Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/YeiL0jqZBeQx2smIRxqYIUATH7c.roa
File: YeiL0jqZBeQx2smIRxqYIUATH7c.roa (raw, json)
Hash identifier: 9AjIyHrtcXggFv+2U+0zqMUop7mexBMVUDwc4GldJM8=
Subject key identifier: 61:E8:8B:D2:3A:99:05:E4:31:DA:C9:88:47:1A:98:21:40:13:1F:B7
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0430
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YeiL0jqZBeQx2smIRxqYIUATH7c.roa
Signing time: Wed 18 Dec 2024 02:22:17 +0000
ROA not before: Wed 18 Dec 2024 02:22:17 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 210.238.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1072 (0x430)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:22:17 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=61E88BD23A9905E431DAC988471A982140131FB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ab:57:f0:50:b3:b7:2d:91:11:3d:02:b2:72:
41:c2:0e:ba:4f:dc:ad:da:17:79:6b:81:c1:e4:d0:
d9:ab:d0:c5:91:f6:65:e3:42:e1:55:0b:69:dd:4f:
67:f3:9d:6e:77:39:6a:f9:35:eb:5b:6a:19:92:d1:
c1:96:85:d2:79:fc:15:1f:be:b2:3e:64:b5:37:ad:
3d:25:46:62:aa:77:a6:36:dd:f3:e7:10:d1:8d:77:
fc:ee:d9:28:70:35:2d:94:b9:fb:99:44:ab:19:83:
ff:55:0f:8e:fb:00:3b:2b:66:48:f5:49:42:66:6b:
a5:b5:49:31:ba:8d:39:f7:d9:41:84:94:da:08:51:
53:f0:81:f9:66:80:f3:4a:53:71:2f:bb:e2:62:b0:
e7:98:47:b1:06:25:88:4d:ce:94:77:bb:6b:97:f8:
4c:3f:97:6e:b0:39:18:fb:4d:8b:78:b4:df:f2:62:
f9:2b:83:18:f9:5e:fd:47:46:49:19:ff:df:af:b7:
d7:0f:40:e2:13:31:a3:17:2f:d0:4a:4a:ee:75:ca:
43:08:a8:8d:a0:f1:62:ff:d1:ea:a9:9d:e0:ed:d3:
9d:ea:54:49:88:22:9a:cc:f5:0a:a3:eb:1b:72:ef:
c3:80:72:64:61:f6:ab:cd:d7:98:99:67:f0:8f:e7:
1d:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:E8:8B:D2:3A:99:05:E4:31:DA:C9:88:47:1A:98:21:40:13:1F:B7
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/YeiL0jqZBeQx2smIRxqYIUATH7c.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.238.128.0/17
Signature Algorithm: sha256WithRSAEncryption
9d:62:cf:94:35:17:ed:52:db:cc:67:19:e0:65:8e:7f:58:e0:
c6:87:de:b3:5a:72:d4:f7:6c:4e:e2:e1:61:31:29:25:28:3a:
28:c4:03:2e:1c:72:32:69:5e:00:a7:b2:f1:8e:e9:25:18:96:
47:e3:4c:67:11:1a:2f:72:57:bb:73:a6:18:d5:fe:2f:2a:ac:
4c:d6:77:4b:fc:47:17:41:0e:16:ab:4f:e3:c7:38:a8:5a:a2:
14:8d:a8:4d:84:6d:5b:64:de:f0:49:b5:92:64:5a:96:f3:c9:
fd:3d:33:71:6b:08:56:f4:1a:07:d2:5a:07:4d:99:2d:21:ac:
33:34:5f:ff:63:00:2e:c3:da:48:88:92:e6:4b:ed:a7:57:1b:
b7:75:02:4f:bd:c3:0d:42:49:5b:98:80:0c:3d:5b:62:85:7c:
0a:b6:25:0f:b5:8f:20:a4:0b:75:1a:6f:c9:34:96:25:3e:88:
9c:17:d7:86:a7:b2:1a:5d:75:ac:cf:75:3b:81:7e:da:e0:d3:
27:0f:46:79:be:39:89:22:4f:ba:da:78:89:e1:14:49:57:be:
a3:7b:b7:fd:59:e5:ca:f9:23:6f:6c:de:b3:ca:9c:d1:4e:30:
96:d1:8a:f5:12:e5:d4:4a:f7:76:b8:4d:07:52:f1:be:01:c9:
cb:31:a2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:11 2025 by rpki-client