Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/a-nlNUxOwe_patYHiFmYvsodsQM.roa
File: a-nlNUxOwe_patYHiFmYvsodsQM.roa (raw, json)
Hash identifier: 28hPwQix6eCld6NOAwbMe50lRtlAqy9HVmTSv0nztQ4=
Subject key identifier: 6B:E9:E5:35:4C:4E:C1:EF:E9:6A:D6:07:88:59:98:BE:CA:1D:B1:03
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: AC
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/a-nlNUxOwe_patYHiFmYvsodsQM.roa
Signing time: Wed 04 Dec 2024 19:35:00 +0000
ROA not before: Wed 04 Dec 2024 19:35:00 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 3949
IP address blocks: 61.213.172.120/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 172 (0xac)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Dec 4 19:35:00 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=6BE9E5354C4EC1EFE96AD607885998BECA1DB103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:cc:96:01:d8:69:47:6a:83:21:6a:0a:2e:73:
e8:2f:24:77:be:e7:00:b2:be:13:34:07:7c:05:4f:
fd:31:b0:b6:c4:44:19:79:e3:33:1e:cb:0a:d8:3e:
7e:71:6c:43:a2:67:53:30:f2:9b:0d:ed:ca:a6:63:
f2:05:e8:e1:8f:fe:46:0b:b5:6c:e3:a7:4f:8b:a1:
4a:5c:dc:bb:40:81:c0:2e:49:3f:91:88:64:4c:1a:
32:ec:9c:4a:b4:c2:6b:3c:4b:30:65:49:09:f5:51:
a8:8f:e4:d9:60:24:4d:fe:64:0f:dc:4a:b5:5a:39:
b2:56:7d:2a:19:f4:55:1b:36:01:69:a6:5a:ff:23:
b5:ae:2f:d2:e4:8d:96:80:41:63:cf:02:45:5a:2d:
40:cb:bb:1d:d0:c2:ac:8e:08:45:fc:47:e9:15:36:
f6:5c:8c:a7:f7:fb:25:72:b8:7a:1c:5d:57:c1:0c:
60:3e:56:a3:df:18:13:9a:11:4c:25:8a:72:4d:3e:
05:a2:ae:83:18:40:2c:40:6d:a4:63:33:d2:f8:26:
f3:bc:6e:9c:93:d5:81:de:8b:43:a9:32:ca:a4:e8:
ad:04:fb:45:c4:07:82:bd:d6:cf:63:44:e8:c1:06:
64:b0:3a:cd:43:86:fd:8f:4d:43:3f:bf:b9:40:ff:
25:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:E9:E5:35:4C:4E:C1:EF:E9:6A:D6:07:88:59:98:BE:CA:1D:B1:03
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/a-nlNUxOwe_patYHiFmYvsodsQM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.213.172.120/29
Signature Algorithm: sha256WithRSAEncryption
06:8a:a5:82:a5:8b:d8:f7:b7:d1:ee:9c:90:c6:18:21:2a:1c:
d6:39:43:03:ca:04:70:3a:f4:80:57:66:31:e3:3b:91:46:95:
58:f0:7b:42:57:31:d5:a3:ef:24:5c:1e:3d:5f:a7:cf:db:f9:
49:e8:03:86:04:f2:6c:ba:67:cb:4d:67:c2:fe:62:ac:84:ec:
80:c0:8c:8e:2a:4a:fa:59:67:9b:e0:20:90:49:d9:d3:48:a8:
c3:4e:1b:fe:54:e7:5f:40:55:f1:87:84:eb:31:ef:a5:1f:ea:
8f:64:0a:41:2e:b8:12:12:5b:02:c4:a5:ae:54:e0:bf:74:ce:
fc:74:5e:89:3b:37:a5:41:48:e6:c4:07:ef:d5:cd:a9:27:c3:
0c:82:e6:f6:62:6e:fb:be:07:49:be:b4:2b:f0:07:b6:6e:e8:
e8:29:c5:5f:2b:17:bf:5d:78:6f:c2:6d:a6:97:4e:10:6b:db:
2d:b6:ab:c2:d9:22:84:d6:df:8b:9c:d3:c0:4f:72:4d:99:cc:
9f:fa:26:7a:5f:41:1c:89:f6:f4:c8:aa:c8:93:b5:77:10:84:
43:78:c3:6d:4b:7f:29:fb:5d:ee:a7:83:ef:23:97:6d:d8:da:
d1:95:e9:a7:b4:8c:56:e4:c9:c3:3e:42:5b:fd:80:75:05:d5:
b3:17:00:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:25:22 2025 by rpki-client