Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/lTzyg5VDXit_c3hJ5hmeGlnyL_I.roa
File: lTzyg5VDXit_c3hJ5hmeGlnyL_I.roa (raw, json)
Hash identifier: 9uyWymd5vdXcxZR1+59N+BlhryscwdHnPzGEEWmmX3g=
Subject key identifier: 95:3C:F2:83:95:43:5E:2B:7F:73:78:49:E6:19:9E:1A:59:F2:2F:F2
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 050E
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lTzyg5VDXit_c3hJ5hmeGlnyL_I.roa
Signing time: Wed 18 Dec 2024 02:40:16 +0000
ROA not before: Wed 18 Dec 2024 02:40:16 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 211.10.195.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1294 (0x50e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:40:16 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=953CF28395435E2B7F737849E6199E1A59F22FF2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:11:3b:1f:16:b9:c5:0d:0d:2b:25:18:3c:04:
75:9b:02:44:f8:9c:ce:49:36:58:72:c0:cf:97:ee:
72:70:05:b0:90:5d:1e:d6:14:98:a4:58:12:53:9c:
b5:d1:90:87:c2:73:fc:54:a1:bc:ff:68:15:01:be:
c0:a8:c0:23:32:0e:df:53:76:06:36:b1:19:9a:15:
b3:8a:19:3b:3b:97:09:a8:e4:bd:0e:f9:0d:a0:d6:
cb:17:d8:4e:ff:06:ec:dc:8f:66:1f:e5:c4:78:87:
d5:bf:f4:37:49:b2:3d:f9:97:0b:66:e9:0a:65:06:
49:1b:06:e1:69:fa:d0:e8:16:21:17:64:aa:9b:af:
5e:da:25:c2:73:78:ff:00:28:07:15:9b:da:68:0e:
82:0d:6e:63:d2:5c:e2:ca:c8:da:6e:a7:3c:eb:2d:
c2:a2:01:aa:d4:94:6f:9c:03:57:32:1a:41:bb:26:
4b:21:c1:58:29:c3:07:93:1b:7d:3e:ab:3a:2f:b4:
09:e1:7f:d4:de:d1:ad:de:2d:cf:c4:74:9e:c4:5a:
68:b9:fa:65:90:6e:5a:15:40:48:18:e9:b2:45:e8:
d8:89:ef:0e:19:a0:f3:46:11:82:cb:f8:a7:26:4a:
c2:0d:06:da:81:d8:55:61:33:f5:9d:b0:c8:41:c0:
7f:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:3C:F2:83:95:43:5E:2B:7F:73:78:49:E6:19:9E:1A:59:F2:2F:F2
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/lTzyg5VDXit_c3hJ5hmeGlnyL_I.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.10.195.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:59:a5:11:d1:d6:bf:3a:e1:cd:b7:0c:d0:1f:00:c6:9d:f4:
39:de:96:da:55:4b:e2:43:79:fa:33:13:c1:4e:fe:e0:42:cd:
2e:20:30:dc:18:8a:ed:35:5c:9b:f7:81:ce:d1:e0:ef:36:0a:
f1:a4:92:cf:c8:83:b4:ba:29:e1:fa:09:64:4b:b6:06:59:6a:
67:d5:fd:06:94:9a:d5:1d:cf:b4:18:83:f1:44:0e:9e:eb:cf:
47:c4:00:93:9e:10:63:68:cd:92:79:69:1f:76:ad:3c:90:ed:
b8:9a:95:f0:4e:12:80:31:48:73:5c:16:9a:17:e6:c0:ec:64:
c8:fa:28:17:5b:44:85:43:a7:3c:6e:01:46:36:70:6f:47:29:
a1:49:f4:7a:3e:34:62:b9:74:64:79:23:40:9b:22:26:ba:39:
d1:f5:d8:a9:e0:2c:a9:1f:b1:6c:a0:bd:c5:31:39:e6:59:2f:
a0:f2:0b:10:fd:83:78:30:b9:18:25:36:82:51:69:58:af:96:
ab:8a:8b:2f:94:f8:03:16:1f:ff:5d:10:6f:6d:0a:fb:39:22:
1f:90:3b:01:03:78:2d:28:99:f4:d6:02:a5:e1:02:27:af:74:
e3:e1:32:56:dc:e7:bc:fe:fc:90:43:71:9c:1f:07:4b:a1:e5:
a5:7b:02:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:39 2025 by rpki-client