Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/zPokgHRmmakWhAVWHc9_b27tUQE.roa
File: zPokgHRmmakWhAVWHc9_b27tUQE.roa (raw, json)
Hash identifier: GU5N6KuGrXGvxwYE8Bxy3DdRP+JBtpsA/pUHyiI7BRE=
Subject key identifier: CC:FA:24:80:74:66:99:A9:16:84:05:56:1D:CF:7F:6F:6E:ED:51:01
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 04F8
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zPokgHRmmakWhAVWHc9_b27tUQE.roa
Signing time: Wed 18 Dec 2024 02:40:06 +0000
ROA not before: Wed 18 Dec 2024 02:40:06 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 210.235.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1272 (0x4f8)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:40:06 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=CCFA2480746699A9168405561DCF7F6F6EED5101
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f4:60:20:6b:2d:0e:c0:00:f4:89:02:e8:f6:
3b:3e:29:4f:3c:f9:68:c2:e6:15:62:ed:e9:cd:16:
3d:72:44:6b:eb:4a:c0:4f:c8:4a:f2:80:74:4a:6a:
1f:6c:ee:10:04:38:5e:69:75:39:da:3c:e8:e2:7e:
dc:01:97:d0:03:a0:ce:cd:0e:a9:66:8d:32:38:19:
b4:24:92:52:a1:85:9b:0a:a2:25:19:cc:4e:1c:04:
b4:6d:95:33:cc:d7:c7:54:27:44:a3:c7:00:65:96:
55:f4:79:a1:e5:d7:2a:73:1d:bd:80:6c:4b:45:5a:
9d:21:85:91:4e:73:ee:91:09:8d:0e:67:50:dc:b8:
5a:90:c8:63:b7:ea:a6:b4:a9:1d:be:68:77:21:de:
f3:f9:0a:de:f5:12:5c:d7:7c:4b:f8:d5:9d:cd:75:
f8:23:ad:e4:3c:67:b2:b5:32:13:41:9c:4e:52:64:
aa:a7:2e:f9:62:dc:33:df:6f:cc:e5:33:b5:86:f3:
c0:89:9a:8c:5e:8f:da:05:12:f2:48:a9:9e:91:0c:
76:0e:d7:88:eb:77:8c:89:78:eb:40:61:43:5c:ea:
bf:f3:f0:81:25:b1:11:78:da:2a:1b:f6:03:1c:e4:
b7:76:23:f5:04:05:18:c1:18:e9:19:44:81:6f:6e:
4a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:FA:24:80:74:66:99:A9:16:84:05:56:1D:CF:7F:6F:6E:ED:51:01
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zPokgHRmmakWhAVWHc9_b27tUQE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.235.152.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:db:f4:de:99:20:ad:22:45:6e:f6:2c:f5:71:2e:0c:ce:07:
fb:91:77:1c:a2:14:79:3c:48:c0:4e:48:47:2d:68:10:71:cf:
ed:db:95:07:5c:b8:a9:c7:11:63:70:aa:3f:24:97:9f:eb:0f:
43:da:c7:b6:d4:16:29:06:ea:8b:97:3f:1a:26:c0:39:21:88:
a4:84:24:64:2c:2a:c8:f6:80:52:a8:47:47:e2:6b:cf:d1:21:
c9:ac:e2:e8:5a:f8:7d:44:f5:b9:00:98:f3:41:67:be:3c:1c:
bc:d0:d1:99:10:20:88:cf:9b:89:39:da:7c:bd:cb:b4:e1:20:
da:b7:2e:e3:29:2d:36:0a:3e:95:5f:5b:34:25:de:59:0b:ba:
44:f7:c1:b3:c5:62:90:3a:d8:58:a9:81:31:00:de:f9:15:f3:
13:40:93:c3:cd:f8:65:2b:d3:c7:5c:45:8a:84:43:43:0c:91:
cc:30:76:6d:cb:77:a1:07:a5:55:0b:f9:29:8c:07:f6:6f:e2:
dc:5d:5e:7d:30:bf:f1:28:2e:68:3b:3d:8e:d0:a9:2b:ab:1a:
72:6f:2a:a6:8d:22:db:e0:20:9a:08:78:5e:87:d5:b1:3f:ae:
96:d4:8c:da:60:6e:dc:36:46:be:09:f4:a4:70:bd:2c:22:e7:
25:93:f3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:16 2025 by rpki-client