Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30091/SXusXkJuc0s0k0uAZzDiV5AkLRk.roa
File: SXusXkJuc0s0k0uAZzDiV5AkLRk.roa (raw, json)
Hash identifier: v410YokyewlSDCMFu5ey4SyoM2TY0C4ptVT4CKMKQNQ=
Subject key identifier: 49:7B:AC:5E:42:6E:73:4B:34:93:4B:80:67:30:E2:57:90:24:2D:19
Certificate issuer: /CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Certificate serial: 54
Authority key identifier: 89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/SXusXkJuc0s0k0uAZzDiV5AkLRk.roa
Signing time: Mon 30 Sep 2024 01:29:29 +0000
ROA not before: Mon 30 Sep 2024 01:29:29 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 38639
IP address blocks: 2402:c800:cafe::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 84 (0x54)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89801DBDBE168863AB0E802F0EC90A3525C2347C
Validity
Not Before: Sep 30 01:29:29 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=497BAC5E426E734B34934B806730E25790242D19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:be:64:ef:75:06:41:cf:10:e7:15:db:c0:d8:
56:96:e1:5f:db:ca:aa:10:4f:26:5b:bb:21:a7:5f:
72:c3:45:2f:8e:e6:77:87:a3:be:45:20:68:1d:2d:
27:1a:de:38:4d:e4:7a:15:cf:ec:e6:44:3a:ac:e4:
2c:34:13:73:f7:5c:f5:d0:d0:cd:4d:cb:a5:8e:91:
da:72:34:e5:e9:a7:b3:c9:f2:9f:f0:69:59:92:22:
2a:41:6c:c1:e3:80:ee:73:e2:88:10:a8:f1:a9:75:
b2:99:6a:0b:8b:66:96:2a:5e:d1:f2:02:e6:8f:67:
ea:c4:88:a4:1f:d0:8d:43:89:1b:6a:13:5e:73:5c:
7a:77:a1:2e:2c:4f:bc:34:e1:94:f4:54:6e:24:24:
11:d0:8b:c2:50:c4:ff:af:61:c4:7f:c9:f0:de:df:
27:b9:d9:9a:40:5c:4b:f0:9c:c5:89:dc:2c:9c:72:
ca:15:0b:e4:df:8a:73:5a:da:f7:de:b3:d9:83:2f:
cf:a2:dc:3f:16:19:c2:17:ab:24:77:1e:aa:ba:0a:
36:b0:b8:58:5a:cb:8f:4b:1a:46:f4:bf:2f:2a:92:
5e:03:e6:73:4e:d7:c1:10:47:11:44:90:9e:3e:b9:
05:bd:b1:ff:bf:18:5e:85:99:b0:a6:3a:ab:04:e4:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:7B:AC:5E:42:6E:73:4B:34:93:4B:80:67:30:E2:57:90:24:2D:19
X509v3 Authority Key Identifier:
keyid:89:80:1D:BD:BE:16:88:63:AB:0E:80:2F:0E:C9:0A:35:25:C2:34:7C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/iYAdvb4WiGOrDoAvDskKNSXCNHw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/iYAdvb4WiGOrDoAvDskKNSXCNHw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30091/SXusXkJuc0s0k0uAZzDiV5AkLRk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:c800:cafe::/48
Signature Algorithm: sha256WithRSAEncryption
0e:e1:e2:82:50:23:c0:e5:ca:6f:2a:5b:e4:c2:01:ba:15:7e:
2c:a5:e9:45:87:7f:69:60:42:7d:85:b4:73:a6:4a:c5:8d:04:
47:e0:6d:0c:91:0d:08:f7:1c:04:46:58:0d:c9:f5:df:9f:54:
8b:b5:7c:cd:dc:3e:8c:b7:4f:d7:a7:6a:09:8f:0e:94:66:f3:
d2:fb:a7:69:27:44:67:ef:15:94:76:ba:aa:a4:58:e8:4f:12:
e5:fe:d7:a7:c6:ab:01:0f:cb:31:88:5d:e2:a2:c4:2c:40:1a:
23:d2:09:9a:82:36:d3:ae:66:23:c4:71:5e:e8:98:6b:a5:95:
b2:e2:98:ff:90:25:2c:7d:91:5e:19:c1:9f:9b:19:a1:14:a5:
a5:7f:cb:2c:75:d3:94:fb:51:1f:00:e6:25:65:0e:16:a5:42:
1e:5e:9b:85:ce:9b:86:81:2c:7f:1e:00:d1:d4:2f:0d:5b:46:
87:26:b0:1e:c7:98:6a:aa:15:4b:3b:ab:5c:f9:b8:33:bd:56:
18:30:9d:65:b3:20:b3:c5:03:69:15:a2:00:08:ca:46:74:ca:
7e:6f:bf:1d:bd:bc:e6:74:76:a6:88:53:ae:ce:2f:ee:6e:52:
65:d9:1e:74:d8:6a:f8:de:1d:af:7c:67:c5:5b:5a:d6:5a:5a:
fe:b8:c5:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 15:12:55 2025 by rpki-client