Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/R9NzpdWcPkfVDxdRzahj8IkQBts.roa
File: R9NzpdWcPkfVDxdRzahj8IkQBts.roa (raw, json)
Hash identifier: bGktJamq4Yc1StQd5dK0l3nfb8TNHBP2sZZMHcKGy1g=
Subject key identifier: 47:D3:73:A5:D5:9C:3E:47:D5:0F:17:51:CD:A8:63:F0:89:10:06:DB
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0492
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/R9NzpdWcPkfVDxdRzahj8IkQBts.roa
Signing time: Wed 18 Dec 2024 02:28:51 +0000
ROA not before: Wed 18 Dec 2024 02:28:51 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 14.10.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1170 (0x492)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:28:51 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=47D373A5D59C3E47D50F1751CDA863F0891006DB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:42:0f:d2:63:2f:01:88:4b:20:0b:a3:5b:f7:
6f:b0:6f:2b:74:0a:d5:2d:b3:e5:c6:03:ac:f9:1a:
1b:ad:50:e3:fe:b7:54:c2:ea:7e:a8:c8:c3:79:98:
66:50:71:c1:d1:1f:8e:a7:68:99:b2:ba:63:5c:3c:
c4:59:77:77:a5:ae:8c:f1:de:5c:7f:d9:6e:33:7e:
0b:57:43:30:9a:a2:d0:39:12:7d:a0:38:8c:6b:5d:
f0:ce:c7:65:61:d9:80:12:bd:22:c2:50:57:a6:26:
98:e3:9f:be:65:11:fb:37:7b:1a:2b:a3:73:a2:21:
94:76:6c:2b:be:78:42:fc:a1:05:f3:44:ec:cc:90:
5c:37:f1:f3:46:95:92:0b:70:d4:9b:1d:61:b6:81:
a9:0b:39:91:17:3f:6d:f5:6e:1e:e0:27:7b:06:52:
d6:f7:6c:69:7c:4b:5b:8e:b6:94:47:ad:8c:07:48:
c3:fb:fa:fa:12:f5:58:88:d7:9e:30:f5:6d:bb:da:
ca:d3:43:85:15:01:df:64:39:cd:e8:f8:80:e0:02:
54:9e:3b:33:10:c9:9f:ba:94:39:2e:b7:6a:18:36:
62:9d:36:c0:9a:45:7d:eb:59:1c:e7:e6:3a:60:e6:
47:47:f3:46:1d:b8:ac:c2:ec:b3:76:11:ea:15:ec:
8f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:D3:73:A5:D5:9C:3E:47:D5:0F:17:51:CD:A8:63:F0:89:10:06:DB
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/R9NzpdWcPkfVDxdRzahj8IkQBts.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.10.0.0/16
Signature Algorithm: sha256WithRSAEncryption
6f:bc:c9:7b:5a:70:22:93:a5:21:98:fb:13:df:80:32:9b:c8:
a6:f8:06:da:07:24:ae:a0:91:11:02:cf:44:fa:eb:3e:26:d3:
e3:38:ea:fd:89:7e:81:d3:bf:8b:f5:da:ef:cc:2f:34:39:f7:
a8:87:1e:87:97:2a:71:43:bf:8f:63:d2:61:21:2b:47:5c:09:
5f:65:b1:a3:89:42:63:fe:23:fd:da:be:f9:18:e6:0c:9e:61:
9f:42:dd:28:46:57:83:74:97:26:3d:22:90:08:84:43:fe:b3:
ce:4d:50:e2:76:28:3a:93:09:18:69:83:b7:2d:1e:0d:a1:a5:
d4:1c:45:dc:66:e2:75:7d:50:42:66:a4:b0:7e:bf:64:00:32:
e4:3c:ed:54:a8:b0:0d:f4:fd:b4:04:ec:c1:b9:1f:8e:72:5f:
98:3d:57:ef:70:e2:7d:69:9e:a3:a7:1d:18:d5:ac:9e:66:b8:
f1:9f:ea:56:44:5b:88:6f:80:33:56:ce:07:bc:20:e0:e6:2d:
98:51:6b:83:1f:1b:98:06:5e:50:ec:6e:eb:29:ca:b1:2d:c9:
c7:f4:5f:ae:34:17:ca:df:0a:f5:fd:9b:8d:ad:21:70:54:e3:
0e:3b:b6:fa:db:ed:fc:19:e3:b6:5d:70:4d:b7:e6:1b:4a:75:
33:4f:f0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:18 2025 by rpki-client