Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2285/oz7t89VLfWy6D1mUY1kbBUm59nE.roa
File: oz7t89VLfWy6D1mUY1kbBUm59nE.roa (raw, json)
Hash identifier: G/Thk/OZKY3yjSYUHvuiNU6r4yxFtEBpL7ZsEI66N1Y=
Subject key identifier: A3:3E:ED:F3:D5:4B:7D:6C:BA:0F:59:94:63:59:1B:05:49:B9:F6:71
Certificate issuer: /CN=7C01445105DBAF2750BA19245C7064AD40F7226D
Certificate serial: 3B
Authority key identifier: 7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/oz7t89VLfWy6D1mUY1kbBUm59nE.roa
Signing time: Sun 01 Oct 2023 01:28:26 +0000
ROA not before: Sun 01 Oct 2023 01:28:26 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 2907
IP address blocks: 133.37.0.0/16 maxlen: 16
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 59 (0x3b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7C01445105DBAF2750BA19245C7064AD40F7226D
Validity
Not Before: Oct 1 01:28:26 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=A33EEDF3D54B7D6CBA0F599463591B0549B9F671
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:a9:cc:b8:20:63:bb:fc:8e:71:7c:ee:f8:7e:
11:0b:41:bd:4e:fd:f9:84:df:0f:53:7a:96:28:9c:
2e:d7:21:d0:c8:90:e4:8a:7a:e6:fd:8f:44:55:13:
b5:69:a9:7f:58:ba:32:30:ab:e1:0b:96:7e:f2:41:
0e:25:b4:32:12:e8:f3:84:3c:25:d2:c5:67:5e:bb:
d2:0c:c6:df:62:53:9e:4d:9a:06:03:f3:67:9d:51:
eb:bc:02:5e:86:1d:e1:bb:b2:1c:56:03:26:9e:25:
49:cb:42:ee:af:56:ae:26:68:41:30:c9:09:6a:a3:
82:80:fb:a8:68:45:73:61:6c:7a:ad:a1:ca:f5:ba:
f2:85:54:45:de:45:3f:da:00:ef:84:ad:81:51:1f:
0f:82:d6:2a:e5:f7:d7:7a:bc:1f:7c:57:48:5f:92:
b0:8e:a5:34:43:51:48:aa:04:24:79:32:59:65:dd:
d2:ac:41:71:b1:a3:e5:8b:ca:f3:94:86:40:19:53:
8a:9d:ab:b9:28:bf:0b:3d:a6:80:28:85:12:82:cb:
c0:52:f3:50:ce:7b:af:cd:ca:ed:9a:c1:f4:e2:a1:
d9:20:6d:3c:3c:b4:f2:6f:be:27:f2:6f:d1:dd:b6:
e2:1f:ad:87:b6:07:f1:d4:f7:0c:2d:8f:e6:6c:cc:
4d:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3E:ED:F3:D5:4B:7D:6C:BA:0F:59:94:63:59:1B:05:49:B9:F6:71
X509v3 Authority Key Identifier:
keyid:7C:01:44:51:05:DB:AF:27:50:BA:19:24:5C:70:64:AD:40:F7:22:6D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/fAFEUQXbrydQuhkkXHBkrUD3Im0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fAFEUQXbrydQuhkkXHBkrUD3Im0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2285/oz7t89VLfWy6D1mUY1kbBUm59nE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.37.0.0/16
Signature Algorithm: sha256WithRSAEncryption
30:ee:00:64:38:ca:17:3d:3d:e8:d8:57:06:fd:97:03:ad:df:
9b:91:f4:e1:1f:fd:25:b5:6e:68:d6:ef:27:6c:22:0e:f7:91:
29:e0:2b:3e:7c:c3:33:c0:cd:ba:3e:60:eb:b1:2f:0e:1f:67:
b8:99:46:74:52:b2:40:44:32:d0:fc:f7:97:0f:9c:2c:97:dd:
af:25:73:76:3f:63:af:84:ab:6a:3a:c3:4f:0d:94:06:21:5a:
0c:87:b0:a2:47:f2:e9:89:77:bc:7a:1d:7d:6a:91:76:b3:d8:
b1:21:78:4f:eb:e8:74:de:5a:9a:7e:86:ad:57:de:77:06:37:
bb:62:0d:7d:d8:32:97:7a:82:b6:e4:df:9c:60:de:a0:ab:b3:
53:c8:b7:62:b7:be:aa:1a:81:25:fa:37:ae:0e:94:90:cb:89:
fd:99:9b:de:ec:21:de:30:07:c3:95:86:3a:ae:6b:fa:f5:25:
36:13:0d:aa:d3:c6:9b:cf:72:d4:a5:75:4c:a9:4d:d4:b7:5e:
e6:79:32:91:f0:70:fc:7b:86:aa:6a:8e:69:f4:e3:da:00:d1:
2f:43:8b:ef:5b:1d:81:53:d9:33:5c:a5:3a:89:64:00:ca:e7:
13:40:73:bc:5f:91:1a:8f:1e:e7:84:8f:24:1d:5b:77:46:1a:
a8:9d:0e:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:58 2025 by rpki-client