Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/y0cAmHx7UjSIY0MAnugLfaf7AoM.roa
File: y0cAmHx7UjSIY0MAnugLfaf7AoM.roa (raw, json)
Hash identifier: MFhRMyjOzeoFLY/idJnm89YQvAdAkSdLIM2LmTOJS0E=
Subject key identifier: CB:47:00:98:7C:7B:52:34:88:63:43:00:9E:E8:0B:7D:A7:FB:02:83
Certificate issuer: /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial: 1A
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/y0cAmHx7UjSIY0MAnugLfaf7AoM.roa
Signing time: Wed 10 Jan 2024 00:59:08 +0000
ROA not before: Wed 10 Jan 2024 00:59:08 +0000
ROA not after: Sat 14 Dec 2024 01:30:03 +0000
asID: 2514
IP address blocks: 143.125.216.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 26 (0x1a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Validity
Not Before: Jan 10 00:59:08 2024 GMT
Not After : Dec 14 01:30:03 2024 GMT
Subject: CN=CB4700987C7B5234886343009EE80B7DA7FB0283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:48:da:26:32:9b:d8:74:01:00:6f:10:ee:
f0:1d:d9:0e:ce:c4:15:c5:3d:3f:65:70:bc:ae:4e:
57:4e:db:df:f3:6f:8b:b5:06:2e:64:d7:22:54:77:
ed:eb:a1:85:97:04:ea:c7:b4:20:9e:00:71:71:99:
d9:fc:3c:6e:c3:d4:77:d2:10:b8:06:67:fc:be:bd:
f0:e3:2a:13:52:17:ac:62:61:bc:7a:20:b6:7c:d3:
d7:b4:a5:c4:bb:89:26:3a:23:b5:0a:7d:7a:e8:c8:
df:b6:29:4f:21:22:43:81:13:93:87:45:bf:0b:f6:
28:54:73:23:ca:b4:8c:90:a1:da:c4:fe:20:b7:cc:
c7:70:b5:5c:db:23:2a:67:49:cd:4b:17:02:d4:88:
1f:7d:0d:08:c0:b4:04:96:b8:1c:00:86:51:08:3c:
71:4f:33:9e:f8:ec:8b:54:79:27:7b:7d:1c:ae:f1:
16:3e:2b:8f:cc:72:57:75:d8:8e:3b:c4:8e:e0:e3:
b9:16:d9:3c:ea:fe:45:b7:25:b2:8b:28:e5:e7:0e:
97:d6:22:0d:88:cb:55:e2:fb:7a:8b:5c:73:2f:18:
f0:f1:dd:8f:df:a4:15:8e:82:5b:5b:e1:33:03:ae:
ee:df:45:2e:96:41:6f:83:48:d9:1c:11:19:0c:7a:
5e:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:47:00:98:7C:7B:52:34:88:63:43:00:9E:E8:0B:7D:A7:FB:02:83
X509v3 Authority Key Identifier:
keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/y0cAmHx7UjSIY0MAnugLfaf7AoM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
143.125.216.0/21
Signature Algorithm: sha256WithRSAEncryption
0b:30:d2:4b:ff:4f:d7:02:6f:2d:7e:24:23:94:1f:82:a6:96:
29:22:77:73:f2:32:c8:6c:af:c8:95:ad:60:5b:0b:6d:c4:f8:
97:9f:d7:18:62:8b:ae:1e:89:43:58:d4:b0:89:16:a4:fb:63:
59:51:93:84:19:80:3a:a4:82:a4:6c:db:91:52:ea:9c:97:b6:
d5:56:9f:ad:a6:a0:2a:4a:a5:a5:bb:8f:d8:e0:c2:e1:0c:4e:
8a:b4:23:4f:cb:80:60:63:89:72:9e:59:76:80:9a:f8:3d:dd:
3b:4c:7d:54:c2:ae:58:6f:10:d5:1c:41:da:77:06:e7:24:b2:
02:b8:f9:3d:82:3c:b9:7f:e9:28:7b:78:97:2d:fe:c5:78:b0:
50:02:ef:07:4a:c7:c1:99:47:11:fa:2a:0e:99:7b:a3:55:8c:
eb:db:62:84:23:ab:28:87:a1:f1:0b:11:39:ed:b6:9c:f9:79:
0c:68:29:32:45:5f:0c:04:e0:ce:7d:64:41:1d:84:84:d8:92:
23:d0:46:7f:21:07:05:0e:40:08:75:40:aa:9b:62:bc:84:9a:
68:87:aa:09:1a:61:39:ec:69:02:43:0f:d9:f5:c8:3b:0a:5b:
8a:cf:6e:09:2b:e8:eb:9e:38:ad:e0:95:86:cf:cb:56:68:cc:
44:a1:b5:c3
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw
MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDExMDAw
NTkwOFoXDTI0MTIxNDAxMzAwM1owMzExMC8GA1UEAxMoQ0I0NzAwOTg3QzdCNTIz
NDg4NjM0MzAwOUVFODBCN0RBN0ZCMDI4MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMh6SNomMpvYdAEAbxDu8B3ZDs7EFcU9P2VwvK5OV07b3/Nvi7UG
LmTXIlR37euhhZcE6se0IJ4AcXGZ2fw8bsPUd9IQuAZn/L698OMqE1IXrGJhvHog
tnzT17SlxLuJJjojtQp9eujI37YpTyEiQ4ETk4dFvwv2KFRzI8q0jJCh2sT+ILfM
x3C1XNsjKmdJzUsXAtSIH30NCMC0BJa4HACGUQg8cU8znvjsi1R5J3t9HK7xFj4r
j8xyV3XYjjvEjuDjuRbZPOr+Rbclsoso5ecOl9YiDYjLVeL7eotccy8Y8PHdj9+k
FY6CW1vhMwOu7t9FLpZBb4NI2RwRGQx6XsUCAwEAAaOCAiIwggIeMB0GA1UdDgQW
BBTLRwCYfHtSNIhjQwCe6At9p/sCgzAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq
jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O
UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L3kwY0FtSHg3VWpTSVkwTUFudWdMZmFmN0FvTS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYD
BAOPfdgwDQYJKoZIhvcNAQELBQADggEBAAsw0kv/T9cCby1+JCOUH4Kmlikid3Py
Mshsr8iVrWBbC23E+Jef1xhii64eiUNY1LCJFqT7Y1lRk4QZgDqkgqRs25FS6pyX
ttVWn62moCpKpaW7j9jgwuEMToq0I0/LgGBjiXKeWXaAmvg93TtMfVTCrlhvENUc
Qdp3BucksgK4+T2CPLl/6Sh7eJct/sV4sFAC7wdKx8GZRxH6Kg6Ze6NVjOvbYoQj
qyiHofELETnttpz5eQxoKTJFXwwE4M59ZEEdhITYkiPQRn8hBwUOQAh1QKqbYryE
mmiHqgkaYTnsaQJDD9n1yDsKW4rPbgkr6OueOK3glYbPy1ZozEShtcM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:49 2025 by rpki-client