Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Lq4T4Jy-cAeUfvfE-ypxV1Sn5qg.roa
File: Lq4T4Jy-cAeUfvfE-ypxV1Sn5qg.roa (raw, json)
Hash identifier: zlVNnk16GdD+iysSAgTPzHD5isOCZe37MLZ1uCYEDZ4=
Subject key identifier: 2E:AE:13:E0:9C:BE:70:07:94:7E:F7:C4:FB:2A:71:57:54:A7:E6:A8
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0466
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Lq4T4Jy-cAeUfvfE-ypxV1Sn5qg.roa
Signing time: Wed 18 Dec 2024 02:24:15 +0000
ROA not before: Wed 18 Dec 2024 02:24:15 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 14.9.112.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1126 (0x466)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:24:15 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=2EAE13E09CBE7007947EF7C4FB2A715754A7E6A8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:cc:31:d3:51:0a:d8:ed:d2:d4:b5:13:a2:51:
7c:04:35:54:51:dc:57:86:f6:0a:98:5a:ec:ea:66:
48:b0:2a:c0:75:53:b7:34:4f:d0:ab:7e:df:29:7c:
89:8c:f8:07:32:72:78:43:f6:4f:40:3c:fa:31:41:
97:8e:12:ca:64:12:2d:ab:c5:56:52:40:3b:1f:fe:
dd:b5:d1:ab:d1:2e:d3:54:2c:b5:54:1c:c2:c9:56:
9c:c0:b3:0e:61:09:62:81:12:1b:8e:14:91:48:34:
a0:c9:6d:91:16:c9:a2:06:51:8c:9a:72:94:27:90:
f8:2e:cc:f0:fb:08:ef:63:4b:4b:20:02:20:9e:2c:
9b:f1:fa:15:0b:aa:fe:9f:1d:19:61:87:4d:31:34:
08:58:23:1f:70:83:13:85:8f:b9:48:6f:50:a6:68:
f8:dc:ee:80:78:f2:f4:0f:6b:0d:34:15:3d:57:e4:
fb:bc:2d:3b:01:32:5f:75:cc:a9:25:56:89:88:b6:
62:f2:77:54:33:58:ae:bb:e0:18:e8:9f:90:2a:7c:
e7:5d:07:f6:b7:e7:96:b9:2e:d5:8d:05:cd:dd:89:
78:60:75:84:b0:c1:2b:73:a6:cb:86:dd:81:59:1c:
c4:b3:e9:eb:ca:7c:62:cc:c1:e6:3e:38:82:b1:bd:
28:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AE:13:E0:9C:BE:70:07:94:7E:F7:C4:FB:2A:71:57:54:A7:E6:A8
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Lq4T4Jy-cAeUfvfE-ypxV1Sn5qg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.9.112.0/20
Signature Algorithm: sha256WithRSAEncryption
35:97:05:6c:02:03:63:54:07:8f:5a:38:8a:58:f2:88:03:48:
04:d3:4b:ad:8b:ee:c7:16:23:17:db:9d:3d:e2:16:12:67:d2:
90:6f:95:ac:f1:42:96:a0:1b:4e:75:89:a5:49:3e:4e:41:0c:
a0:39:c8:2c:45:c7:a9:77:39:83:df:28:a6:53:84:ad:f4:d9:
56:85:7f:c3:16:4e:9d:13:a4:d0:5c:cf:75:c5:7a:71:81:58:
ab:66:8b:ef:c4:9e:ac:ab:97:4e:f2:91:32:be:cc:c9:06:82:
cb:5e:4d:33:94:72:78:b5:5a:84:b9:08:06:db:fd:13:be:93:
51:9a:d9:1f:53:54:39:8f:a4:f6:79:b7:42:78:d6:01:78:57:
30:ea:1b:c8:a3:37:ec:f1:a3:5c:3a:d2:ce:b8:78:5c:9d:8f:
a5:b7:c1:55:21:57:72:06:f8:64:01:9a:5c:0b:35:52:c7:1a:
8f:1e:81:55:f7:05:4b:15:7b:37:99:7c:76:91:00:c6:93:31:
62:f8:7d:f9:dc:9c:52:a3:cd:04:f2:bf:eb:38:c1:b1:0e:e3:
8b:34:ef:a0:81:52:3e:3e:87:e6:c3:49:7c:91:94:4c:30:a4:
4b:7d:f9:19:a0:d1:81:dd:e0:0b:ca:5b:28:f7:29:4a:ad:7e:
ee:5b:ad:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:23 2025 by rpki-client