Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/D7R9E0FtFd8evWspEpLrRC0JM0A.roa
File: D7R9E0FtFd8evWspEpLrRC0JM0A.roa (raw, json)
Hash identifier: wmg1q0DvJdghp9uKrvSu/LmT0KWipxJCytduupcgApA=
Subject key identifier: 0F:B4:7D:13:41:6D:15:DF:1E:BD:6B:29:12:92:EB:44:2D:09:33:40
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 03B5
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D7R9E0FtFd8evWspEpLrRC0JM0A.roa
Signing time: Wed 18 Dec 2024 02:12:59 +0000
ROA not before: Wed 18 Dec 2024 02:12:59 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 118.155.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 949 (0x3b5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:12:59 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=0FB47D13416D15DF1EBD6B291292EB442D093340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:21:69:91:6a:c7:42:a5:70:45:e1:2b:e5:08:
06:9c:33:55:09:12:2a:ed:65:b3:62:f9:14:e1:0c:
85:bd:c0:80:b6:8b:bb:e5:55:bb:4a:a7:36:18:b5:
52:d8:fe:97:74:08:c0:c0:ec:1f:f8:75:73:22:70:
cf:21:16:b9:22:62:fc:8f:42:30:f1:96:2c:9a:56:
f8:c4:db:71:70:08:3f:c4:77:6a:e9:54:a2:40:20:
85:92:8f:13:d8:a3:b2:33:23:87:d4:a6:3d:36:7e:
1c:a3:d2:c5:d8:46:98:1b:76:95:d6:b2:f5:94:24:
52:64:06:60:52:e2:98:a1:1c:23:9a:31:7d:e6:ec:
ae:97:76:29:aa:93:9f:4b:91:b7:89:2b:96:51:6c:
9e:62:a8:55:45:a3:13:e5:e0:a0:37:b0:98:18:81:
74:20:00:00:c7:18:90:39:cb:d9:92:52:88:fd:bc:
68:d1:db:17:d8:de:ab:b0:d5:09:c7:58:af:a8:b4:
e4:23:1f:b7:99:6b:bc:de:37:33:40:76:56:86:ea:
79:fa:d4:36:45:6e:6c:2a:65:69:85:f2:3b:2c:d8:
51:2d:4f:dd:95:39:4f:a2:10:01:7b:f3:41:60:02:
f6:fd:0f:04:94:73:b1:d1:5c:c9:bd:c5:b0:a5:73:
b5:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:B4:7D:13:41:6D:15:DF:1E:BD:6B:29:12:92:EB:44:2D:09:33:40
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/D7R9E0FtFd8evWspEpLrRC0JM0A.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
118.155.0.0/17
Signature Algorithm: sha256WithRSAEncryption
ad:b3:52:06:9c:42:a8:29:b7:8b:6b:8d:6f:fc:67:36:2b:d0:
b7:eb:b4:de:6a:dc:78:50:fd:7c:9a:ac:00:55:3c:3d:21:ad:
a2:f2:d4:31:a4:78:5f:66:5b:a1:67:2c:79:39:3d:fb:4d:b9:
85:cf:5f:ff:65:f0:34:b4:8a:c8:0c:c8:3a:af:cb:f1:69:43:
73:48:34:0f:c2:24:86:c9:19:05:87:9f:13:19:21:5b:22:64:
49:b1:fa:cd:dc:49:24:33:f6:89:bd:77:fd:a8:e1:34:35:e1:
c7:09:73:51:06:60:58:4d:57:41:21:bf:3a:e5:a4:f8:65:0d:
1e:df:b4:1e:eb:9c:4d:af:2f:31:0c:8c:4a:76:a8:0a:a0:cf:
e0:f8:4f:d2:c1:8a:c1:46:43:03:b8:f8:f6:6a:51:0c:82:0f:
21:70:6e:ef:37:fb:4b:15:b0:7a:8e:2f:fd:cb:b2:ee:0a:1d:
9c:4a:0c:aa:23:34:17:96:f9:2b:42:9f:9a:d8:fe:42:2c:9b:
8e:26:57:c8:72:b8:41:63:a8:0c:36:5e:2f:f6:00:24:ca:bf:
5f:09:54:fd:89:8b:69:6a:e5:c5:50:9e:4c:82:26:e4:6a:34:
25:92:49:27:5b:f0:26:99:fa:2c:94:a8:cc:50:79:71:9d:e4:
41:da:b4:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:37 2025 by rpki-client