Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/otaKmByxkNUU00XZBtTOp_NwIqA.roa
File: otaKmByxkNUU00XZBtTOp_NwIqA.roa (raw, json)
Hash identifier: higlOC44GKVa+XhWbsPSVBdHVBcUFIygCPxlBsOgX3Y=
Subject key identifier: A2:D6:8A:98:1C:B1:90:D5:14:D3:45:D9:06:D4:CE:A7:F3:70:22:A0
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0476
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/otaKmByxkNUU00XZBtTOp_NwIqA.roa
Signing time: Wed 18 Dec 2024 02:26:23 +0000
ROA not before: Wed 18 Dec 2024 02:26:23 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 111.108.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1142 (0x476)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:26:23 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=A2D68A981CB190D514D345D906D4CEA7F37022A0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:61:fb:8c:89:35:84:0e:fb:3e:d7:e9:ea:
9b:40:54:cb:f7:86:60:fd:9f:98:20:f0:4c:62:bd:
a1:ec:5c:66:58:e4:fe:35:93:e3:6f:6d:8a:3c:02:
6c:7a:f3:7a:02:87:4b:c7:b8:f3:38:9c:35:4f:c2:
ec:f1:c8:68:ca:eb:5a:46:77:6f:b9:df:1e:ee:fc:
ae:cb:b5:04:38:6a:34:2b:24:dd:9e:a7:9e:75:d4:
0b:b1:39:7c:68:b1:53:4a:73:b1:61:f6:ee:02:3f:
1a:d8:28:a0:b7:99:47:45:3e:bd:2b:f4:30:0d:f1:
a3:5a:ea:0e:4d:cd:04:87:55:21:04:77:19:95:a3:
c7:0c:aa:92:36:3d:1d:15:8c:6d:85:2d:65:1a:ab:
de:a9:f3:95:c2:e2:07:1a:09:47:ba:f4:b0:f4:cf:
55:5d:fd:91:9d:3e:d4:f5:51:bf:5d:e9:67:25:4c:
7c:3c:a9:6d:4f:26:55:8a:2b:05:08:33:2c:fb:b0:
e2:8c:39:59:1b:67:23:ec:96:c8:6d:fa:06:ad:30:
e0:04:58:b1:65:d4:8b:1f:2c:b9:bf:9f:5a:0c:3e:
18:27:17:13:f0:ea:d6:3c:3a:90:04:70:93:6a:c8:
d7:9f:3a:2f:58:e6:4a:ed:d3:e8:ab:9c:91:0e:f5:
0d:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:D6:8A:98:1C:B1:90:D5:14:D3:45:D9:06:D4:CE:A7:F3:70:22:A0
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/otaKmByxkNUU00XZBtTOp_NwIqA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.108.0.0/16
Signature Algorithm: sha256WithRSAEncryption
47:f9:82:5d:40:ae:53:2a:a3:0e:e4:f3:a8:ee:99:3c:e3:0e:
68:29:eb:0f:36:a5:ab:45:ea:82:2e:03:59:c3:0e:85:5c:3c:
40:0d:d7:6f:a0:c1:a9:25:4e:dc:67:b6:7a:b8:44:bf:66:b6:
eb:a3:60:63:e7:82:b7:f4:6a:0c:fe:5c:2d:bb:6f:fe:60:5b:
af:4c:7b:f2:8f:2c:6a:bc:76:01:ce:82:81:4c:69:93:5f:cb:
b8:6a:c1:2d:a3:b1:2f:e2:4d:d3:72:7e:47:da:84:2b:20:ca:
cb:60:f3:0b:5d:af:69:9a:50:44:d8:f1:42:28:5b:1f:55:60:
58:25:ba:ef:cd:68:96:3b:70:a4:1f:43:36:46:b2:a0:24:fe:
24:df:a2:07:eb:eb:0f:36:19:6a:d3:2e:ed:4f:e2:8e:5b:33:
d2:c8:26:2c:38:36:f5:12:fc:29:3b:09:4e:bc:c8:3a:1f:2b:
61:04:fa:45:9c:ce:a9:f9:41:a5:2a:9f:57:c9:49:47:78:61:
ac:24:45:79:e2:43:ad:77:55:87:64:23:49:d1:4e:7e:0b:28:
07:d8:09:23:79:ea:f3:52:f3:93:d0:7f:24:78:c0:6b:1e:54:
61:f8:d1:79:e4:08:02:d7:f3:fd:1b:40:d5:cd:7d:5f:bc:4a:
f5:e6:82:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:28 2025 by rpki-client