Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/1b8JmJaTMV6eFlLwZBzqQfq7QO8.roa
File: 1b8JmJaTMV6eFlLwZBzqQfq7QO8.roa (raw, json)
Hash identifier: CT3mPA1ECNg38774oDn42eBaPCbv1fwwsaGpyNmnI0A=
Subject key identifier: D5:BF:09:98:96:93:31:5E:9E:16:52:F0:64:1C:EA:41:FA:BB:40:EF
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 9E
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/1b8JmJaTMV6eFlLwZBzqQfq7QO8.roa
Signing time: Wed 04 Dec 2024 19:23:02 +0000
ROA not before: Wed 04 Dec 2024 19:23:02 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 3949
IP address blocks: 61.213.153.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 158 (0x9e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 4 19:23:02 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=D5BF09989693315E9E1652F0641CEA41FABB40EF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:20:f4:f0:6d:b5:ca:a6:e3:cc:01:8b:4d:62:
0a:5b:f9:29:3c:55:56:24:a2:16:7a:a5:3b:75:5e:
bf:ef:a7:eb:b4:d7:d1:88:56:ff:29:03:d2:a0:45:
ee:87:cc:ed:95:e8:6b:d3:c4:9f:db:43:b9:c5:54:
15:d2:17:5f:1c:74:71:16:35:99:84:e7:67:92:0e:
11:a7:15:d4:3d:dc:0c:34:3b:c1:97:a3:5d:53:ec:
c5:2b:05:45:ab:7c:d7:ae:59:b5:57:00:b0:d5:96:
40:8b:0d:76:b7:78:fd:90:61:55:47:51:52:24:c6:
97:a0:15:87:e1:d5:7d:d7:72:bc:bc:9a:d8:45:e5:
07:ca:c1:33:1f:3d:6b:5b:41:41:ec:4c:f9:58:61:
83:99:a8:f7:28:31:1d:94:26:2b:69:20:c2:e6:ff:
e7:4a:61:28:cf:05:e2:2a:89:1f:1e:ca:aa:12:bd:
bd:9f:91:2a:cc:a3:a1:c3:88:e8:0c:1c:3f:5c:34:
6b:a5:9e:cc:60:de:21:c7:6a:0d:0e:a4:24:3e:c3:
91:84:b9:c4:a3:4c:a8:d5:32:7f:4f:3f:6f:dd:c8:
ff:dd:60:34:8a:c1:95:89:99:19:d7:53:bf:31:c1:
67:ad:2e:69:7c:e4:14:33:96:4d:23:28:3d:ba:7b:
c8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:BF:09:98:96:93:31:5E:9E:16:52:F0:64:1C:EA:41:FA:BB:40:EF
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/1b8JmJaTMV6eFlLwZBzqQfq7QO8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.153.0/24
Signature Algorithm: sha256WithRSAEncryption
49:b7:be:ab:5c:75:5d:8a:43:85:87:0b:f6:75:f1:53:bc:be:
b0:0b:c7:f7:dd:ca:51:5f:67:36:0e:8a:b2:54:39:df:ab:79:
1e:d1:c5:96:76:4c:04:7b:6b:b2:13:df:f2:cb:b9:87:aa:12:
9a:4e:d4:64:ec:d0:92:82:a0:cb:c1:60:96:bf:8a:45:45:da:
1a:cd:f9:33:a2:59:8a:44:04:87:e2:eb:bb:e5:73:a5:84:2b:
dd:5d:c9:1d:cf:18:0b:d5:a6:11:6c:df:69:44:5f:32:22:45:
05:14:de:75:39:81:c4:40:b2:ab:2e:64:cd:c2:9a:26:c1:a3:
c9:89:d4:e9:b0:00:38:00:a0:e7:c8:cc:18:1f:5b:b7:66:d8:
de:37:c1:d8:ec:f6:38:97:5b:d3:9f:94:96:73:6d:3c:65:b9:
dc:2b:da:1d:6c:58:84:7e:c2:5e:9d:5d:46:dd:18:aa:8b:a8:
22:97:86:02:e4:85:73:99:d4:f3:02:fd:22:f9:d4:a8:30:ab:
57:0d:57:c6:3a:e7:e4:7b:59:8d:65:17:dc:9a:ab:dd:d2:4e:
65:38:2b:cc:7f:77:8c:8e:c3:e8:52:5b:92:27:0d:a3:58:53:
d9:db:82:d6:b1:22:e9:2f:05:eb:b2:cf:65:a8:b1:ad:a7:6e:
a3:d8:3c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:25:00 2025 by rpki-client