Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/Zq5bnW10Z0IIiZ-xShSrNWYOQ1E.roa
File: Zq5bnW10Z0IIiZ-xShSrNWYOQ1E.roa (raw, json)
Hash identifier: X8uX09AjkHa/joIClFxL+rKWTuAnXl+bA8crl7N86+o=
Subject key identifier: 66:AE:5B:9D:6D:74:67:42:08:89:9F:B1:4A:14:AB:35:66:0E:43:51
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 049E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Zq5bnW10Z0IIiZ-xShSrNWYOQ1E.roa
Signing time: Wed 18 Dec 2024 02:28:56 +0000
ROA not before: Wed 18 Dec 2024 02:28:56 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 221.119.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1182 (0x49e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:28:56 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=66AE5B9D6D74674208899FB14A14AB35660E4351
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3d:a4:ee:12:cc:45:62:0d:66:82:a9:8b:c3:
4f:77:4f:38:ed:cb:af:06:ba:80:3f:35:2b:fa:08:
61:50:49:bf:ab:6f:ef:72:2f:58:53:18:d9:80:30:
c3:72:95:29:e3:8a:f3:05:7f:f2:99:86:8a:d9:f1:
d0:3c:4f:2e:97:0a:fc:8e:94:d3:d7:b5:b8:a3:59:
c0:1c:ab:a2:e8:d5:b4:ce:dc:6d:1b:c9:85:61:58:
1a:a6:bb:70:02:f6:01:50:42:18:37:f9:d3:9e:88:
4c:7d:92:8a:96:d4:fc:5e:ac:5f:d5:65:71:df:f0:
67:50:31:f7:99:0a:9e:8f:a5:3c:e5:93:53:ed:d9:
a2:97:93:5b:e8:04:36:d7:fe:e6:e3:52:89:84:5d:
e8:54:58:15:b6:03:e5:8f:45:88:9c:83:52:5f:e5:
fb:b1:20:ee:27:5e:e8:b8:29:49:76:29:9b:44:74:
73:00:91:73:cb:4e:9f:1a:d6:3b:8f:7f:25:2c:29:
dc:9f:80:9b:84:2d:6a:92:f5:20:0e:3f:a0:1d:fe:
56:dc:aa:11:2e:cc:22:5f:c8:79:aa:61:5f:19:d5:
9f:09:08:e3:36:02:7e:db:16:5e:ea:69:5f:3d:dd:
ca:5c:19:12:1a:51:ba:67:1c:47:89:0d:5b:d8:97:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:AE:5B:9D:6D:74:67:42:08:89:9F:B1:4A:14:AB:35:66:0E:43:51
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Zq5bnW10Z0IIiZ-xShSrNWYOQ1E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
221.119.0.0/16
Signature Algorithm: sha256WithRSAEncryption
3e:e0:0d:38:66:8f:39:33:44:98:d9:7b:41:ec:2e:93:02:a0:
7c:18:af:2b:1a:27:9e:13:5d:46:b4:8f:ee:1d:99:05:e6:e1:
83:ba:8e:13:59:ff:f9:be:a5:92:61:9c:16:12:97:ae:65:bf:
b8:ed:9c:b1:ca:b9:8d:5d:b3:d6:1b:8c:25:2c:d4:13:91:36:
83:36:c3:23:32:99:de:ab:f6:14:0e:86:75:97:92:fc:e2:f4:
07:28:7a:0f:9c:ab:f0:e6:78:c4:42:73:5d:6f:9c:e3:1a:b2:
38:f2:a4:fb:a8:f4:8f:e7:09:5a:e7:9f:79:99:c1:00:11:62:
b5:fe:77:0a:ef:7a:78:d4:0a:d1:c9:f0:ff:ae:e1:5a:c6:a3:
b1:34:5f:32:37:95:b1:19:f6:44:7e:13:21:8d:e0:52:72:73:
38:d1:d8:44:22:f2:13:98:eb:d8:a2:02:5c:d4:80:ea:9a:40:
a8:d1:29:fb:26:d3:0a:b4:43:f7:27:b9:bc:e4:60:68:62:01:
80:bf:21:b2:82:3f:5f:c9:cc:9c:07:e0:7a:db:a6:80:76:a8:
fe:7f:fe:26:eb:73:61:4d:d3:92:8d:8c:1a:93:d7:55:10:69:
58:4a:90:35:cf:14:f9:f3:bb:f6:85:a0:f9:c3:bd:c6:21:3c:
b0:50:3a:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:42 2025 by rpki-client