Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FKbMRfq9ekHWetpY7Xbc97jTF6k.roa
File: FKbMRfq9ekHWetpY7Xbc97jTF6k.roa (raw, json)
Hash identifier: bnFp+kDBtDLasvirQeNv5zKLH6/Kq9bEzBLXqXzvgpI=
Subject key identifier: 14:A6:CC:45:FA:BD:7A:41:D6:7A:DA:58:ED:76:DC:F7:B8:D3:17:A9
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 85
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FKbMRfq9ekHWetpY7Xbc97jTF6k.roa
Signing time: Tue 03 Dec 2024 17:28:20 +0000
ROA not before: Tue 03 Dec 2024 17:28:20 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 2914
IP address blocks: 120.29.144.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 133 (0x85)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 3 17:28:20 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=14A6CC45FABD7A41D67ADA58ED76DCF7B8D317A9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:07:0c:58:4a:46:74:39:f0:8d:f7:be:a0:4f:
e8:22:17:2a:44:51:67:32:bc:54:7c:10:2d:3b:71:
ed:f7:0a:0e:ac:33:05:4b:fa:79:b1:98:eb:c2:c0:
a8:c2:db:65:c7:28:19:91:be:60:3f:58:60:45:3e:
5d:d9:10:8d:12:ad:4b:4d:59:0e:3d:21:4f:ee:6b:
29:42:0a:3f:bc:6e:c7:49:be:44:45:58:6b:7c:8b:
ca:8e:3d:a5:6e:aa:a1:52:be:d4:63:9e:a7:a4:77:
19:0e:0e:f6:9b:3d:3f:3d:52:c3:cd:2f:74:1e:06:
1c:d3:0d:54:cd:ca:5c:a3:0c:98:26:63:cd:d5:09:
64:f3:2b:fd:8b:f6:a1:85:40:f1:2f:49:aa:69:a4:
c3:00:57:bb:aa:55:9b:9b:0a:19:88:b1:9e:e7:f2:
b4:cd:74:f9:ad:f2:93:d6:e6:75:c0:33:2e:f5:c2:
fc:9a:8b:a6:e2:18:ff:09:d4:e9:16:b5:de:0d:45:
0c:f1:82:24:9b:0a:9e:4b:fb:7a:77:dc:18:01:7d:
9f:58:4c:f5:25:83:bf:ca:22:72:7f:11:8e:fd:32:
77:f8:cc:b2:fe:51:24:68:91:1f:5a:10:f7:7c:f9:
70:aa:97:36:6c:25:96:f9:2b:bd:ae:8c:fa:30:22:
32:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:A6:CC:45:FA:BD:7A:41:D6:7A:DA:58:ED:76:DC:F7:B8:D3:17:A9
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FKbMRfq9ekHWetpY7Xbc97jTF6k.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
120.29.144.0/21
Signature Algorithm: sha256WithRSAEncryption
6f:86:2b:f0:9f:d9:86:44:28:63:f3:31:b3:03:84:a9:35:ff:
6c:60:1b:b6:8c:ba:cc:5a:e7:6a:5f:25:90:1c:d1:43:cc:e8:
da:0a:ae:12:5f:90:25:ca:10:8f:10:91:e5:a6:02:d7:ef:03:
f2:70:47:e7:6c:f2:2e:30:37:fc:cc:8d:5a:f1:f3:4a:c0:58:
78:6b:3f:0f:78:5a:00:92:6c:ff:25:a3:77:67:34:4e:e9:71:
99:cb:4a:38:09:74:af:99:00:6a:f7:59:43:2b:63:71:23:22:
8c:7f:85:97:98:7e:dd:5c:f0:77:3f:98:c4:05:d3:11:ee:60:
1d:6e:af:29:fa:09:0d:d4:d8:2c:f7:b3:19:97:88:36:4d:91:
f0:bc:85:f1:48:74:e3:97:09:64:fb:7a:89:1a:19:a3:6d:92:
95:3a:f4:8e:37:4c:a5:e4:f7:b2:ce:08:10:3e:15:fe:c4:f4:
ee:99:6d:e4:9a:a9:f7:0c:9d:2c:be:c7:18:e0:69:42:6b:05:
8a:45:72:3a:3b:ad:83:ed:ce:82:9d:c1:9c:36:a9:a8:af:54:
76:3a:d1:24:fd:d9:9b:98:e4:36:fb:b4:e5:7b:1f:87:aa:b9:
f3:11:62:43:f2:2b:0a:84:3a:4a:f2:9c:0a:43:f7:95:60:68:
68:b8:d7:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:52 2025 by rpki-client