Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2251/zb8UhVSeac7EzRqqAnoDCCe69eQ.roa
File: zb8UhVSeac7EzRqqAnoDCCe69eQ.roa (raw, json)
Hash identifier: Gg3NdWqL6PXBjAVrURxPoPKZToSSiXDBWZfRkQ1zuSA=
Subject key identifier: CD:BF:14:85:54:9E:69:CE:C4:CD:1A:AA:02:7A:03:08:27:BA:F5:E4
Certificate issuer: /CN=9E1460D2688F6D1068B97C1F914040434B8F0324
Certificate serial: 0F
Authority key identifier: 9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/zb8UhVSeac7EzRqqAnoDCCe69eQ.roa
Signing time: Wed 18 Aug 2021 07:54:32 +0000
ROA not before: Wed 18 Aug 2021 07:54:32 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 2518
IP address blocks: 192.47.117.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15 (0xf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E1460D2688F6D1068B97C1F914040434B8F0324
Validity
Not Before: Aug 18 07:54:32 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=CDBF1485549E69CEC4CD1AAA027A030827BAF5E4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f5:ac:7e:ec:ff:c4:77:dd:80:e1:41:a6:86:
fa:e8:76:04:90:e3:c8:99:0e:55:47:e4:e4:9a:92:
1c:82:f5:27:49:b9:90:32:0e:95:60:61:0a:b6:21:
06:fb:c2:31:c1:bc:48:05:2e:b6:dd:e6:12:1e:a0:
fa:e8:42:a8:f4:20:24:49:b7:cb:5d:78:7b:75:68:
2f:87:1b:31:e3:3f:e0:e1:1b:28:81:ec:08:8b:3d:
1d:5d:68:e7:62:b9:af:c1:bf:98:a1:46:9c:ab:99:
31:bd:c3:e7:f1:75:b6:82:4d:d4:c3:0b:c5:f7:bd:
13:67:85:b9:b0:35:79:be:bf:61:e7:08:cc:90:84:
0c:0c:7e:71:2d:5f:44:25:d6:f5:c1:7b:6c:ea:e5:
98:2b:79:fa:b4:a0:ef:5c:05:a7:d5:b4:9f:1e:c5:
97:1e:06:7b:fe:93:3b:94:bc:9c:94:3d:e6:aa:d6:
0a:d8:57:3d:72:de:4a:a8:3a:d6:0d:19:2f:2e:09:
a2:a0:0b:0b:cf:66:cb:48:8f:59:9c:d9:d0:a0:6d:
f2:2e:a5:6c:7d:f5:ef:cd:da:a6:36:af:9e:7b:93:
eb:3f:14:0e:93:56:29:e9:81:6c:c2:d8:1a:bc:bb:
e4:38:01:f1:b3:9f:da:61:79:1c:25:1d:dc:d9:2f:
d3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BF:14:85:54:9E:69:CE:C4:CD:1A:AA:02:7A:03:08:27:BA:F5:E4
X509v3 Authority Key Identifier:
keyid:9E:14:60:D2:68:8F:6D:10:68:B9:7C:1F:91:40:40:43:4B:8F:03:24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/nhRg0miPbRBouXwfkUBAQ0uPAyQ.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nhRg0miPbRBouXwfkUBAQ0uPAyQ.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2251/zb8UhVSeac7EzRqqAnoDCCe69eQ.roa
sbgp-ipAddrBlock: critical
IPv4:
192.47.117.0/24
Signature Algorithm: sha256WithRSAEncryption
05:92:5f:f7:5f:10:42:e0:13:fb:3d:0b:f8:68:0d:fa:9b:9a:
fe:b2:a2:5f:e2:2e:da:84:ab:6d:08:6d:fa:59:ad:22:1a:8e:
cd:48:c6:c6:dc:27:05:f3:dd:79:55:90:20:04:bc:30:d3:7d:
79:12:35:71:c0:95:10:84:84:ee:29:fd:0e:9a:76:67:0d:89:
a6:6f:7d:6a:a1:c3:fe:23:78:1a:f0:e7:19:fd:dd:da:89:15:
46:9b:85:26:d3:83:41:0d:aa:f4:5b:f7:9e:17:e6:7e:f0:19:
0d:31:57:b4:46:59:9e:fe:3a:aa:5f:a2:00:52:8f:f2:ba:9c:
12:4b:ce:e3:90:32:6f:30:37:ce:d4:89:59:66:b4:fb:0e:39:
dc:6f:0a:bc:e2:d5:56:e2:8d:dd:89:f0:db:47:1e:9f:f0:46:
af:e6:35:20:ae:a7:2f:86:5d:82:91:5f:a6:5e:75:a0:f3:a2:
5e:2e:d1:7d:e5:c4:f6:f0:4f:6c:30:79:1f:22:13:ed:82:e2:
50:27:fa:2f:7d:4b:37:8b:12:32:61:dd:94:f6:cf:08:14:05:
4a:ff:ae:cc:a5:56:04:71:91:8b:a0:ec:d8:13:5b:7b:2a:49:
c7:a8:ba:3b:05:38:31:55:7d:02:f0:cd:8f:98:b6:e5:9d:40:
c8:bb:12:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:00:48 2025 by rpki-client