Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/aQeMs31mDABZFI5ejVkxtsGHALg.roa
File: aQeMs31mDABZFI5ejVkxtsGHALg.roa (raw, json)
Hash identifier: 4+FPcIUJLRePdbrq2myrmPk3DxvwJ+DSjSqLG6OkCDE=
Subject key identifier: 69:07:8C:B3:7D:66:0C:00:59:14:8E:5E:8D:59:31:B6:C1:87:00:B8
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 44
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/aQeMs31mDABZFI5ejVkxtsGHALg.roa
Signing time: Thu 25 Jan 2024 01:10:37 +0000
ROA not before: Thu 25 Jan 2024 01:10:37 +0000
ROA not after: Tue 14 Jan 2025 01:30:02 +0000
asID: 2514
IP address blocks: 160.248.252.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 68 (0x44)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jan 25 01:10:37 2024 GMT
Not After : Jan 14 01:30:02 2025 GMT
Subject: CN=69078CB37D660C0059148E5E8D5931B6C18700B8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:f4:a2:93:db:19:bc:b0:f2:24:2f:f4:78:f1:
b2:b3:7f:7e:ab:b0:54:5b:ef:ec:b0:5c:22:dc:7c:
1e:d3:5c:0e:12:1c:35:1b:0b:ff:92:e6:ed:8d:c8:
c6:68:26:dd:cc:23:21:ef:4e:ce:70:0d:e7:03:8d:
09:5b:da:92:d0:c6:24:cc:db:5a:c4:b0:81:ca:7b:
05:1c:5e:3e:0e:5f:62:f4:e9:86:a9:94:39:81:51:
aa:e9:7f:ad:ce:1a:c7:fa:58:11:33:ee:6c:0d:a7:
ac:be:e8:2e:3f:ac:5d:61:96:78:c8:84:25:da:15:
29:f2:23:5b:ae:ca:7f:fb:a2:e8:e5:f8:47:dd:82:
df:1c:fa:f7:68:35:e8:8a:2f:68:86:8d:67:62:b2:
86:09:d1:4d:b6:e4:ae:93:37:2f:d8:89:3c:cc:6d:
4f:7e:5c:6f:23:13:2b:04:e8:4a:72:60:a3:23:7c:
6b:6b:5c:c4:92:d3:fd:97:81:c4:c3:f8:81:64:75:
f8:6b:89:9e:8a:39:eb:d8:e7:03:f2:dc:0f:a9:ad:
62:7d:9f:14:cf:05:4a:0c:76:e2:00:08:88:ed:4b:
f4:63:67:6a:17:df:10:3f:05:81:5a:ef:a4:a3:28:
12:3d:9b:d1:47:30:23:00:c5:80:32:c8:42:aa:29:
e0:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:07:8C:B3:7D:66:0C:00:59:14:8E:5E:8D:59:31:B6:C1:87:00:B8
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/aQeMs31mDABZFI5ejVkxtsGHALg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
160.248.252.0/23
Signature Algorithm: sha256WithRSAEncryption
3a:96:d2:65:33:4c:df:1e:0b:7c:f2:5c:20:83:65:ce:ad:6a:
af:9b:c4:57:51:76:d2:32:39:7b:18:9c:b3:10:dd:b4:c7:60:
54:47:91:dc:bd:86:ae:41:40:37:2e:79:fe:8d:31:3d:36:b8:
08:79:88:90:05:2e:7e:47:2a:6a:c2:0d:bb:a3:ed:40:4d:30:
aa:48:21:70:eb:6a:f1:4d:dd:23:49:a5:cf:02:4f:41:51:76:
58:02:9f:19:8d:3d:c6:b8:8c:85:e4:ec:52:72:d3:7a:f4:29:
73:5a:3b:0a:32:5f:9c:6b:5c:2b:a8:22:82:8c:80:17:51:df:
ad:1a:4b:01:c9:b4:f4:de:3e:3d:ab:27:37:bd:ac:e7:83:ff:
3a:bd:1e:40:42:56:bb:4e:dc:c5:0a:41:09:c9:20:41:be:8c:
f1:1a:82:59:c4:ce:6b:e4:24:64:6a:2a:41:01:2a:97:80:65:
fc:8e:5d:69:71:24:b3:12:d7:4d:68:76:8a:f6:4b:b2:2d:61:
8e:cf:e3:9c:80:9a:a5:42:08:a6:60:22:91:c3:c0:6c:76:ec:
68:81:ab:47:da:a9:a2:aa:ce:fa:12:e0:29:ce:a9:be:b4:73:
65:4d:32:0e:a9:32:7f:81:1b:e1:03:cf:0c:97:1a:b2:5c:4d:
f9:15:0f:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:06:31 2025 by rpki-client