Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/sNgHZ3M0BvSOQg77BuCxpnv5Qa4.roa
File: sNgHZ3M0BvSOQg77BuCxpnv5Qa4.roa (raw, json)
Hash identifier: k+RsemLKymCwofhpR+XHPUn5bUGfTYzvVcbFANDFfYQ=
Subject key identifier: B0:D8:07:67:73:34:06:F4:8E:42:0E:FB:06:E0:B1:A6:7B:F9:41:AE
Certificate issuer: /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial: 59
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/sNgHZ3M0BvSOQg77BuCxpnv5Qa4.roa
Signing time: Mon 08 Jul 2024 15:28:28 +0000
ROA not before: Mon 08 Jul 2024 15:28:28 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 17476
IP address blocks: 153.254.87.136/29 maxlen: 29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 89 (0x59)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Validity
Not Before: Jul 8 15:28:28 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=B0D80767733406F48E420EFB06E0B1A67BF941AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:b2:37:87:6f:c4:f8:f3:66:4f:b4:db:e7:6b:
2c:5b:9a:7f:f4:d4:7b:90:d7:03:ae:70:2b:a7:8e:
2f:e6:d8:e1:cb:16:bb:3f:17:76:16:4f:02:56:df:
e4:84:34:f9:cf:d7:6c:27:a8:a4:02:d1:79:4c:d9:
1e:bb:32:22:49:c5:17:7b:8f:82:aa:b3:36:ca:0f:
dc:c7:39:14:58:f8:89:c7:c8:bb:e2:a0:8e:80:12:
35:97:b1:56:96:52:38:59:bc:7d:00:48:ef:a7:a9:
34:22:3b:24:6d:4b:c1:6a:7d:f9:9f:4e:52:c7:07:
6c:64:e0:e9:86:d2:69:2e:08:ff:da:e3:a8:66:04:
93:66:bc:95:f2:4d:72:6d:7c:34:dd:0c:2b:03:00:
91:f9:1e:39:fc:da:4c:b3:33:a7:43:e5:4b:72:11:
d8:b2:f2:df:b4:dd:82:e6:36:be:73:22:0b:35:b2:
bd:e3:74:f8:cc:56:8c:5e:ca:8f:85:de:0d:da:f8:
21:48:1e:48:aa:c6:47:e0:82:69:43:c7:8d:ac:74:
3f:d7:14:fd:ee:64:7a:e9:f4:af:a4:cc:6b:81:6d:
7f:49:24:67:bf:03:8d:cd:4c:c0:b9:38:b6:51:12:
9c:62:7b:1f:de:c6:2c:1c:67:80:ce:2e:5c:9e:41:
e5:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:D8:07:67:73:34:06:F4:8E:42:0E:FB:06:E0:B1:A6:7B:F9:41:AE
X509v3 Authority Key Identifier:
keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/sNgHZ3M0BvSOQg77BuCxpnv5Qa4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.254.87.136/29
Signature Algorithm: sha256WithRSAEncryption
6b:77:72:5c:cc:fd:36:b6:aa:8a:af:50:06:a0:cf:54:c6:b5:
bc:f1:f8:c7:99:6b:5e:6a:cf:09:b3:15:c6:64:f2:ef:3d:fa:
1a:69:04:7f:44:4b:f5:bf:a1:f3:5e:d1:30:7c:e8:ac:ec:30:
09:b0:87:8c:54:fb:fe:3c:6d:04:53:54:85:c8:6a:c9:4a:d8:
c9:96:7f:36:bd:31:1f:03:02:e1:b3:b6:5a:38:13:81:f2:51:
2a:8b:d1:78:aa:b6:56:3a:34:49:a9:e2:83:59:95:ee:23:e8:
10:c9:01:73:4a:0a:9f:4c:71:df:2e:1c:ff:43:9c:04:42:79:
c6:4c:b9:67:cf:fa:d2:ae:a7:71:56:5c:99:52:3b:d4:88:c2:
c2:91:bd:d6:0d:23:2c:83:48:08:77:7b:52:9d:bb:2e:37:06:
46:b5:7d:b0:fe:f6:56:1e:35:5c:3e:ac:6e:33:b0:89:7c:fd:
57:b6:ba:c3:ed:92:c0:dd:1d:ba:27:fe:89:50:80:d8:af:5c:
7b:89:68:f3:b3:19:95:82:76:db:f1:72:32:48:15:10:6d:d4:
e4:f7:d1:7a:9e:c3:d7:47:6d:42:1c:ba:88:1f:c3:e6:69:28:
f8:99:ec:06:76:dc:02:ae:cb:6e:b2:98:20:d2:16:7b:fc:86:
00:4b:96:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:26 2025 by rpki-client