Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZGr_Gjpa630F9t-PmxrB_LdoTjY.roa
File: ZGr_Gjpa630F9t-PmxrB_LdoTjY.roa (raw, json)
Hash identifier: j1NFEjPkEQW7uTa0BV1Vb9nLjda2uExr7571s+7gN18=
Subject key identifier: 64:6A:FF:1A:3A:5A:EB:7D:05:F6:DF:8F:9B:1A:C1:FC:B7:68:4E:36
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 81
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZGr_Gjpa630F9t-PmxrB_LdoTjY.roa
Signing time: Tue 03 Dec 2024 17:20:26 +0000
ROA not before: Tue 03 Dec 2024 17:20:26 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 394265
IP address blocks: 117.104.145.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 129 (0x81)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 3 17:20:26 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=646AFF1A3A5AEB7D05F6DF8F9B1AC1FCB7684E36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:04:2c:28:82:10:7b:7c:03:d4:c2:04:a5:23:
a8:f0:b1:a9:d1:90:c7:ca:5e:16:25:19:10:7a:1a:
e1:e1:7d:8d:68:a9:21:a8:d9:35:ee:dd:e9:6c:f9:
62:54:ea:24:35:58:13:a2:9e:6a:9f:f0:07:1b:53:
ae:60:39:ed:b1:49:b1:5e:b7:a3:cd:90:c5:f6:6e:
e9:bc:91:fc:25:32:99:f6:ac:c3:31:51:c6:7d:ab:
dc:17:e0:52:21:70:d2:56:68:dd:0c:87:c1:1d:52:
18:b5:15:24:5b:a3:ea:66:a6:da:6b:63:bf:16:87:
ed:b2:48:78:a9:90:1d:b0:a6:5d:0b:e6:bc:90:5b:
43:01:40:49:97:17:9c:aa:6e:00:50:b7:e3:d0:b6:
e8:4e:09:1a:6e:97:e3:98:d1:ad:35:33:8b:32:1f:
e7:85:fa:ff:b7:f3:f0:46:95:ad:00:47:51:2f:52:
4e:dd:29:36:0e:0a:4b:1c:5c:33:ee:40:a6:c6:4d:
b5:0d:f7:29:b2:c4:35:af:67:4f:48:a0:51:6b:d9:
10:71:67:c2:df:84:be:ce:34:b4:13:a1:21:c1:ef:
96:11:bc:6f:91:6b:a2:70:2a:21:0e:41:63:46:29:
f6:dc:0a:f9:ea:c8:dd:54:2e:81:24:3b:dc:30:1b:
6b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:6A:FF:1A:3A:5A:EB:7D:05:F6:DF:8F:9B:1A:C1:FC:B7:68:4E:36
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ZGr_Gjpa630F9t-PmxrB_LdoTjY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.104.145.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:50:21:2a:b2:0c:4f:8f:75:a9:c1:3d:d7:51:10:5f:8a:8a:
0d:81:a5:d7:39:e7:14:11:44:96:5c:24:02:dc:6c:62:47:67:
0c:87:93:53:e2:18:c5:e1:d5:1b:27:03:68:30:9b:49:4e:b2:
f8:fa:a1:6f:9e:58:3b:94:e2:79:96:d6:20:ea:d2:68:dc:0b:
fd:d7:3a:35:ea:24:76:d5:5f:67:53:9a:0a:18:4f:4b:06:25:
00:a8:a6:41:2e:51:7e:32:e5:d0:34:32:d3:f9:cd:60:ac:b5:
e6:ab:9c:72:9e:8b:c1:4d:44:80:d8:65:63:48:eb:9c:b3:51:
7e:bf:41:fd:ae:b6:8e:27:d0:be:60:ca:c4:5c:c6:09:a8:f4:
16:bd:df:ba:5a:5e:a7:a8:dc:00:5a:c2:b4:27:3b:00:d1:a5:
a2:fb:9a:3a:b3:be:07:3b:13:9b:91:32:e4:85:ff:d3:52:7f:
49:7c:3e:4b:04:fc:a9:05:36:92:6f:c2:aa:ba:e6:72:9f:3b:
cc:e7:98:00:e4:f4:e5:5a:f6:79:c4:23:6a:07:0f:3f:cc:5f:
6c:4c:3c:72:0c:cb:42:dc:6a:d5:b3:cf:29:6d:f2:e1:12:84:
fd:7f:f0:af:f7:8d:92:10:76:17:d7:a2:62:ef:15:3e:4a:fc:
87:4b:72:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:24 2025 by rpki-client