Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/za17y5Oi59LPUcqg2FkydutGaww.roa
File: za17y5Oi59LPUcqg2FkydutGaww.roa (raw, json)
Hash identifier: 0KSZQhm8squniqnAdjdPqwKCGNGPvI/En1sTUSNA3A8=
Subject key identifier: CD:AD:7B:CB:93:A2:E7:D2:CF:51:CA:A0:D8:59:32:76:EB:46:6B:0C
Certificate issuer: /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial: 0129
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/za17y5Oi59LPUcqg2FkydutGaww.roa
Signing time: Wed 15 Feb 2023 02:18:21 +0000
ROA not before: Wed 15 Feb 2023 02:18:21 +0000
ROA not after: Thu 15 Feb 2024 01:30:03 +0000
asID: 146979
IP address blocks: 202.236.90.3/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 297 (0x129)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Validity
Not Before: Feb 15 02:18:21 2023 GMT
Not After : Feb 15 01:30:03 2024 GMT
Subject: CN=CDAD7BCB93A2E7D2CF51CAA0D8593276EB466B0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:59:da:a8:23:cd:4d:1b:e6:cb:f3:78:d3:8a:
49:f5:f0:36:3b:01:1e:f7:7c:df:ac:99:a9:de:66:
e6:4b:d7:f6:e5:55:7d:7b:f6:5b:e2:48:61:78:1a:
90:18:ff:08:01:2d:0a:4a:11:9a:82:6c:99:90:ff:
cf:b9:5b:cc:7f:23:97:10:9c:68:10:19:62:84:d5:
15:d8:96:69:e7:b1:75:f8:70:cc:54:d1:d6:7b:92:
04:55:21:98:b6:1b:bc:f3:2d:71:51:b7:ec:e9:4e:
76:8b:62:f2:6c:5e:63:42:f8:bd:1d:ad:66:06:e9:
ef:3d:f5:61:2c:5a:bc:d9:05:c4:1b:65:22:7b:c8:
be:e3:f7:ab:2d:a3:8e:01:02:b7:1d:c6:51:79:eb:
c6:37:56:df:7e:ce:23:f6:68:3b:0d:5e:29:81:c7:
fd:fb:89:6e:e2:83:16:2d:5c:d4:84:f9:90:1b:46:
77:bf:b5:46:27:e6:0e:5b:1e:b9:c1:eb:f5:cf:a8:
a6:62:f4:71:35:cf:ee:1b:1e:1e:7a:68:d0:ac:86:
1d:01:45:51:e2:9a:81:70:19:a4:a6:35:2a:08:7f:
a1:b6:7f:bb:e7:e7:98:64:3b:49:26:08:e5:6d:c4:
7b:e9:81:15:dc:a3:48:43:fe:02:0c:a1:5a:f6:20:
76:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AD:7B:CB:93:A2:E7:D2:CF:51:CA:A0:D8:59:32:76:EB:46:6B:0C
X509v3 Authority Key Identifier:
keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/za17y5Oi59LPUcqg2FkydutGaww.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.236.90.3/32
Signature Algorithm: sha256WithRSAEncryption
61:a5:f8:2e:d7:bf:a8:94:55:69:f5:a8:c8:06:96:84:fb:99:
2a:2c:0d:4b:a9:0f:3b:4d:0c:ef:2d:19:f4:8d:a1:5a:b5:34:
ca:9f:b6:91:0f:d6:e6:88:71:88:2b:2a:c7:5f:51:67:8c:c0:
0b:c0:dd:a2:a6:04:c3:7c:dd:95:50:cd:cc:bc:a5:c5:f8:7c:
51:1c:1d:1e:39:be:7d:bd:b0:d0:5a:ba:5e:30:29:77:3b:43:
87:eb:57:8a:9f:32:a6:dd:37:00:39:9f:22:f7:36:05:f7:f6:
b5:5c:37:0a:5f:7f:c8:1d:46:34:a9:7e:a0:78:a3:1b:56:07:
0e:93:66:7f:79:e1:56:a0:39:61:ec:fe:26:39:17:85:b7:90:
cc:6d:d8:b3:71:1f:27:7f:70:f8:49:6e:99:bd:1f:7b:c0:88:
5e:5b:4e:e8:82:e0:c7:96:cb:67:96:6f:dd:2e:17:b9:c4:4e:
52:1f:54:08:76:91:f7:4e:d8:90:3e:f5:bf:81:90:80:ed:e2:
ce:33:6d:81:97:b6:1e:ec:ce:91:c9:60:e8:dc:cc:a5:e8:de:
2f:f5:5b:08:20:e6:13:8e:bc:58:b7:bf:15:c5:24:16:8e:2f:
8b:0f:ac:12:ab:13:aa:62:8d:db:97:af:e0:a4:6b:eb:be:96:
6c:40:72:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:40 2025 by rpki-client