Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/PxSr81I-Bfs7pFZ38m-Wvtcbae8.roa
File: PxSr81I-Bfs7pFZ38m-Wvtcbae8.roa (raw, json)
Hash identifier: VfPRg4fsfUfVBpii8yzE1rgTd7NfPvXvXcZgTDRFIb8=
Subject key identifier: 3F:14:AB:F3:52:3E:05:FB:3B:A4:56:77:F2:6F:96:BE:D7:1B:69:EF
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0459
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PxSr81I-Bfs7pFZ38m-Wvtcbae8.roa
Signing time: Wed 18 Dec 2024 02:24:10 +0000
ROA not before: Wed 18 Dec 2024 02:24:10 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 210.230.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1113 (0x459)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:24:10 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=3F14ABF3523E05FB3BA45677F26F96BED71B69EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:00:3b:f0:8f:af:c0:da:a3:2c:6e:2b:8a:57:
54:b6:22:c1:55:6f:70:64:c4:55:35:3b:95:a3:28:
8f:17:e6:0c:0a:28:fc:e8:52:a8:56:02:27:fa:d9:
ee:c1:fc:a4:0b:c1:c2:6a:7d:3d:92:8c:c1:56:cd:
0e:12:81:12:18:2b:5e:28:26:2c:53:d4:99:79:a1:
49:72:25:4a:5d:b2:fc:48:d8:4d:e2:76:82:b8:8b:
15:02:47:04:42:97:c0:1b:41:23:ec:0b:a0:d2:59:
b8:28:16:2b:1e:51:a7:a3:59:ed:f2:66:33:bb:b4:
4c:3a:29:f6:81:05:af:72:6b:c1:88:64:be:52:b1:
6b:bf:a4:53:8e:af:d9:2a:0f:b1:0c:cf:3b:fc:33:
a1:ac:98:11:d3:e3:bc:b6:0f:ab:75:a8:ae:e8:e5:
80:4c:f1:2c:95:49:f8:fa:cf:ac:c1:30:46:73:3c:
4f:8b:2f:a6:fe:7d:0a:07:4d:b2:b6:4e:60:50:f5:
ce:92:ec:09:eb:41:d0:44:fa:f8:56:d0:63:a4:17:
23:8e:e3:52:3e:f9:7d:ca:c2:bd:73:94:f3:49:da:
0c:85:90:c1:57:4c:a4:5c:0a:20:67:c1:ac:ce:ee:
08:62:53:8c:71:a3:05:3f:cd:c0:9f:c6:89:b4:f0:
ec:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:14:AB:F3:52:3E:05:FB:3B:A4:56:77:F2:6F:96:BE:D7:1B:69:EF
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/PxSr81I-Bfs7pFZ38m-Wvtcbae8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.230.128.0/17
Signature Algorithm: sha256WithRSAEncryption
09:ec:17:88:d1:9b:a0:b3:40:88:f6:97:74:69:85:c3:c5:05:
01:e7:26:a0:e3:1c:86:b5:69:10:b0:ac:a0:d6:4d:f0:56:1f:
eb:08:12:92:9c:d5:09:8d:bc:42:30:2c:01:6b:50:cc:ac:ab:
57:a2:fc:0e:40:88:82:32:ce:b1:db:34:37:ed:80:d3:71:76:
60:8a:72:b4:ab:1b:8d:f7:05:dd:e0:cc:20:c8:35:88:6b:90:
aa:51:4a:08:bd:96:ac:57:5c:44:c2:0e:f9:e0:62:3c:c0:9f:
71:8f:23:53:08:44:54:c0:dd:7f:b7:e5:11:2e:83:1a:96:6a:
eb:63:aa:49:d3:d0:fe:88:e2:b0:94:6e:21:44:d3:7f:a1:dc:
bd:71:01:3b:1d:a9:30:8b:fb:31:c7:c1:f9:6e:0a:e1:8c:04:
03:18:76:1e:f1:e9:e5:28:9d:ac:a8:83:20:bc:9d:d1:82:6c:
d9:7c:6c:c1:af:a1:ea:57:65:9b:e2:8a:fe:a0:7d:4a:d6:b9:
68:35:c7:c2:67:1f:7e:4b:d3:bd:c9:9f:4e:e7:88:6f:03:e0:
24:54:39:e7:de:7a:8c:01:a3:c9:c9:c3:6f:87:ea:20:fe:c8:
af:59:ba:c2:16:8a:05:2e:79:11:2f:32:78:a2:a4:a5:be:2a:
79:60:77:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:35 2025 by rpki-client