Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/XsaddBX79Gum8_DMIurxnVwhJjU.roa
File: XsaddBX79Gum8_DMIurxnVwhJjU.roa (raw, json)
Hash identifier: FJUPvBUhHrLRcyvBpetQiVA/kJnn0/fTvXE7ISjev7w=
Subject key identifier: 5E:C6:9D:74:15:FB:F4:6B:A6:F3:F0:CC:22:EA:F1:9D:5C:21:26:35
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 8A
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/XsaddBX79Gum8_DMIurxnVwhJjU.roa
Signing time: Tue 03 Dec 2024 17:40:21 +0000
ROA not before: Tue 03 Dec 2024 17:40:21 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 3949
IP address blocks: 61.120.149.96/27 maxlen: 27
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 138 (0x8a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 3 17:40:21 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=5EC69D7415FBF46BA6F3F0CC22EAF19D5C212635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f2:91:6c:81:28:15:96:56:a6:3f:eb:94:25:
53:b2:5c:95:90:47:ce:d6:7e:4f:e9:8e:3a:39:69:
08:eb:80:42:5f:cf:03:5e:23:60:a8:b4:e7:40:0f:
d3:08:2e:b6:80:6d:ca:cc:f8:8f:a7:39:ac:63:34:
ff:88:2e:e2:84:e6:f0:ce:34:da:6e:d2:79:d3:ed:
09:f6:f9:8d:23:f4:92:93:bc:3f:3e:2f:ce:af:17:
86:ad:86:ec:d4:1f:4a:1f:58:ff:0b:aa:8b:4c:13:
93:3f:72:74:21:85:f3:08:12:66:dc:94:04:c9:fe:
f4:80:bf:d0:c2:ac:19:9f:a3:15:5c:f0:7e:65:26:
10:e5:8f:2a:20:f1:78:32:f2:ae:48:e6:5f:66:6e:
ec:25:c2:79:3a:3f:6f:09:9f:c7:2d:c7:d6:af:cb:
d9:01:18:18:2e:7d:cc:32:59:54:5c:cf:d9:89:a0:
d4:c4:0e:06:dd:c0:23:2d:85:4b:32:71:58:67:46:
3e:b0:01:6d:c3:be:c7:c7:28:1f:91:1a:f5:47:e8:
9a:14:c5:44:5f:b8:f4:3a:15:3d:75:02:32:30:2c:
8f:a8:58:cb:66:b5:41:63:e4:51:62:d0:2d:d3:12:
63:13:ee:3d:23:6b:b9:4d:22:30:64:88:7f:b4:fa:
04:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:C6:9D:74:15:FB:F4:6B:A6:F3:F0:CC:22:EA:F1:9D:5C:21:26:35
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/XsaddBX79Gum8_DMIurxnVwhJjU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.120.149.96/27
Signature Algorithm: sha256WithRSAEncryption
00:70:37:2f:35:79:32:6b:6b:b3:56:25:f5:e1:ff:cb:01:e0:
a5:78:ab:e1:9b:b5:e8:08:4f:68:ef:e5:09:2c:04:30:51:0c:
a2:3a:1d:d1:6b:f1:d7:75:6d:c9:1b:04:4b:c1:f7:16:05:e4:
cc:c9:50:ea:54:40:be:b3:51:14:05:f9:61:47:b9:20:0d:1a:
7a:2a:bd:f1:8f:b5:3a:d7:4f:6e:c4:ca:49:0a:0d:77:56:90:
19:a2:ab:fa:26:21:c1:15:ec:93:52:21:65:49:3c:fe:71:f5:
6e:f4:35:f5:68:52:54:42:6c:69:64:42:13:c6:8e:6f:a1:f2:
c3:85:e6:25:07:01:94:07:f5:4c:9b:d7:ca:20:b3:3f:c1:4c:
62:40:06:71:4e:64:08:82:f4:41:03:76:68:93:ee:06:7d:97:
20:c5:6e:87:89:bb:de:36:46:97:97:62:8f:e6:c9:98:aa:7a:
76:cc:19:87:0c:2a:b7:07:5c:0e:db:7b:03:ac:a5:1b:d4:45:
06:a1:84:d4:0c:71:91:66:45:1c:5d:04:d8:97:f5:cc:0f:82:
bf:2b:4d:ec:1d:4d:cd:69:a7:dc:19:be:ec:a6:46:68:03:b3:
51:c9:71:56:cf:29:1b:c7:06:a2:74:a5:91:94:1e:ac:34:90:
d9:8a:d2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:50 2025 by rpki-client