Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/161/zfl_IAbnh5QdYG2Lv0UBzOroVic.roa
File: zfl_IAbnh5QdYG2Lv0UBzOroVic.roa (raw, json)
Hash identifier: hpTG2j0LsV0vHCPBI9Nkbl2MfqV3l2vaafGiAW73U5o=
Subject key identifier: CD:F9:7F:20:06:E7:87:94:1D:60:6D:8B:BF:45:01:CC:EA:E8:56:27
Certificate issuer: /CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Certificate serial: 0418
Authority key identifier: 15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zfl_IAbnh5QdYG2Lv0UBzOroVic.roa
Signing time: Wed 18 Dec 2024 02:18:58 +0000
ROA not before: Wed 18 Dec 2024 02:18:58 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 2516
IP address blocks: 125.29.64.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1048 (0x418)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15BFA3E53E59149239A168DFD92C75745AB66CB6
Validity
Not Before: Dec 18 02:18:58 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=CDF97F2006E787941D606D8BBF4501CCEAE85627
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:96:b6:db:32:ac:ec:08:8c:f0:79:af:10:5e:
cd:87:08:60:80:ea:f9:04:3e:5a:25:53:de:d9:ed:
a4:e7:3c:33:84:59:6a:99:4d:dd:61:33:90:e2:8d:
f3:0a:e4:dc:9a:bf:a5:df:56:ef:44:ee:60:74:7f:
41:aa:6b:ce:11:9d:3c:6b:48:d8:34:8b:8b:6c:3b:
76:42:ae:23:3e:a2:a6:f1:97:bf:e2:d9:4e:f7:7b:
c7:ef:cf:4a:da:38:c6:71:de:89:31:55:02:1d:25:
1a:cc:04:1b:bc:ce:c1:7d:4e:15:bb:b5:01:b5:93:
72:14:b7:23:aa:66:71:dc:bc:da:be:6c:9c:cc:6c:
fb:05:4d:ac:66:89:c8:07:01:19:a7:d6:b9:30:66:
97:3a:89:1a:59:2d:fd:fa:58:13:bb:3e:86:32:8c:
65:95:3d:37:d4:62:5b:2e:b8:e7:5e:cd:34:96:50:
a2:10:55:64:8c:1c:98:93:db:d3:5b:1b:cb:0b:a7:
f8:7e:e0:7f:07:87:8d:e0:58:82:18:ab:2f:53:3d:
8f:ea:2e:29:5f:2a:50:e6:ca:43:56:02:80:19:1f:
b3:d7:c9:1c:60:fb:89:f7:45:15:e9:30:dc:96:ec:
6c:71:e3:95:5f:a8:9c:35:6a:7a:4b:7e:4b:53:60:
47:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:F9:7F:20:06:E7:87:94:1D:60:6D:8B:BF:45:01:CC:EA:E8:56:27
X509v3 Authority Key Identifier:
keyid:15:BF:A3:E5:3E:59:14:92:39:A1:68:DF:D9:2C:75:74:5A:B6:6C:B6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fb-j5T5ZFJI5oWjf2Sx1dFq2bLY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/161/zfl_IAbnh5QdYG2Lv0UBzOroVic.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
125.29.64.0/18
Signature Algorithm: sha256WithRSAEncryption
66:97:62:7a:e0:6c:ba:19:a7:d7:a0:a8:87:bc:42:18:07:e9:
fc:dc:da:65:78:19:1d:cc:33:9d:a1:f4:5f:4c:07:e3:ce:0f:
10:af:44:3a:17:b8:34:13:d0:0a:18:16:62:15:16:89:73:76:
b8:9f:10:1a:88:aa:27:f5:4d:50:42:06:22:b2:ea:00:70:5c:
77:0d:27:0b:e0:eb:b1:13:da:d4:d2:16:86:b2:e8:f4:d1:91:
81:ce:2f:43:2f:4f:ee:4d:cb:44:78:b9:c1:f8:54:8f:c9:84:
47:5a:f5:97:80:e1:43:df:43:7e:70:5b:2d:78:a2:c1:6f:67:
03:07:9b:8f:4e:74:01:39:4d:a1:0a:e8:53:a6:dc:ad:f0:39:
c0:56:bc:86:e6:a4:5d:c5:98:b7:0a:2b:a2:8d:bd:23:96:c7:
1d:28:51:c8:76:47:4b:8e:f6:55:38:62:cc:5c:10:cd:40:d1:
93:4d:87:6a:a4:94:70:6a:22:d6:fc:db:74:bc:e6:6b:56:59:
de:e8:2f:9e:1e:2c:5e:72:de:5b:f4:55:56:04:92:d0:8b:e9:
06:ca:31:30:4b:27:8e:84:63:c1:0f:e6:0a:0c:a8:b7:2d:31:
74:2c:6b:36:36:ec:6d:61:02:b5:a9:2d:02:d4:67:e0:46:19:
4b:6c:a3:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:12 2025 by rpki-client