:9d:f7:f8:c8:9c:4f:9d:5d:cf:f6:18:10:
56:27:fb:d6:24:58:3d:b7:07:4c:93:41:38:b0:c3:04:72:0e:
24:e2:43:b3:8f:04:e5:2b:a1:8e:5e:7e:c9:99:2e:f2:3b:19:
fe:32:8b:51:00:b0:aa:cc:aa:a0:62:c5:3e:37:2e:5d:23:69:
b3:51:5d:05:df:c5:fd:3f:6e:a8:20:3e:98:33:23:c1:cd:b2:
33:47:32:97:0c:96:ee:c4:08:0f:bd:0e:f9:0a:e7:04:af:f7:
51:cc:8f:81:af:f3:01:6e:b6:68:c0:26:bc:6d:6a:fe:b1:db:
da:e0:9a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:42 2025 by rpki-client