Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/OuDck2rO62-OCZenPl6lkkl6UL4.roa
File: OuDck2rO62-OCZenPl6lkkl6UL4.roa (raw, json)
Hash identifier: NPSeAMoJdKT2ffBZcamKeIZOau6Pp/LP3Kgu3DrbmPU=
Subject key identifier: 3A:E0:DC:93:6A:CE:EB:6F:8E:09:97:A7:3E:5E:A5:92:49:7A:50:BE
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 02EF
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OuDck2rO62-OCZenPl6lkkl6UL4.roa
Signing time: Sun 31 Mar 2024 01:35:50 +0000
ROA not before: Sun 31 Mar 2024 01:35:50 +0000
ROA not after: Sat 15 Mar 2025 01:30:02 +0000
asID: 2516
IP address blocks: 111.99.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 751 (0x2ef)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Mar 31 01:35:50 2024 GMT
Not After : Mar 15 01:30:02 2025 GMT
Subject: CN=3AE0DC936ACEEB6F8E0997A73E5EA592497A50BE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:fc:8e:9c:2d:47:4c:82:97:6a:84:62:bf:aa:
82:84:00:49:04:74:13:89:5b:8d:16:16:f2:40:49:
5b:66:04:c7:48:c1:38:dd:09:ba:78:3e:0f:41:5c:
e5:30:87:94:23:5a:4a:ea:cb:24:b8:69:ab:9f:81:
13:67:66:ce:92:bb:46:d3:fe:11:a5:5e:8d:1e:d5:
91:39:45:37:72:51:13:63:23:af:4d:a9:3e:28:86:
0a:bb:0a:81:7b:a9:65:c1:9d:da:85:f4:ea:4f:79:
41:7e:ea:88:3c:0d:76:26:2b:4e:42:be:e0:76:43:
70:6b:5b:3e:6f:2b:b4:cc:94:d2:11:0f:a8:2f:04:
69:2b:bf:14:b4:d7:bc:a6:29:81:da:fb:27:e0:e2:
c9:0b:8d:04:db:69:26:f0:b0:0f:27:07:50:05:60:
24:44:f3:8b:07:43:2c:be:a8:04:1d:88:84:a2:5d:
1b:57:46:94:15:8a:6f:c5:17:c9:51:c6:e3:18:82:
8a:82:54:bf:8e:b7:29:9c:4d:ad:7f:6b:ef:3a:bd:
32:c4:91:ff:7b:2e:8e:a5:8c:51:b1:da:30:ef:d1:
da:7c:52:dd:90:b3:3b:0b:ff:ff:f5:e8:c4:62:2c:
ff:ab:b6:9d:36:0f:f1:9d:e3:4e:b8:2b:08:8e:b0:
3a:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:E0:DC:93:6A:CE:EB:6F:8E:09:97:A7:3E:5E:A5:92:49:7A:50:BE
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/OuDck2rO62-OCZenPl6lkkl6UL4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
aa:39:8e:26:17:b1:9b:e0:ac:0f:d2:21:bd:5f:6b:90:f7:f9:
6f:ed:cf:ba:0a:aa:22:fb:d6:fb:44:d9:6f:4e:19:53:89:86:
fb:0c:0f:70:31:04:13:a8:e7:d4:18:98:50:33:34:91:30:73:
a3:5e:3a:2b:e9:ee:70:dc:79:04:f5:8b:b8:5d:4b:20:dd:ff:
d2:eb:e5:96:37:1e:3f:8e:ed:4e:bb:49:0e:d5:b0:97:76:f6:
a7:6e:bb:06:52:70:44:aa:89:5a:36:dd:ae:6e:3e:c8:b8:a3:
15:16:2f:4c:80:d3:ec:af:1e:18:37:68:eb:2d:ef:ee:43:86:
1d:4b:d7:7c:64:7c:77:1f:9c:20:78:7d:92:8f:34:f0:1c:25:
ae:cf:c9:aa:6a:a8:80:2a:11:d6:5b:5c:e9:f7:05:2c:1b:27:
66:48:e3:04:0b:94:0e:6b:a7:ff:b1:a0:cf:50:ea:f9:41:5b:
4e:50:09:5d:7a:fb:bb:2a:bd:1f:a8:94:9f:17:e0:a0:52:23:
e8:f8:bc:e7:0c:6d:31:b5:62:6b:f0:2e:e8:1b:49:52:6a:0d:
fb:f8:9e:16:5c:d0:77:13:81:b0:b8:b0:3f:e6:39:7c:33:70:
94:6b:5a:ec:09:e0:6c:f1:98:88:d1:cd:f4:72:0f:3c:8f:32:
d0:45:f0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:48 2025 by rpki-client