Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/aO3vGvLMxfZa7F9q5vT5QvQ1rV8.roa
File: aO3vGvLMxfZa7F9q5vT5QvQ1rV8.roa (raw, json)
Hash identifier: vO1+l5ND8w4At1/1Ap7w0bkbfnIijOBSd16lGaCVGh4=
Subject key identifier: 68:ED:EF:1A:F2:CC:C5:F6:5A:EC:5F:6A:E6:F4:F9:42:F4:35:AD:5F
Certificate issuer: /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial: 41
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/aO3vGvLMxfZa7F9q5vT5QvQ1rV8.roa
Signing time: Wed 31 Jul 2024 01:08:58 +0000
ROA not before: Wed 31 Jul 2024 01:08:58 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 2514
IP address blocks: 202.229.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 65 (0x41)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
Validity
Not Before: Jul 31 01:08:58 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=68EDEF1AF2CCC5F65AEC5F6AE6F4F942F435AD5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ca:ac:97:61:e7:23:d3:ba:28:f0:d4:33:12:
93:d1:12:54:2a:f0:ac:29:c1:c4:31:1c:d7:c6:40:
1e:4a:d0:d6:19:7c:b6:7e:1d:ca:b8:eb:62:96:28:
60:9c:04:d1:60:77:30:c2:02:15:a3:4c:1d:bc:a2:
67:1b:61:92:5a:a7:50:83:57:93:83:1c:99:ff:1f:
3f:d8:15:b9:71:25:ea:39:07:ee:b2:cd:61:65:0c:
f8:ac:a0:53:aa:59:53:f0:cd:15:af:f1:d1:3c:6c:
ef:3c:07:cb:6b:62:f3:5a:7d:b5:2f:5a:31:13:8f:
bd:89:ce:f8:2a:04:f4:10:c4:eb:92:c9:a8:62:2c:
a7:2e:9b:d8:16:8b:9b:d4:70:d2:3f:ed:5b:dc:63:
70:49:7b:d9:24:83:de:aa:90:19:15:c3:b5:e7:e7:
69:de:31:f4:f6:6b:a2:b4:79:73:c1:c8:14:1e:a5:
db:4d:31:b4:90:82:bf:94:ed:46:ac:d5:7a:e5:07:
d3:7b:b6:ec:90:3d:50:ce:3d:59:55:e3:9d:63:1c:
a5:0c:fa:a4:10:57:66:85:56:7a:be:d9:4d:c5:cc:
6d:a9:9c:e6:e6:b2:73:c3:f4:a9:a6:24:27:72:93:
d0:34:8d:b9:9f:b3:b3:4e:b5:7c:7a:7b:a4:64:d2:
c5:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:ED:EF:1A:F2:CC:C5:F6:5A:EC:5F:6A:E6:F4:F9:42:F4:35:AD:5F
X509v3 Authority Key Identifier:
keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/aO3vGvLMxfZa7F9q5vT5QvQ1rV8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.229.0.0/16
Signature Algorithm: sha256WithRSAEncryption
1d:a5:fb:bc:d2:fe:95:9e:8d:9a:1f:0a:23:cc:aa:5b:17:16:
0a:ad:7c:86:75:11:59:c1:2b:ac:a3:84:88:71:ed:c3:84:59:
a8:d1:33:32:ec:12:5c:2d:da:cb:06:57:c2:fa:da:73:af:11:
52:3e:f3:3f:24:90:77:99:e5:0e:36:46:9f:95:49:da:f3:cb:
4c:a1:13:fa:90:b0:7a:6a:0e:94:aa:1a:27:2e:29:60:0b:f6:
91:3b:d0:cd:87:0d:62:f2:d8:10:60:5b:da:a4:fe:ab:c1:52:
13:00:dd:75:cb:fe:56:36:d6:5f:dd:3e:d0:d8:35:b5:36:21:
43:90:87:6e:50:70:95:2f:55:b0:21:fe:c4:85:66:39:da:52:
ae:47:91:be:0b:30:51:ef:9b:3a:d8:2e:65:29:01:3c:65:8c:
f1:a2:ff:98:d9:73:cc:af:17:96:56:3f:4e:63:d5:5a:90:1e:
72:2b:e4:8d:6f:3f:ef:80:93:86:84:ac:bc:9e:8e:c2:2b:ca:
08:c7:94:5f:05:89:6a:c3:d2:c0:c6:6c:e8:b3:93:52:e8:98:
7e:23:1d:83:b2:e5:3d:60:51:f9:a4:b9:7e:a0:2c:32:b8:1a:
5d:c4:65:d1:b2:c6:6e:ff:81:63:a1:ff:c0:76:15:ce:64:99:
49:cd:f7:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:02 2025 by rpki-client