Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/RNz8NW8sTdkiGAuLRFysJ6umQJg.roa
File: RNz8NW8sTdkiGAuLRFysJ6umQJg.roa (raw, json)
Hash identifier: AxEVQ23T5MVPQzHAsGO81uoPNC3+q82s4tYHsXmGE/w=
Subject key identifier: 44:DC:FC:35:6F:2C:4D:D9:22:18:0B:8B:44:5C:AC:27:AB:A6:40:98
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: AA
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/RNz8NW8sTdkiGAuLRFysJ6umQJg.roa
Signing time: Wed 04 Dec 2024 19:34:59 +0000
ROA not before: Wed 04 Dec 2024 19:34:59 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 3949
IP address blocks: 61.213.172.112/30 maxlen: 30
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 170 (0xaa)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 4 19:34:59 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=44DCFC356F2C4DD922180B8B445CAC27ABA64098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5e:04:85:05:17:b8:a9:92:d3:b1:64:5b:c0:
9e:a0:5e:67:d6:53:5f:af:e2:14:a7:d2:d9:fe:43:
ac:49:f4:8b:41:86:68:6c:a3:38:e4:c2:25:c7:67:
6c:a2:3b:06:b4:22:87:6d:51:64:0d:9d:21:69:a5:
05:74:6b:a2:90:fb:5c:eb:83:4b:62:b1:77:45:03:
b3:44:82:8a:34:df:72:ab:2b:b9:10:94:a0:ed:b2:
8c:13:07:1c:64:11:95:e7:b8:29:38:f5:2b:55:e2:
83:5b:2f:ec:9e:32:d9:58:a7:21:a6:4c:d7:cc:98:
91:72:7b:cb:09:74:ff:33:91:67:0a:d7:5f:61:57:
48:c1:0d:ca:6b:d2:b1:40:31:f9:4b:64:b7:ff:2a:
d7:3f:83:ec:81:9a:10:0e:a2:a7:09:ac:3b:80:35:
88:7f:6c:d9:69:bb:90:9b:67:b1:8f:c7:b6:d8:86:
98:c3:82:62:af:ac:b2:ca:05:8a:6d:7c:66:74:e2:
04:a7:94:e1:56:0f:04:49:b9:d3:34:a6:08:97:6c:
56:99:33:0c:bf:e9:90:f9:04:9a:09:4d:bf:7e:94:
2a:c5:c3:e6:19:d4:1d:ce:6f:0d:a5:c9:63:75:7b:
6c:9f:b5:ca:ab:ca:61:7b:ba:50:02:d1:6b:34:72:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:DC:FC:35:6F:2C:4D:D9:22:18:0B:8B:44:5C:AC:27:AB:A6:40:98
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/RNz8NW8sTdkiGAuLRFysJ6umQJg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.172.112/30
Signature Algorithm: sha256WithRSAEncryption
63:4b:f1:84:9e:34:02:3d:ca:c6:31:ca:95:a8:81:40:3c:32:
7b:fe:fa:c3:be:2b:0f:1b:a1:bf:c8:56:8c:41:c6:09:63:44:
42:93:08:ec:a5:62:00:9e:4b:ab:bf:41:87:6d:4c:bf:db:d2:
9d:00:cd:a8:12:c7:39:75:d5:13:aa:5b:d8:64:04:cd:18:05:
c4:3b:8e:5d:50:17:5c:77:25:f7:82:54:0f:ac:3e:11:09:30:
ef:e6:66:30:be:a0:08:0f:2e:a4:48:a7:fc:3b:de:d6:71:9e:
c1:16:37:11:96:ec:4b:f6:ba:13:d9:ad:20:e3:50:76:ed:70:
af:50:c2:10:d7:42:47:ae:5d:21:5f:25:7b:c1:2e:63:52:d6:
60:dd:0b:48:a6:5a:b6:f7:8d:cb:6c:0f:2d:0b:a7:48:bb:a8:
16:94:3b:cb:a2:d7:b7:12:82:f2:60:cd:2e:1b:91:8c:be:11:
f7:05:00:b3:e2:74:1f:b3:eb:cb:97:cc:ad:69:47:ad:c2:cc:
2a:9f:70:57:ac:41:23:a6:3a:19:cb:df:d3:1b:e6:5d:98:fe:
60:5f:2b:90:e5:03:b3:79:0b:e0:e2:07:5f:14:31:a1:16:71:
a0:40:ad:41:b6:01:09:24:bb:24:39:98:d3:3c:68:6f:cb:c4:
62:f0:6b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:34:25 2025 by rpki-client