Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/M8Ci96pKORBcSEEZTByOX9KmFro.roa
File: M8Ci96pKORBcSEEZTByOX9KmFro.roa (raw, json)
Hash identifier: H3GABaf11tyBMoGzFTlYDsLRuXKQHXuGGBpNCmPp/9g=
Subject key identifier: 33:C0:A2:F7:AA:4A:39:10:5C:48:41:19:4C:1C:8E:5F:D2:A6:16:BA
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 03B9
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/M8Ci96pKORBcSEEZTByOX9KmFro.roa
Signing time: Wed 18 Dec 2024 02:13:00 +0000
ROA not before: Wed 18 Dec 2024 02:13:00 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 222.8.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 953 (0x3b9)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:13:00 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=33C0A2F7AA4A39105C4841194C1C8E5FD2A616BA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e4:0f:ab:cc:3f:30:14:36:88:ee:71:1d:1c:
67:2e:2f:25:74:ca:63:44:fd:cf:c2:25:77:74:ae:
63:cf:8e:8a:d9:92:54:70:e3:e8:17:db:1b:fa:b8:
c4:61:8a:9f:95:18:8d:f2:bb:e6:82:0c:1a:43:53:
4a:d3:61:b6:44:99:cc:89:4c:d0:ca:db:5c:53:63:
14:a0:12:2b:e1:9b:7b:b3:57:9d:d3:d4:65:d7:f6:
3d:93:5f:ad:e2:ce:f8:7b:d9:28:3d:67:7e:1b:d7:
b4:7d:f5:5c:67:2f:4a:9f:57:8e:fc:89:28:8f:b6:
71:c9:46:d8:d3:98:59:e7:a6:cf:96:19:5f:8b:ac:
63:b0:93:91:65:92:4d:fe:3e:b1:d5:29:c8:76:fd:
72:ec:78:1b:63:92:d6:83:58:9a:58:a5:ef:78:25:
7d:08:e2:49:b2:c3:22:ab:33:02:b0:fa:5e:94:b2:
59:92:b5:9f:90:ba:64:21:7a:3e:cd:be:54:1f:5c:
ba:7d:8f:09:16:28:22:ac:38:c2:12:ee:c9:d5:e2:
e0:ca:07:3c:cd:0b:72:84:46:f6:7b:57:f2:c9:e2:
f0:0f:35:d6:62:85:e2:9d:bc:d2:ad:71:47:1c:b5:
fa:ca:16:01:0b:78:12:91:23:d2:0f:cd:a3:aa:ff:
63:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:C0:A2:F7:AA:4A:39:10:5C:48:41:19:4C:1C:8E:5F:D2:A6:16:BA
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/M8Ci96pKORBcSEEZTByOX9KmFro.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
222.8.0.0/16
Signature Algorithm: sha256WithRSAEncryption
62:b9:e3:f3:58:e2:15:85:73:9c:5b:61:cb:af:f7:21:78:6e:
56:d3:9d:40:a7:c2:aa:a6:b0:76:04:2c:97:6c:d6:18:af:ef:
d5:dd:ca:9e:02:17:79:32:85:3d:bc:53:b6:0e:c1:84:af:a2:
68:6b:b3:b3:be:7b:ed:eb:3a:59:97:69:5c:1a:86:89:e0:47:
0a:c2:87:c3:fc:d5:c5:30:c1:db:2b:c2:83:9d:4c:ae:06:89:
12:80:d2:46:47:e9:97:79:25:5f:2d:44:06:de:90:d6:5e:b2:
85:82:ea:b2:dd:75:a4:77:79:57:f7:23:40:86:13:bf:e3:11:
85:90:09:4f:81:37:d4:1f:29:16:ce:dd:c3:1c:e4:ff:88:a3:
a0:13:c0:77:c4:d3:00:42:4f:2e:3e:0b:4c:56:df:07:4c:53:
63:86:df:ff:bd:cc:f5:5f:b2:8b:e1:f0:65:c1:7e:b8:f9:5d:
66:89:81:50:97:57:6c:c4:07:31:2a:fe:62:6a:07:6a:8a:8f:
bd:4f:88:25:51:0f:6d:26:d6:89:6c:44:b5:6b:98:c0:64:51:
92:5d:07:bd:74:bf:38:49:e8:36:42:62:7a:38:e1:72:aa:9e:
62:01:05:79:ac:16:3c:83:7e:bf:09:dc:2e:f5:ff:71:0a:64:
14:ab:dc:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:22 2025 by rpki-client