Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/o0Z-gmd9rNuYko5CXapMTTU2-Lg.roa
File: o0Z-gmd9rNuYko5CXapMTTU2-Lg.roa (raw, json)
Hash identifier: yxpxTLcmY6sQATtzcl/jQhhHVr6neoxbLQEMoCY3qH0=
Subject key identifier: A3:46:7E:82:67:7D:AC:DB:98:92:8E:42:5D:AA:4C:4D:35:36:F8:B8
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 03B3
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o0Z-gmd9rNuYko5CXapMTTU2-Lg.roa
Signing time: Wed 18 Dec 2024 02:12:58 +0000
ROA not before: Wed 18 Dec 2024 02:12:58 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 222.4.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 947 (0x3b3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:12:58 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=A3467E82677DACDB98928E425DAA4C4D3536F8B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:82:3e:1f:d1:4a:d5:95:3d:6d:ec:b7:df:f8:
37:20:51:a4:72:f7:d0:16:5a:e5:81:66:6b:63:a4:
14:82:06:c7:da:bb:d3:7e:6f:14:fe:e5:a6:8a:9d:
2c:a1:68:af:26:64:84:d6:7e:21:21:28:51:15:a5:
21:a6:93:65:ee:a5:60:79:c3:02:23:e3:d8:3a:37:
2e:2b:7c:8f:f0:75:22:5b:d7:52:d9:ae:a2:f7:80:
d2:0c:b9:d7:70:ca:9f:50:e4:f8:f9:87:80:43:88:
c1:54:ca:9d:8d:16:7b:fe:4e:1b:38:af:93:6a:eb:
f1:82:a6:11:e5:62:d9:03:02:ee:e2:dd:60:3d:14:
ed:87:44:6f:92:3a:55:8e:53:f1:68:4f:ff:67:ed:
03:5b:ae:f3:d7:e0:ad:a4:64:b4:b9:31:56:95:90:
b7:98:c2:6b:d7:a3:9c:d0:0f:e9:d6:5c:37:3f:c6:
ef:6c:7d:3c:f7:10:98:ef:cc:1f:72:d5:c0:0f:24:
7a:27:38:ae:65:b3:f6:23:fb:e4:d2:5e:db:21:4a:
28:3f:38:28:c8:f4:26:be:cd:24:05:03:a6:4d:a7:
10:31:88:25:f9:20:64:e3:a8:27:39:5d:73:cc:57:
e0:e6:27:1c:bf:3b:76:b4:7a:98:f3:71:2a:7b:4e:
fc:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:46:7E:82:67:7D:AC:DB:98:92:8E:42:5D:AA:4C:4D:35:36:F8:B8
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/o0Z-gmd9rNuYko5CXapMTTU2-Lg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
222.4.0.0/16
Signature Algorithm: sha256WithRSAEncryption
77:5c:87:e6:04:fb:8a:98:60:44:39:d9:d4:f9:83:e8:bb:25:
c7:da:73:6c:58:c6:51:46:36:67:d1:26:ae:22:51:a2:45:9e:
fe:2c:79:7b:9d:fd:33:0b:ce:f1:b4:a7:44:b0:1e:4d:b3:f1:
ab:a4:bc:32:8f:5d:85:3c:98:51:78:d6:0d:4e:19:f2:f6:e0:
b5:f5:16:a1:33:6a:71:e5:09:3e:7d:2a:84:62:08:54:76:9d:
c0:37:bf:3a:88:34:69:37:36:b8:62:a3:ba:f0:60:78:35:8e:
e1:b5:2c:90:9f:55:cd:e2:02:7b:f6:ef:e5:52:0a:fc:bb:c4:
08:58:bd:71:74:d9:4e:6d:b3:a9:45:e8:3e:7f:88:1f:63:8f:
14:7a:bd:4a:14:32:c1:8a:ae:34:e5:e4:67:50:55:1a:91:3e:
f7:83:89:1d:81:e4:3a:73:2c:ce:c5:78:87:fb:fb:a1:77:6c:
51:27:34:10:cc:a2:32:f8:25:2a:5f:52:9f:21:f2:e5:ce:fa:
24:20:5f:2a:fa:66:70:d9:9a:0a:d8:d3:ab:3c:83:34:1f:fa:
6c:84:dc:92:56:e5:17:e5:28:d8:3a:25:19:94:4f:d0:a3:9c:
31:b0:85:97:92:f0:27:4d:1a:9f:87:91:db:bf:2b:78:2d:fb:
a7:40:92:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:57 2025 by rpki-client