Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/oLIZ4W8htaHaaf7MwPFQfIC_LW4.roa
File: oLIZ4W8htaHaaf7MwPFQfIC_LW4.roa (raw, json)
Hash identifier: 8xnNYxBuInnoFuol8KSBXYp3ZE7dFQX/pP1xNEtplw4=
Subject key identifier: A0:B2:19:E1:6F:21:B5:A1:DA:69:FE:CC:C0:F1:50:7C:80:BF:2D:6E
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0409
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oLIZ4W8htaHaaf7MwPFQfIC_LW4.roa
Signing time: Wed 18 Dec 2024 02:18:54 +0000
ROA not before: Wed 18 Dec 2024 02:18:54 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 106.161.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1033 (0x409)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:18:54 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=A0B219E16F21B5A1DA69FECCC0F1507C80BF2D6E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:74:dd:83:0a:19:bb:84:61:7a:78:e6:23:03:
db:0b:94:aa:65:f3:23:b4:32:fa:17:30:05:75:7a:
d6:e5:dc:f3:c3:be:37:a5:2a:32:f4:d2:28:41:fc:
56:60:d4:b2:70:90:92:cc:f7:e1:16:63:da:15:11:
a1:67:80:22:e7:51:3d:1d:63:90:6e:29:59:d9:6e:
7d:f2:a7:ac:57:3c:dc:09:b4:58:91:81:ff:d1:1b:
72:6b:79:00:31:aa:e8:99:2f:5f:a3:f8:df:1f:85:
96:4c:00:9f:94:77:a7:da:6c:04:62:4b:0d:5c:4d:
2b:2b:02:fe:2f:0e:39:44:ae:80:c5:83:b8:d7:a9:
c2:b2:a3:a1:18:44:20:36:9e:6f:d9:64:ee:ab:55:
d0:d3:6a:cd:22:5a:35:55:2c:02:99:e2:9e:cb:3c:
ad:54:6b:27:ea:ff:5d:7f:71:93:73:af:4d:cb:d2:
12:45:cb:7f:f3:e2:42:13:08:64:9e:b3:5a:92:ea:
d3:d7:a5:11:55:52:fb:6f:d5:ce:34:67:b0:da:9e:
1d:c5:eb:a8:02:da:db:b4:40:29:bd:7f:4d:37:6f:
61:25:c7:75:82:aa:0f:bb:ea:e0:37:35:50:f4:a3:
77:97:98:57:9a:d1:83:94:fd:1e:83:1b:3d:f6:61:
45:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B2:19:E1:6F:21:B5:A1:DA:69:FE:CC:C0:F1:50:7C:80:BF:2D:6E
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oLIZ4W8htaHaaf7MwPFQfIC_LW4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
106.161.0.0/16
Signature Algorithm: sha256WithRSAEncryption
94:64:37:5b:e5:6d:2f:55:3e:b9:30:5a:a5:fc:9b:82:20:7e:
1e:bb:d3:db:43:f5:6a:90:58:c4:c2:13:3e:0a:13:01:da:44:
96:2e:b0:5f:44:8b:8c:83:a9:0b:b3:f3:0b:bb:9c:0e:1d:05:
3e:f8:fe:f0:01:41:c8:2c:7d:9f:82:90:55:7f:b7:7a:a6:ae:
ae:ba:cc:cc:23:56:30:90:3c:d0:0d:34:c4:94:c7:43:a9:27:
41:f0:fe:cf:c5:71:16:c0:7e:2c:e1:23:1c:db:c2:68:19:cd:
13:41:98:03:9f:31:41:45:cb:49:8a:40:7d:d8:4b:b4:aa:be:
14:31:0e:08:7e:16:28:c7:92:3f:ac:a1:a9:1a:f0:73:0b:22:
0c:b9:ce:df:f1:05:d1:e7:53:21:df:6b:21:35:c5:0c:5d:b6:
a7:a3:2f:9d:8d:f6:f8:8e:3d:95:6e:ce:31:05:74:9b:dc:5e:
44:99:4b:8a:ee:73:f5:a3:73:ef:d1:77:d9:e7:f1:36:ec:c8:
47:03:05:4a:93:38:85:b1:04:92:af:b8:e5:7a:4d:0a:0e:47:
00:25:f0:fa:7a:db:23:95:35:9a:b6:03:70:89:40:2e:d4:d7:
b4:07:7c:8a:82:63:6b:47:80:1a:7f:50:6c:2f:8e:ff:92:15:
17:70:44:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:52:00 2025 by rpki-client