Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30017/u_wm7yE5bm03cH3SWrEMxdOvFmA.roa
File: u_wm7yE5bm03cH3SWrEMxdOvFmA.roa (raw, json)
Hash identifier: oh9usBgRlwly84j72xnrtmImwv5wZrx/pwDXnt0Cl+s=
Subject key identifier: BB:FC:26:EF:21:39:6E:6D:37:70:7D:D2:5A:B1:0C:C5:D3:AF:16:60
Certificate issuer: /CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Certificate serial: 35
Authority key identifier: A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/u_wm7yE5bm03cH3SWrEMxdOvFmA.roa
Signing time: Wed 18 Dec 2024 03:58:58 +0000
ROA not before: Wed 18 Dec 2024 03:58:58 +0000
ROA not after: Mon 15 Dec 2025 01:30:03 +0000
asID: 0
IP address blocks: 2001:2a0::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 53 (0x35)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A629AA8AEB242A13FB371A44CA5E1F2957A70E1B
Validity
Not Before: Dec 18 03:58:58 2024 GMT
Not After : Dec 15 01:30:03 2025 GMT
Subject: CN=BBFC26EF21396E6D37707DD25AB10CC5D3AF1660
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:90:49:5c:b9:a6:2d:9f:74:c5:6e:36:c6:
5e:d4:eb:ad:45:2e:e2:34:8a:c2:24:e1:b9:24:fe:
e3:f1:9f:65:97:61:b8:9c:20:f6:fd:62:7d:c6:47:
9b:31:de:c6:b8:bf:0b:08:79:57:d4:62:aa:55:4e:
4f:2a:49:93:ff:55:46:76:57:e1:b1:a4:f4:2d:f9:
23:68:81:f4:78:47:f4:98:00:2b:7b:1b:cc:4c:69:
f8:c0:c1:25:91:9d:47:88:c9:21:2b:42:26:c8:59:
53:8a:ef:84:09:19:e2:45:d2:d5:13:8b:58:22:c3:
a9:fa:d3:06:a4:2f:f5:48:88:72:80:57:79:21:1c:
a2:69:9a:e0:a3:4c:fa:99:4b:4f:16:a3:bb:06:5b:
ea:6f:93:52:43:80:56:03:fe:51:dd:dd:9d:66:5c:
eb:3b:a2:38:30:fd:12:65:74:0a:a6:38:35:e9:ab:
c8:24:26:06:3c:a3:2f:8f:71:97:1a:bd:41:af:d8:
8d:66:08:83:7a:50:96:df:a6:9b:6f:6f:3b:5d:88:
ab:4a:1e:52:7a:05:eb:b6:be:a3:ff:f5:20:00:64:
1e:c6:4d:4c:9c:3f:32:94:f3:2f:c2:8c:28:d3:ab:
37:5d:88:8e:7e:6d:7d:9f:8b:b9:83:fb:88:0d:12:
f3:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:FC:26:EF:21:39:6E:6D:37:70:7D:D2:5A:B1:0C:C5:D3:AF:16:60
X509v3 Authority Key Identifier:
keyid:A6:29:AA:8A:EB:24:2A:13:FB:37:1A:44:CA:5E:1F:29:57:A7:0E:1B
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/pimqiuskKhP7NxpEyl4fKVenDhs.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pimqiuskKhP7NxpEyl4fKVenDhs.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30017/u_wm7yE5bm03cH3SWrEMxdOvFmA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:2a0::/32
Signature Algorithm: sha256WithRSAEncryption
72:99:e0:1d:14:99:c7:b6:87:7d:bf:6f:94:34:63:70:b1:06:
07:8e:63:0b:2f:a0:68:a0:92:fb:1f:49:2d:30:fc:b8:c5:91:
cf:a1:33:0f:33:65:ef:e8:f0:dc:c9:48:11:e2:11:83:6f:46:
f7:68:d6:ca:b0:ae:d3:e0:c7:a4:3f:a6:f2:be:55:96:e4:af:
35:a7:e3:2c:8a:bc:e0:1e:90:19:51:0e:a4:1e:5e:bf:e0:2e:
d3:87:d2:61:bb:ad:cb:7c:d0:2e:5b:77:a9:68:b4:03:b2:b4:
5f:bf:7e:3e:9c:fe:7f:91:00:e1:27:88:e6:88:b4:2e:b8:1e:
b1:38:cc:84:a9:53:42:a7:15:7b:eb:2d:54:cb:1d:39:0b:a7:
ec:3a:54:c5:d4:97:04:47:d7:08:d6:fb:89:77:67:48:46:c7:
91:17:94:84:6f:f7:f3:6a:12:86:6e:91:5e:9c:df:cd:27:2f:
ea:c7:70:53:2e:e1:7f:41:2d:a6:80:71:e4:d7:c3:d6:f9:3c:
ae:13:01:13:26:f2:27:81:42:49:33:6c:cc:a3:31:21:5a:82:
d3:4c:fe:a2:60:ff:81:01:58:aa:6d:e8:cf:32:79:74:79:4a:
75:6b:9d:4c:f8:53:a5:ff:de:0e:f4:73:39:28:25:b6:25:f9:
2c:4c:65:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:27 2025 by rpki-client