Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/c7_RMr9p7yZuQTrn2yYgl2GOzzM.roa
File: c7_RMr9p7yZuQTrn2yYgl2GOzzM.roa (raw, json)
Hash identifier: EVoOxwIgGFP++0QMUqisLAaH7umVvneLYMyavjd7igc=
Subject key identifier: 73:BF:D1:32:BF:69:EF:26:6E:41:3A:E7:DB:26:20:97:61:8E:CF:33
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04A1
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/c7_RMr9p7yZuQTrn2yYgl2GOzzM.roa
Signing time: Wed 18 Dec 2024 02:28:57 +0000
ROA not before: Wed 18 Dec 2024 02:28:57 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 59.137.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1185 (0x4a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:28:57 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=73BFD132BF69EF266E413AE7DB262097618ECF33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ab:a3:be:76:b3:2d:19:12:d9:57:41:f6:ad:
1f:98:f3:c2:e3:b0:b2:1c:30:e4:99:b1:06:c1:b2:
6b:bb:99:9c:25:cd:54:9f:64:94:6b:9f:66:44:b7:
8c:1e:7a:4a:db:ab:0b:82:22:32:cf:f7:22:3d:9a:
ac:ca:77:4d:9b:73:d9:f1:3c:2d:41:b2:b6:78:6c:
d5:f7:d9:c4:b1:bb:42:7c:99:8b:84:15:1a:6e:5c:
27:39:9a:d9:71:7d:d9:13:ee:ad:bc:bd:9c:c4:1b:
f2:d1:db:63:0e:63:58:5b:91:c7:87:be:1a:54:19:
38:fb:64:e1:6e:f2:19:15:3c:dc:a2:be:f4:33:65:
c8:74:97:63:3c:9d:24:be:fb:9a:85:91:5c:63:dc:
4e:19:1a:58:c4:e0:da:fd:bc:e6:ec:26:5c:ff:13:
c6:1e:a7:00:de:98:a3:49:3f:9c:99:7c:7c:7e:b0:
16:d9:ab:39:27:56:b2:29:26:b0:9f:a0:bb:32:ca:
10:24:20:fa:6d:39:d1:8b:75:3e:30:0c:ee:2e:f6:
15:47:cc:b0:40:09:66:6f:f8:f3:c5:7d:bc:65:f8:
38:92:6b:0b:f2:f3:dd:93:b1:b7:bb:09:c8:62:4b:
7c:16:b8:f6:e2:52:e6:c7:70:d7:11:7d:e9:75:e3:
89:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:BF:D1:32:BF:69:EF:26:6E:41:3A:E7:DB:26:20:97:61:8E:CF:33
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/c7_RMr9p7yZuQTrn2yYgl2GOzzM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
59.137.128.0/17
Signature Algorithm: sha256WithRSAEncryption
2b:d2:02:0d:41:7e:3c:be:b0:93:64:31:8f:0d:9a:13:c6:f0:
a6:96:ea:55:d9:dd:95:c9:af:20:46:2f:f7:d6:a3:6e:a6:79:
e8:df:06:32:64:5f:d9:49:8d:d5:64:49:aa:1b:81:58:d2:cd:
a9:6e:a7:4d:9c:3a:c9:1b:82:af:fa:2d:7c:3b:6c:0c:20:fa:
1f:45:2c:7b:42:df:04:ef:da:fc:f0:1b:1f:c7:b3:fa:d6:99:
53:02:e4:dc:81:f3:4a:39:1c:42:33:c2:81:84:5c:1b:89:89:
4e:97:e4:c7:82:8f:59:51:47:60:a7:1b:72:c0:29:e1:d6:bf:
3f:a4:aa:d8:37:64:3e:eb:45:8d:19:c2:ee:75:b5:4b:af:be:
56:e4:2d:f6:b2:9e:ec:10:6d:4d:dd:ff:d5:1c:f0:f4:9c:f2:
ec:e4:5f:f5:29:d3:0d:f5:d9:dc:25:78:9e:58:ba:f9:ed:20:
24:43:80:d9:d6:68:ff:a4:98:67:28:e7:5b:5a:96:b4:c5:b1:
be:96:4b:ad:46:49:0e:93:c7:32:83:22:62:47:d6:be:a7:52:
72:37:76:1a:19:b2:0c:99:8e:3c:9a:32:db:73:f7:9b:a0:2f:
4b:dd:b6:77:1b:69:f0:e0:bd:16:36:73:fa:92:d3:e4:69:f5:
da:c3:20:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:04:36 2025 by rpki-client