Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/_DM02CLaNNG-Sdqjt-alNt2tnPE.roa
File: _DM02CLaNNG-Sdqjt-alNt2tnPE.roa (raw, json)
Hash identifier: B7w94eaOeTtKInvWnwu7Rq9VEj7g/Tt4dRwk5udZw9U=
Subject key identifier: FC:33:34:D8:22:DA:34:D1:BE:49:DA:A3:B7:E6:A5:36:DD:AD:9C:F1
Certificate issuer: /CN=14ECDE331DB3ED1459D9E478D730170F4C70E9B7
Certificate serial: 02
Authority key identifier: 14:EC:DE:33:1D:B3:ED:14:59:D9:E4:78:D7:30:17:0F:4C:70:E9:B7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/_DM02CLaNNG-Sdqjt-alNt2tnPE.roa
Signing time: Fri 27 Sep 2024 00:03:51 +0000
ROA not before: Fri 27 Sep 2024 00:03:51 +0000
ROA not after: Fri 26 Sep 2025 07:28:48 +0000
asID: 2907
IP address blocks: 150.99.0.0/16 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2 (0x2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14ECDE331DB3ED1459D9E478D730170F4C70E9B7
Validity
Not Before: Sep 27 00:03:51 2024 GMT
Not After : Sep 26 07:28:48 2025 GMT
Subject: CN=FC3334D822DA34D1BE49DAA3B7E6A536DDAD9CF1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:c1:bc:ed:ec:ea:ae:7f:54:ff:84:68:38:54:
d1:08:48:47:3f:04:f9:6e:00:85:37:67:2d:aa:82:
13:3b:4d:b5:7c:ed:0b:6a:b1:ac:14:b1:e9:ca:93:
62:ec:8c:e5:0e:5b:7e:45:6d:c4:40:9a:cf:75:0c:
a5:6f:05:73:e7:52:f5:ce:05:10:42:d6:e7:5d:9c:
85:16:21:f7:0a:0e:26:0f:46:71:61:e6:47:5c:5d:
dd:fc:47:62:2b:84:8b:2b:ff:49:97:da:e6:42:7c:
ae:bf:f5:58:22:e0:a0:0c:3c:0d:1d:9e:ab:ee:65:
6a:88:c7:10:04:e2:cc:34:ce:4e:a1:94:1d:2b:01:
22:3d:37:6b:c8:50:57:34:74:5c:14:19:42:ad:36:
36:26:19:70:26:0f:af:0a:a6:95:a5:c9:ad:4d:e2:
8c:e4:e3:7b:89:14:0b:41:c6:81:1e:92:25:00:91:
f0:31:b6:17:ce:95:b2:f6:fe:e2:99:56:57:0e:7e:
33:54:ff:a7:52:1d:d8:1e:63:d2:c9:8e:52:b7:55:
7c:68:1d:b6:f9:d1:31:7d:63:fa:7e:16:ec:2e:85:
ed:84:f4:f6:c0:72:73:43:d6:a8:cc:de:ed:dd:0b:
e3:90:ef:3c:1d:ac:71:c4:2f:49:24:fa:c4:df:b7:
d8:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:33:34:D8:22:DA:34:D1:BE:49:DA:A3:B7:E6:A5:36:DD:AD:9C:F1
X509v3 Authority Key Identifier:
keyid:14:EC:DE:33:1D:B3:ED:14:59:D9:E4:78:D7:30:17:0F:4C:70:E9:B7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/_DM02CLaNNG-Sdqjt-alNt2tnPE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
150.99.0.0/16
Signature Algorithm: sha256WithRSAEncryption
99:5a:78:b3:7f:8e:45:f8:fc:56:8f:f3:4b:a5:d8:ea:e4:01:
0a:40:59:a0:00:18:f4:45:e6:d2:be:83:23:9f:c7:c0:54:79:
6f:b7:6c:f8:68:67:dc:ef:4c:22:b4:3d:45:67:48:84:51:6c:
c2:07:30:29:22:55:06:80:a2:1d:7a:fa:9a:e2:43:52:4b:af:
cf:11:58:5d:35:45:69:16:a0:80:3b:a6:89:06:ee:01:08:20:
51:88:14:5c:c4:11:e8:4f:98:b3:04:fd:05:f7:c5:b8:30:3d:
a9:78:46:e3:f8:5a:06:23:35:b0:ce:fb:06:95:e6:11:33:e7:
84:2a:5b:b4:80:f1:00:bf:10:1e:0b:f6:9e:ce:dd:ae:f2:54:
12:2b:ba:63:10:73:02:7a:ff:d9:76:52:85:66:67:39:bc:c7:
a7:2d:57:2a:48:ff:2c:e9:da:a3:86:ca:fc:80:18:1d:9f:fe:
0b:b5:01:95:96:71:22:e7:49:a8:21:c9:8a:60:a0:f7:be:3b:
ae:07:50:83:d2:e5:9c:d5:96:92:0c:3b:79:f0:b8:c2:b3:40:
a6:ba:42:4b:44:a6:fe:2e:a0:81:85:52:79:73:71:77:7a:71:
ac:f7:81:cf:52:b6:01:28:74:2d:46:c3:6a:fb:91:cc:14:01:
ed:80:0a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:58 2025 by rpki-client