Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5Wo5kLNtqAkgzyCAuT1xvL8Tpvk.roa
File: 5Wo5kLNtqAkgzyCAuT1xvL8Tpvk.roa (raw, json)
Hash identifier: h++UVfaLe/BmKGUiIcwOv1RKXapjc6WQXz9GNBufWlI=
Subject key identifier: E5:6A:39:90:B3:6D:A8:09:20:CF:20:80:B9:3D:71:BC:BF:13:A6:F9
Certificate issuer: /CN=E62F69C95A098F8073F5F3C3C1A98B76CBF8502A
Certificate serial: 5C
Authority key identifier: E6:2F:69:C9:5A:09:8F:80:73:F5:F3:C3:C1:A9:8B:76:CB:F8:50:2A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5Wo5kLNtqAkgzyCAuT1xvL8Tpvk.roa
Signing time: Fri 31 Jan 2025 01:31:16 +0000
ROA not before: Fri 31 Jan 2025 01:31:16 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 7671
IP address blocks: 157.3.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 92 (0x5c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E62F69C95A098F8073F5F3C3C1A98B76CBF8502A
Validity
Not Before: Jan 31 01:31:16 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=E56A3990B36DA80920CF2080B93D71BCBF13A6F9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:41:ac:12:62:7d:2b:1b:7e:5c:16:d8:f3:8a:
b0:84:e9:94:df:e7:d1:23:ce:e7:73:b7:20:9a:ad:
31:1b:94:40:81:55:bf:d8:60:4f:33:3f:fa:dd:6f:
52:5b:53:7b:d2:9e:29:25:31:44:25:c9:8b:99:29:
f0:a8:53:f3:8f:bb:86:49:c1:05:5d:f0:f6:8b:c9:
d9:7d:4e:fa:67:d0:1b:a3:58:98:38:23:38:25:21:
e8:52:26:8b:03:cd:ac:68:57:53:94:94:be:05:c4:
40:f0:d5:2a:50:47:9f:7e:14:18:ac:ba:ec:5f:3e:
b7:60:0b:ad:01:79:b1:71:ad:f3:ed:2a:23:3e:50:
d9:6c:53:69:d3:57:da:a6:cd:d6:3c:7a:e7:64:97:
2d:20:9e:bd:ef:72:dc:8b:31:a6:da:31:37:06:a5:
13:a9:98:a6:32:1e:2a:d0:ce:9a:7a:23:00:3b:9f:
b1:da:c7:80:56:57:8f:b3:93:73:d6:3e:1d:23:83:
24:e1:21:21:f7:97:5f:a3:dd:61:d4:b7:b4:f9:74:
39:f6:6a:b7:14:82:9f:b1:f8:a6:5b:e0:6e:a3:35:
f4:e7:a6:6d:94:31:07:1e:88:19:05:1b:b4:50:32:
57:b8:8d:c7:91:49:c1:78:8d:f0:f2:85:75:0b:c7:
ec:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:6A:39:90:B3:6D:A8:09:20:CF:20:80:B9:3D:71:BC:BF:13:A6:F9
X509v3 Authority Key Identifier:
keyid:E6:2F:69:C9:5A:09:8F:80:73:F5:F3:C3:C1:A9:8B:76:CB:F8:50:2A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5i9pyVoJj4Bz9fPDwamLdsv4UCo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5i9pyVoJj4Bz9fPDwamLdsv4UCo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2432/5Wo5kLNtqAkgzyCAuT1xvL8Tpvk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
157.3.0.0/16
Signature Algorithm: sha256WithRSAEncryption
17:be:d5:e4:80:36:f7:68:a5:9c:25:26:c6:c5:0f:7e:c7:15:
40:60:12:38:35:b0:df:51:24:f5:6d:6e:00:d0:4c:8b:e4:5f:
d2:01:1b:82:a3:ad:1f:21:ec:8c:ab:4d:9c:33:7b:c7:fa:fd:
1e:0e:24:31:62:3f:d4:81:5e:8b:85:72:9f:c2:47:bc:eb:f0:
8d:d7:a2:da:51:a5:15:8b:54:a2:fd:8f:16:ec:5d:2a:9f:c4:
95:2e:01:a2:56:e8:87:43:d2:b0:60:4e:e9:cd:52:3f:49:eb:
e0:7c:9a:40:2f:f8:27:da:67:2f:09:75:12:cc:06:58:7b:69:
66:fe:00:46:63:ff:cf:37:94:a2:e2:11:6d:71:f9:df:14:7c:
ff:98:12:ba:23:52:7c:ce:bf:b4:f4:43:ef:f1:07:2c:4a:a4:
f1:48:cf:28:a4:42:92:ed:7e:3e:31:77:ac:57:e6:c8:aa:e9:
3b:9d:f0:37:74:07:e6:8a:54:14:89:fb:c8:db:0b:28:cd:e1:
0d:1c:6f:0f:2d:a7:7c:d2:58:75:6e:d4:5a:8d:8e:48:24:8f:
37:c1:1b:c9:f6:36:70:df:2e:12:5c:54:94:f3:71:70:8b:5d:
02:7a:5f:80:72:cf:25:aa:d6:30:18:85:f5:02:84:a6:b1:07:
6f:3e:7a:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:38 2025 by rpki-client