Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/fOqSaVMOVoNB0JY6wqHJkmWcXz4.roa
File: fOqSaVMOVoNB0JY6wqHJkmWcXz4.roa (raw, json)
Hash identifier: uANyV4hpxyRbnuIgNGmNvpLPfUrJbdiAurduZqONSLA=
Subject key identifier: 7C:EA:92:69:53:0E:56:83:41:D0:96:3A:C2:A1:C9:92:65:9C:5F:3E
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 7B
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/fOqSaVMOVoNB0JY6wqHJkmWcXz4.roa
Signing time: Mon 01 Jan 2024 01:28:20 +0000
ROA not before: Mon 01 Jan 2024 01:28:20 +0000
ROA not after: Sat 14 Dec 2024 01:30:03 +0000
asID: 9351
IP address blocks: 124.40.96.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 123 (0x7b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Jan 1 01:28:20 2024 GMT
Not After : Dec 14 01:30:03 2024 GMT
Subject: CN=7CEA9269530E568341D0963AC2A1C992659C5F3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:22:d2:d7:c9:0f:b9:84:6a:db:85:55:ad:42:
c7:1f:fe:6d:56:73:45:dc:25:89:21:93:cd:fa:65:
46:ae:c2:e6:7a:7a:ea:3a:7a:77:c5:dc:1a:ac:2e:
ca:2d:76:1e:f1:1b:31:be:69:9c:ab:4c:82:ac:ff:
63:54:ef:5a:60:b5:96:4f:df:66:57:d9:62:35:0c:
09:71:b7:3f:0f:9c:6b:ba:35:47:61:34:11:59:dd:
ec:43:fa:69:64:96:0b:27:9e:b6:f2:80:bb:67:2f:
96:ff:e4:5a:49:58:3b:04:d0:10:90:f7:10:ec:74:
61:0f:d1:ca:ce:85:f7:50:d6:0b:bf:39:87:52:83:
90:ea:de:97:eb:0c:4a:a4:ad:1c:d6:bb:be:c1:70:
f0:20:b6:ff:25:80:f6:e3:67:81:c4:9d:96:90:da:
70:b0:91:f8:b3:9a:ac:cb:43:0c:a5:a6:c0:d9:da:
f1:31:84:0a:bf:5e:fe:60:09:88:39:e3:a5:a2:67:
40:8e:b6:af:78:cc:8d:69:31:6a:2b:6a:5e:75:3d:
ec:44:da:f0:c3:24:6b:4d:01:1a:79:3b:21:2d:3b:
5c:22:64:64:d1:7d:39:86:41:24:b8:da:42:88:21:
28:61:cd:cf:56:21:d5:7e:c1:48:30:a7:d0:6e:48:
19:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:EA:92:69:53:0E:56:83:41:D0:96:3A:C2:A1:C9:92:65:9C:5F:3E
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/fOqSaVMOVoNB0JY6wqHJkmWcXz4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
124.40.96.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:ff:8f:af:ed:c5:e3:bb:04:55:0e:ea:1a:c6:ba:91:88:b7:
18:0d:1d:31:dd:e9:c4:55:30:17:97:2b:2b:0b:ef:53:2a:01:
01:7d:41:ff:69:86:d5:4b:91:53:97:51:7c:f7:6d:03:07:42:
af:ba:48:42:62:20:5d:97:0a:30:ff:f4:c0:3c:01:c2:65:e7:
fe:f3:e8:26:1d:58:69:fd:c4:d6:4a:44:51:96:16:7f:e3:6b:
a5:71:a2:d8:33:ef:57:b0:a3:a3:70:13:c6:d2:38:c2:e3:be:
1c:4f:65:44:c5:84:e2:64:84:5d:57:0f:5f:08:54:2c:4b:e5:
6c:96:fd:b4:71:5b:ce:c3:10:f7:8e:9c:76:c4:ef:96:ca:d0:
fe:d5:b6:74:9c:72:88:83:d3:62:d7:8d:e0:99:7e:a4:e1:e6:
54:34:88:67:48:70:8b:db:de:ae:d6:30:a0:ce:b2:79:15:2d:
df:ad:da:9c:1e:84:2f:78:5d:cf:58:cd:06:eb:65:90:df:a5:
c5:2f:82:28:74:aa:03:ae:e0:3d:3b:26:67:db:e6:19:9c:cd:
3f:54:7f:d3:71:c2:0b:d5:9f:f1:9b:e3:f7:0b:e8:06:9c:0e:
6c:d3:f8:7b:ca:d3:3c:18:d4:da:14:71:1f:42:89:26:a8:24:
7d:74:d1:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:51 2025 by rpki-client