Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/XHZsI-q7FSk2-wwK5xBFv9tdBjg.roa
File: XHZsI-q7FSk2-wwK5xBFv9tdBjg.roa (raw, json)
Hash identifier: 9FkcUif3Wj/cpiQhxo4pbT+rda7mynKN1TbC4yy11pg=
Subject key identifier: 5C:76:6C:23:EA:BB:15:29:36:FB:0C:0A:E7:10:45:BF:DB:5D:06:38
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0469
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XHZsI-q7FSk2-wwK5xBFv9tdBjg.roa
Signing time: Wed 18 Dec 2024 02:24:16 +0000
ROA not before: Wed 18 Dec 2024 02:24:16 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 14.8.0.0/15 maxlen: 15
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1129 (0x469)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:24:16 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=5C766C23EABB152936FB0C0AE71045BFDB5D0638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:be:e7:01:40:f8:fd:fc:93:f7:1d:9d:b7:e9:
ea:54:d5:02:3d:b0:1a:30:c5:01:d7:54:11:41:20:
4d:ed:20:6f:88:24:b0:ab:a8:bd:14:b0:77:44:39:
7f:9f:e9:28:d9:1a:24:db:49:f3:3a:ad:bd:09:2b:
4a:72:e8:c6:9c:cc:f8:29:fb:c7:ab:dc:ae:cc:9d:
93:a8:ad:6e:da:7f:08:8c:45:7f:45:51:d5:9b:8a:
e7:5a:87:74:7f:2f:3f:22:b4:df:4e:c2:d1:19:ab:
07:86:b0:fd:ac:06:a1:87:21:d1:02:e7:11:2b:82:
6a:6a:a9:46:fe:ad:f3:c3:b2:1d:8d:c1:1f:97:5c:
b8:79:04:a9:4d:c7:b1:95:7f:eb:67:10:13:a4:9f:
cf:2a:ed:36:36:ab:57:e1:b7:79:dd:e2:33:b0:ec:
62:40:52:6d:48:7f:83:13:ce:53:92:79:da:7c:57:
6f:79:4e:e0:32:d6:92:7a:8c:1f:6e:60:36:d9:e0:
79:9d:b7:fb:f7:65:e7:4c:bf:1a:b3:9e:34:e3:58:
1c:27:f8:8c:c8:a2:fb:01:d6:f6:6f:0c:23:72:0a:
1d:12:71:03:fa:3f:0c:17:19:c5:87:2e:e4:d9:42:
0b:32:26:9c:a3:8f:36:b0:b6:f6:fc:ff:6f:f5:c2:
1d:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:76:6C:23:EA:BB:15:29:36:FB:0C:0A:E7:10:45:BF:DB:5D:06:38
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/XHZsI-q7FSk2-wwK5xBFv9tdBjg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.8.0.0/15
Signature Algorithm: sha256WithRSAEncryption
b8:14:45:da:92:d8:17:ad:e2:46:cb:10:87:9e:fa:bc:e7:27:
46:6c:70:ea:30:cd:d6:48:4a:2d:3c:ab:68:e0:35:00:3b:d1:
14:cb:28:c1:ea:83:fc:68:16:0f:11:9b:c5:55:c4:aa:cd:db:
f9:4a:37:3f:01:67:9e:a3:ff:73:54:82:f1:49:bb:b9:1c:ce:
cc:c5:0f:7c:31:f4:3c:1a:ff:7f:b0:a9:50:78:d7:19:d3:3e:
84:a1:11:ac:3d:ea:17:fa:08:a5:b9:5b:29:b1:91:3e:83:85:
1d:46:8f:1f:80:df:e0:2d:bd:cf:aa:f3:78:f1:c9:e1:ab:90:
d6:05:8f:99:b9:c8:c1:27:22:41:a7:2c:d5:04:35:a2:6d:f2:
88:e9:d7:81:9c:98:77:4d:a6:91:09:f2:06:4a:2d:2e:ae:53:
23:9a:2e:f9:3f:f9:58:fb:03:61:16:54:c5:13:04:0a:93:be:
bd:6b:f5:95:07:b0:8a:1f:e4:a9:4d:38:fd:45:63:21:71:35:
9a:37:d6:27:c0:6a:58:39:b1:95:0d:bc:7e:b7:ba:7e:16:9e:
4c:c8:79:1e:a6:af:f1:80:e7:22:ff:40:95:61:8b:f4:46:e6:
91:5c:c5:8c:04:7f:e1:c5:1a:b1:96:74:33:d9:a0:89:b8:13:
b7:fc:5e:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:57:48 2025 by rpki-client