Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/oxAGL-br1soZLehihKpwyq4ZcI4.roa
File: oxAGL-br1soZLehihKpwyq4ZcI4.roa (raw, json)
Hash identifier: r/BY3n13OwDwftn9kRWYRwuc5PXLRxrsrjXqJJbXa90=
Subject key identifier: A3:10:06:2F:E6:EB:D6:CA:19:2D:E8:62:84:AA:70:CA:AE:19:70:8E
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0480
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oxAGL-br1soZLehihKpwyq4ZcI4.roa
Signing time: Wed 18 Dec 2024 02:26:27 +0000
ROA not before: Wed 18 Dec 2024 02:26:27 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 124.209.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1152 (0x480)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:26:27 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=A310062FE6EBD6CA192DE86284AA70CAAE19708E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ae:89:f0:84:67:18:92:35:8e:74:b1:da:c9:
1c:fa:b4:74:9f:04:bc:51:ba:c3:f4:7a:4b:51:7d:
1e:30:0c:05:35:e3:4c:1c:6b:c6:55:cd:6d:1a:31:
d1:dc:97:37:f5:bc:11:92:eb:7b:b2:89:6b:93:f4:
c5:94:58:32:5f:3e:de:71:59:68:ee:77:92:da:37:
7b:b5:9a:4e:22:f1:51:9e:03:f5:13:54:da:5a:2f:
1a:55:dd:40:fd:40:1a:12:6e:c6:b9:f6:d8:6b:ca:
59:d4:41:77:d1:af:7a:b9:6b:99:cc:a0:c3:01:c7:
0b:da:40:6f:76:19:59:b9:c8:a1:eb:87:dc:8f:aa:
b8:f7:32:ad:5b:63:de:db:ea:4c:63:5f:5c:57:5f:
0d:a6:8a:f6:d0:42:4b:07:6e:5b:16:31:95:86:b0:
3f:e1:8e:a3:f0:98:5f:5f:00:93:a5:09:cb:c9:4f:
74:6d:a1:52:59:ac:8d:09:74:df:46:e8:11:68:74:
1e:91:1e:08:81:bd:b7:ea:d9:f0:38:38:1d:d1:0d:
89:98:13:ab:4a:41:4f:af:0a:f0:5d:0b:a4:c9:67:
6a:f6:38:3f:9e:7a:00:51:1b:04:94:d7:99:bd:4b:
33:dc:5f:52:07:e8:76:39:8d:12:a3:97:23:b1:9f:
54:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:10:06:2F:E6:EB:D6:CA:19:2D:E8:62:84:AA:70:CA:AE:19:70:8E
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/oxAGL-br1soZLehihKpwyq4ZcI4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.209.0.0/16
Signature Algorithm: sha256WithRSAEncryption
51:4d:32:5f:1a:cb:ee:e3:d2:5b:fd:99:94:c7:95:ce:8e:48:
ea:af:a0:ba:33:5a:f1:33:33:66:bc:c7:59:f9:7c:61:61:11:
f7:92:ea:b9:2b:48:20:8d:c8:dc:f7:59:7c:58:f8:8b:e2:62:
86:55:fa:17:02:a0:0d:6e:85:9c:d4:21:98:ab:0c:e0:49:8d:
0c:04:3d:76:8f:70:ec:0c:cf:22:12:9c:dd:68:93:2b:94:d3:
cb:e2:82:b9:8a:bb:0a:94:dd:22:ae:71:9d:44:71:6d:68:d6:
93:a3:92:c5:0f:03:23:60:5e:86:32:dc:ba:73:97:de:f4:88:
05:8e:f5:52:af:bd:ab:82:c0:bc:27:7f:27:22:fa:9d:01:39:
88:46:f0:9a:33:6f:b5:44:ce:ee:90:0a:b0:ea:29:74:ff:9b:
2a:c5:80:0b:80:75:ef:da:d4:46:21:c5:1c:ca:23:14:7f:b3:
bb:ed:ca:42:36:ab:a6:16:bf:95:2d:47:6b:1d:9f:ef:58:6f:
25:e1:e6:2e:a5:d2:8b:87:4f:d2:b1:71:e1:54:15:3c:b0:0f:
35:b3:d6:fe:8a:01:a9:27:c9:f4:9b:44:13:49:c7:2a:9e:7e:
29:4f:30:22:99:39:bc:13:ec:9f:1d:8f:2e:12:58:13:ae:48:
42:69:e6:e0
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICBIAwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMTVC
RkEzRTUzRTU5MTQ5MjM5QTE2OERGRDkyQzc1NzQ1QUI2NkNCNjAeFw0yNDEyMTgw
MjI2MjdaFw0yNTEyMTUwMTMwMDNaMDMxMTAvBgNVBAMTKEEzMTAwNjJGRTZFQkQ2
Q0ExOTJERTg2Mjg0QUE3MENBQUUxOTcwOEUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC6ronwhGcYkjWOdLHayRz6tHSfBLxRusP0ektRfR4wDAU140wc
a8ZVzW0aMdHclzf1vBGS63uyiWuT9MWUWDJfPt5xWWjud5LaN3u1mk4i8VGeA/UT
VNpaLxpV3UD9QBoSbsa59thrylnUQXfRr3q5a5nMoMMBxwvaQG92GVm5yKHrh9yP
qrj3Mq1bY97b6kxjX1xXXw2mivbQQksHblsWMZWGsD/hjqPwmF9fAJOlCcvJT3Rt
oVJZrI0JdN9G6BFodB6RHgiBvbfq2fA4OB3RDYmYE6tKQU+vCvBdC6TJZ2r2OD+e
egBRGwSU15m9SzPcX1IH6HY5jRKjlyOxn1QfAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUoxAGL+br1soZLehihKpwyq4ZcI4wHwYDVR0jBBgwFoAUFb+j5T5ZFJI5oWjf
2Sx1dFq2bLYwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzE2MS9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRGcTJiTFkuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9GYi1qNVQ1WkZKSTVvV2pmMlN4MWRG
cTJiTFkuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMTYxL294QUdMLWJyMXNvWkxlaGloS3B3eXE0WmNJNC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwB80TANBgkqhkiG9w0BAQsFAAOCAQEAUU0yXxrL7uPSW/2ZlMeVzo5I6q+g
ujNa8TMzZrzHWfl8YWER95LquStIII3I3PdZfFj4i+JihlX6FwKgDW6FnNQhmKsM
4EmNDAQ9do9w7AzPIhKc3WiTK5TTy+KCuYq7CpTdIq5xnURxbWjWk6OSxQ8DI2Be
hjLcunOX3vSIBY71Uq+9q4LAvCd/JyL6nQE5iEbwmjNvtUTO7pAKsOopdP+bKsWA
C4B179rURiHFHMojFH+zu+3KQjarpha/lS1Hax2f71hvJeHmLqXSi4dP0rFx4VQV
PLAPNbPW/ooBqSfJ9JtEE0nHKp5+KU8wIpk5vBPsnx2PLhJYE65IQmnm4A==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:39:52 2025 by rpki-client