Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/yhZweNo4KhgjFyVqNrBoFy3rp5U.roa
File: yhZweNo4KhgjFyVqNrBoFy3rp5U.roa (raw, json)
Hash identifier: HekRgyXJ/uK1Xo8XEw6RtLQVDkHymjBETQ3byH6e24A=
Subject key identifier: CA:16:70:78:DA:38:2A:18:23:17:25:6A:36:B0:68:17:2D:EB:A7:95
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04A7
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yhZweNo4KhgjFyVqNrBoFy3rp5U.roa
Signing time: Wed 18 Dec 2024 02:28:59 +0000
ROA not before: Wed 18 Dec 2024 02:28:59 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 27.92.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1191 (0x4a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:28:59 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=CA167078DA382A182317256A36B068172DEBA795
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f1:6c:e1:3e:9a:38:66:ba:60:24:0d:15:73:
e3:4e:c8:4b:15:9c:b3:2c:08:80:05:b7:2a:dc:f2:
94:6d:bf:56:68:be:88:c5:af:e7:93:47:f0:5b:4a:
ac:7d:54:2c:ba:7d:fc:66:0c:e8:70:11:03:5e:de:
60:b7:90:1d:7a:d2:96:dc:17:3d:83:ae:7b:cb:d8:
64:f4:c5:6e:24:e3:40:e9:94:b7:b7:e4:e3:d4:45:
de:19:7a:dd:a0:f2:fd:f8:7c:72:ca:de:20:8c:80:
12:44:44:5d:ab:ed:30:47:44:04:0c:1b:c2:c2:02:
23:ce:bb:82:b6:78:ae:8d:39:e6:1b:9f:6b:a3:9b:
bb:ed:63:e3:dc:3f:8b:cb:fb:55:68:13:00:f5:d5:
c3:5c:f3:d0:2b:6c:79:51:42:b8:97:17:83:df:3b:
2a:cd:fc:38:61:83:9a:b8:f7:13:86:e6:a1:f5:11:
eb:7d:85:73:e6:3b:e4:42:e5:7f:23:be:5f:ab:03:
1f:e2:4b:86:33:fc:51:4f:dd:23:67:62:1f:3d:bd:
29:e1:c4:93:a3:d2:f0:41:e3:9f:87:ed:66:c9:d8:
a2:99:7e:aa:5b:59:fd:91:f7:2e:b8:41:37:d0:09:
0d:55:1a:7b:e8:ff:7f:d3:7c:f2:58:7f:b6:69:65:
25:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:16:70:78:DA:38:2A:18:23:17:25:6A:36:B0:68:17:2D:EB:A7:95
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/yhZweNo4KhgjFyVqNrBoFy3rp5U.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.92.0.0/16
Signature Algorithm: sha256WithRSAEncryption
10:ce:a1:0e:15:5b:de:d6:b4:87:52:0e:9d:f7:88:67:84:84:
99:a6:06:bb:64:c2:b6:83:69:b8:14:8c:87:63:ce:9d:bd:ba:
64:02:b1:9c:21:80:8b:d6:93:4f:65:e8:92:08:9e:a9:e0:61:
bb:81:ff:ba:66:4e:ae:54:95:da:6f:9a:f3:a1:c2:a3:11:82:
2c:3d:b5:40:9b:b1:03:0a:4b:cd:3f:db:e9:c9:22:51:f0:bc:
92:fe:77:e8:36:24:58:09:2c:a7:7e:d8:b0:9f:ae:b1:28:13:
08:f4:32:ec:0f:c0:7e:83:6f:32:b6:67:63:1e:b8:ca:44:b5:
d8:4b:62:3e:83:0a:02:65:0b:72:5e:32:02:d6:c8:05:9c:15:
0a:52:3f:04:90:0e:5c:49:d8:00:dd:6b:68:1d:58:2a:2c:a0:
64:94:e2:bd:10:8b:51:6e:0a:6d:9c:7b:19:3d:65:3f:14:1c:
cc:ba:f3:4c:60:bc:75:21:ab:24:8f:36:ef:44:d4:f5:00:d5:
0f:a0:aa:5b:4e:df:ff:b5:b7:33:44:68:10:ba:d4:31:19:9a:
6b:bf:14:4c:3e:4d:0f:19:6a:0f:f1:9e:e3:33:4e:48:d8:4c:
d1:8b:9b:9c:1f:f1:8f:6c:f4:f0:f9:b2:3b:4c:d1:33:da:ef:
88:d2:c8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:42 2025 by rpki-client