Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/4RB4eXcF3eQHf_HDw-SfjT3D0I0.roa
File: 4RB4eXcF3eQHf_HDw-SfjT3D0I0.roa (raw, json)
Hash identifier: r+lcSrKDOGm6Jh4C11/8i8l6lIQh0EfcPXsOvHFWcjY=
Subject key identifier: E1:10:78:79:77:05:DD:E4:07:7F:F1:C3:C3:E4:9F:8D:3D:C3:D0:8D
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0402
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4RB4eXcF3eQHf_HDw-SfjT3D0I0.roa
Signing time: Wed 18 Dec 2024 02:18:52 +0000
ROA not before: Wed 18 Dec 2024 02:18:52 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 61.120.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1026 (0x402)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:18:52 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=E11078797705DDE4077FF1C3C3E49F8D3DC3D08D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:10:04:ff:7d:84:32:a7:60:5f:32:e9:a8:f7:
5f:54:4a:60:e1:95:be:26:40:24:65:95:c6:04:48:
59:14:97:5d:f1:c9:ee:40:dd:41:ec:30:ba:c8:c5:
99:32:d4:ca:5a:12:ca:7b:e4:f3:74:d3:fc:e5:e6:
31:27:e3:58:2c:11:84:6b:16:13:f6:c6:f1:31:cf:
d0:7f:84:7d:01:0d:57:99:64:fc:e9:85:44:44:fe:
d3:a0:d9:62:0c:4f:f3:f7:d4:20:93:7b:19:a4:c2:
6c:65:41:4e:a5:f1:28:3f:9f:9c:d6:76:0b:6f:2a:
19:e7:f0:80:21:21:77:73:d2:68:fe:da:a6:a4:24:
ad:97:4b:ff:95:a1:cc:ce:c6:a7:a7:c8:7b:7d:c8:
31:bc:11:a1:fd:76:b6:01:78:2e:df:36:e7:ce:eb:
c0:a2:68:3a:bd:a4:cb:ea:05:ac:b3:cc:0b:b0:be:
15:1e:1f:a7:7a:06:45:d7:d0:91:33:ba:34:71:3d:
da:03:07:d9:cf:01:f2:b1:7e:38:0e:de:e8:65:b8:
5f:c3:b6:5a:e1:d2:03:e7:2a:2b:15:9a:5f:db:d0:
d8:31:f9:01:f3:a4:95:2b:2a:51:58:e8:4b:ac:f3:
59:e8:d3:a3:e9:56:3b:f7:8b:c2:b5:4e:54:8d:16:
3a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:10:78:79:77:05:DD:E4:07:7F:F1:C3:C3:E4:9F:8D:3D:C3:D0:8D
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/4RB4eXcF3eQHf_HDw-SfjT3D0I0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.120.0.0/17
Signature Algorithm: sha256WithRSAEncryption
b6:bb:91:47:6f:bb:13:eb:f6:d4:25:77:da:08:98:3a:2d:15:
87:14:fb:f4:e5:b9:7d:7c:4f:b6:f7:ef:1d:a2:0c:9c:ef:97:
60:10:a0:4b:35:95:a4:55:c6:85:f9:9a:ae:b1:3b:c2:94:30:
6e:9f:e7:ff:6e:8c:9e:3e:a7:23:c4:18:cd:14:1e:da:07:e6:
a7:19:f9:1b:f2:bd:1c:c4:a4:3b:b9:87:4c:9b:41:76:d9:63:
3b:63:aa:a5:0d:5e:64:6e:e4:ca:17:6e:cd:69:8c:c8:a2:81:
be:c2:6b:a1:28:02:c5:b5:32:3c:ef:4e:e7:42:ea:37:76:1f:
c3:44:92:4e:97:d9:6a:fd:15:4f:63:3a:d4:94:88:ea:c4:84:
aa:52:bf:77:50:a4:35:6a:22:cf:e6:27:c6:0d:27:e8:10:a6:
f2:1f:bb:ea:38:95:c9:39:d8:cd:6d:29:d3:58:94:b8:47:d3:
be:1c:99:e8:9d:7d:d5:c2:7d:ce:cf:7b:d0:ad:aa:2c:2b:da:
28:a0:5b:21:b0:c9:67:7b:ae:59:17:6d:b9:a3:60:b9:58:f1:
25:2d:6c:af:a2:14:bf:ca:8f:ac:d4:ec:18:29:3a:c3:2a:7b:
99:29:31:9d:c9:52:4e:bc:b2:ad:43:1e:4c:ed:ab:cf:0f:49:
ee:5f:5d:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:36 2025 by rpki-client