Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/_cfAKMg3bm7e9fLry5S0J0JSd0I.roa
File: _cfAKMg3bm7e9fLry5S0J0JSd0I.roa (raw, json)
Hash identifier: prFmGd8w7n17vFJNRfiSpJ2OIJLROK5Iey2kSlcOLY0=
Subject key identifier: FD:C7:C0:28:C8:37:6E:6E:DE:F5:F2:EB:CB:94:B4:27:42:52:77:42
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0550
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_cfAKMg3bm7e9fLry5S0J0JSd0I.roa
Signing time: Wed 18 Dec 2024 02:44:26 +0000
ROA not before: Wed 18 Dec 2024 02:44:26 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 211.7.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1360 (0x550)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:44:26 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=FDC7C028C8376E6EDEF5F2EBCB94B42742527742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:55:56:45:00:92:9c:13:54:a5:75:8e:df:
32:c7:54:45:40:bc:e7:48:87:11:fd:4f:9d:74:02:
8f:28:06:38:66:91:72:23:cf:f5:5e:b3:61:6d:3a:
b9:d0:68:a5:93:30:ee:10:85:a2:d2:18:fc:4a:94:
25:f9:76:20:2f:f2:01:31:aa:5b:e4:5d:63:d5:35:
c2:08:71:52:06:4f:8b:2e:4f:25:af:5b:83:1b:19:
61:cf:28:e3:ca:65:42:97:5c:f5:37:94:9b:6b:59:
79:71:41:3e:a5:c8:da:ad:71:b9:c3:fb:de:e5:69:
07:f0:8f:11:f7:87:89:8a:15:cf:5c:86:a9:5e:b5:
7f:2d:d8:97:40:e4:56:26:5c:45:1c:be:12:c2:cf:
8b:58:82:48:23:41:2a:45:8a:e2:c1:f0:60:52:0f:
09:7b:f7:88:bf:7b:82:75:93:da:74:0f:88:e1:40:
85:4c:63:85:d1:d4:74:72:1e:c2:89:89:24:bb:5c:
07:7b:ee:da:2c:1b:3e:26:31:44:78:35:ac:1c:d0:
8d:2a:4b:ad:89:d2:4e:e7:b0:ac:99:8f:5e:58:85:
51:cb:fe:dd:7a:6f:65:76:45:d4:d3:da:db:cb:63:
a5:6e:5f:21:9a:ee:e4:f1:44:58:1c:68:c4:63:61:
71:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C7:C0:28:C8:37:6E:6E:DE:F5:F2:EB:CB:94:B4:27:42:52:77:42
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/_cfAKMg3bm7e9fLry5S0J0JSd0I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.7.142.0/24
Signature Algorithm: sha256WithRSAEncryption
69:08:8c:be:00:57:ee:95:cc:f6:64:e7:64:50:67:1a:e9:be:
43:d6:ec:8b:24:87:93:87:6e:df:b6:74:58:62:57:03:d2:84:
c5:29:73:0b:34:03:b6:9c:ae:81:f1:2c:c8:4c:1b:f6:f7:30:
7b:2d:3a:a6:95:8d:c2:b9:3c:4e:af:d6:7d:11:84:a8:2c:bc:
dc:1c:7a:d9:d9:30:28:73:74:b0:f9:d3:16:2f:33:de:88:99:
13:bc:68:62:98:d6:54:c9:33:39:09:2d:f9:ac:46:82:c1:3d:
9e:84:86:71:aa:61:28:9a:fb:cd:db:05:bd:fc:9a:28:6c:ad:
04:59:eb:cb:34:7f:e4:a8:c7:c0:5f:dd:22:6b:69:52:29:dc:
5b:96:74:16:f3:e6:e8:92:62:d7:54:78:e5:2e:b4:a4:11:1e:
e4:6a:6b:9b:03:f5:2b:55:a7:da:af:bb:dc:2b:32:99:e0:1a:
e6:73:57:d1:85:70:05:7e:2b:c0:68:ea:90:cd:f0:f5:04:20:
29:ce:f2:6f:c8:a9:fe:bc:5b:b3:0f:6b:40:52:46:10:96:fe:
54:17:22:97:09:04:12:33:dd:1a:71:a7:6d:c2:c3:80:6f:1e:
c6:59:91:ff:4e:29:b8:da:d4:e0:ed:44:d1:e3:95:32:05:e0:
13:9a:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:56:15 2025 by rpki-client