Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/vWxJLB4UVyW2yWJSuCMzCcGqI5E.roa
File: vWxJLB4UVyW2yWJSuCMzCcGqI5E.roa (raw, json)
Hash identifier: mh36WKPKwFHgvAmQTDsQagsznxsTYkmbl7hwEKV5Z4k=
Subject key identifier: BD:6C:49:2C:1E:14:57:25:B6:C9:62:52:B8:23:33:09:C1:AA:23:91
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0490
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vWxJLB4UVyW2yWJSuCMzCcGqI5E.roa
Signing time: Wed 18 Dec 2024 02:26:34 +0000
ROA not before: Wed 18 Dec 2024 02:26:34 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 14.9.32.0/19 maxlen: 19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1168 (0x490)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:26:34 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=BD6C492C1E145725B6C96252B8233309C1AA2391
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:91:ea:f5:f0:6b:7b:86:20:c3:b0:17:91:50:
43:a4:e6:b2:51:5e:6f:9c:d6:d1:96:63:3d:10:03:
d8:1a:22:c2:39:29:5a:94:6f:e0:ba:31:e8:29:21:
78:c6:f1:ea:d3:8b:1f:35:ac:68:12:f2:b2:7d:18:
f9:c5:c7:d4:5b:b2:c9:3f:d2:e1:35:54:fa:78:b2:
fc:26:d5:fa:df:d7:18:95:66:59:71:96:7e:01:a5:
25:00:c5:70:59:4f:87:0f:3b:2d:10:36:31:5b:70:
04:09:7d:48:91:9f:1d:68:b7:4d:ad:a7:b7:c1:87:
a0:88:38:de:5a:f7:b6:e8:a0:e2:ac:ef:e3:ac:40:
25:cb:63:fd:44:d9:58:87:86:0c:2d:a5:b3:ea:e8:
74:73:ae:0c:27:7b:44:8d:70:f6:cf:ea:99:3e:c9:
08:4c:8e:a0:d7:6e:46:c4:a5:18:12:a0:70:54:42:
8f:a6:de:f4:59:45:63:62:da:10:bc:c0:ab:10:6b:
16:66:24:6d:70:c0:75:57:1f:01:a3:52:75:2a:c9:
98:ef:48:69:92:2b:e7:9f:a6:76:32:57:f0:e9:8e:
f2:b7:7e:b6:3e:31:c4:78:f8:48:3b:2a:a2:41:0b:
25:db:53:0e:a3:3d:2b:d6:17:c4:c6:07:04:2f:ed:
0d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:6C:49:2C:1E:14:57:25:B6:C9:62:52:B8:23:33:09:C1:AA:23:91
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/vWxJLB4UVyW2yWJSuCMzCcGqI5E.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
14.9.32.0/19
Signature Algorithm: sha256WithRSAEncryption
2f:2f:28:ff:ce:2a:23:42:a6:42:39:dd:92:d7:50:aa:b2:40:
3f:9d:f0:d9:51:14:ed:c2:be:d5:3a:84:71:20:c2:74:3f:0a:
02:3d:f0:56:ca:16:9a:16:b8:c9:76:78:ae:b7:81:bc:63:63:
05:b9:5d:a0:5e:fa:72:89:a3:77:52:29:c6:b5:d5:4b:6b:cc:
fe:4b:54:20:49:0b:7f:38:94:7c:6c:70:3e:3c:62:40:4d:01:
f5:ba:e9:86:4c:06:7e:d0:2b:f8:94:09:39:15:ef:24:58:39:
e7:ad:14:87:21:23:ca:81:87:a7:c1:b1:5b:cd:58:25:4f:3d:
ed:d2:ad:4f:cb:bb:8a:b8:f8:91:6f:a4:26:05:ce:bc:17:e1:
5f:1a:ea:2a:f1:c7:54:0d:02:95:ad:87:84:dd:70:5a:9a:80:
e2:e7:f5:67:0f:d0:83:fb:6f:98:d5:c5:11:1c:53:fb:95:36:
28:75:19:7b:15:71:53:9b:e7:c7:17:fb:20:43:2a:71:30:d6:
0a:0e:bd:f4:d0:aa:56:0b:40:e5:85:c0:02:ef:97:57:37:f3:
f9:67:e3:97:b5:f2:e9:42:e7:0c:ec:e7:b7:b6:42:89:e8:b7:
00:f5:11:fe:5c:3e:1d:c7:f2:e7:71:bc:75:27:e0:63:46:5d:
da:45:e6:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:23:56 2025 by rpki-client