Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30102/_T-aPsJK5Hyx2MNvGbtPP-izxEA.roa
File: _T-aPsJK5Hyx2MNvGbtPP-izxEA.roa (raw, json)
Hash identifier: wWgMMO00g36buoPJiTqBR9V+Hqgtgv/l9q1IvjVQRxk=
Subject key identifier: FD:3F:9A:3E:C2:4A:E4:7C:B1:D8:C3:6F:19:BB:4F:3F:E8:B3:C4:40
Certificate issuer: /CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Certificate serial: 2B
Authority key identifier: 39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/_T-aPsJK5Hyx2MNvGbtPP-izxEA.roa
Signing time: Wed 31 Jul 2024 01:29:24 +0000
ROA not before: Wed 31 Jul 2024 01:29:24 +0000
ROA not after: Tue 15 Jul 2025 01:30:02 +0000
asID: 9617
IP address blocks: 2400:3800::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 43 (0x2b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=39CE09592C9DA61CC03C3D324A7C6CAC4777CCCF
Validity
Not Before: Jul 31 01:29:24 2024 GMT
Not After : Jul 15 01:30:02 2025 GMT
Subject: CN=FD3F9A3EC24AE47CB1D8C36F19BB4F3FE8B3C440
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7d:6c:81:e0:5e:13:ab:af:22:8a:73:12:07:
cc:2f:c1:b4:18:ae:16:69:ed:85:09:ac:31:66:01:
16:4a:5f:5e:65:cb:c2:ff:5a:c4:f8:24:dd:ed:db:
f4:96:71:98:69:2b:cc:b9:7b:ba:ea:b1:45:67:16:
8c:46:07:e8:63:44:a5:a6:91:37:0e:e3:b5:cd:79:
7c:5a:88:f1:10:7e:cc:a8:cd:55:4b:75:ba:bb:db:
ea:94:52:2b:e9:fd:0e:cd:8c:d1:0c:03:0a:79:7e:
86:fd:2b:c0:57:78:0e:04:47:50:7d:2e:78:85:e3:
b3:a2:d0:84:91:af:03:54:33:cc:bd:84:95:0d:ae:
1a:9d:f4:0e:17:84:34:e2:97:b1:d3:a4:c7:e0:d0:
92:e0:28:78:cf:10:80:ca:10:0f:f3:e0:1e:46:20:
8f:55:33:78:fe:d4:b1:db:0c:72:08:53:17:40:10:
ed:c0:d2:e8:f2:f5:c2:52:da:37:23:85:d8:eb:15:
a7:47:01:27:01:b6:17:44:29:02:47:04:5b:46:11:
cd:b5:88:e3:ba:70:a2:fa:b7:78:f2:e3:27:a4:97:
ef:66:a6:19:ff:00:e5:7a:77:80:0d:fd:b5:11:10:
0e:21:a0:89:f7:cc:11:24:a6:e3:d5:4b:51:64:b1:
82:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:3F:9A:3E:C2:4A:E4:7C:B1:D8:C3:6F:19:BB:4F:3F:E8:B3:C4:40
X509v3 Authority Key Identifier:
keyid:39:CE:09:59:2C:9D:A6:1C:C0:3C:3D:32:4A:7C:6C:AC:47:77:CC:CF
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/Oc4JWSydphzAPD0ySnxsrEd3zM8.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Oc4JWSydphzAPD0ySnxsrEd3zM8.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30102/_T-aPsJK5Hyx2MNvGbtPP-izxEA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:3800::/32
Signature Algorithm: sha256WithRSAEncryption
71:84:7c:1e:cf:4e:c8:74:39:50:ee:f2:01:bf:4a:13:54:49:
12:4d:80:4b:e7:4a:03:55:e2:f4:f0:04:5d:0b:52:4f:20:3d:
70:d5:64:f8:50:f3:58:7f:e0:2a:53:12:43:e8:ca:5d:db:3e:
f7:6d:68:72:40:1d:0e:22:2e:54:ef:39:f7:82:8f:e1:54:f2:
6a:0c:db:06:e5:0b:0d:89:72:ef:09:95:6b:29:9b:40:d6:96:
18:55:8a:1b:0b:a1:df:f9:eb:37:e4:31:f4:c1:43:d0:63:52:
90:61:27:0b:de:21:fe:1c:ad:5d:77:da:d8:42:e2:1a:2a:66:
da:a0:34:1c:9f:8a:df:5e:9e:f1:ee:64:dd:71:66:10:d6:e4:
f6:98:42:16:74:09:e0:24:e8:87:7a:53:a4:65:23:71:35:55:
e5:74:96:7c:d4:fb:55:54:b4:3c:0d:95:07:47:0a:36:34:0b:
06:10:3e:76:b4:16:0e:ac:56:e6:9a:5f:78:9b:1d:3b:bf:4c:
82:49:b1:cf:2b:f3:fc:33:42:c2:a5:e9:b7:76:00:a8:21:bf:
ff:bb:2f:60:62:10:09:8f:60:da:d1:31:13:a6:64:ae:d4:d3:
82:01:a5:50:ae:c6:ba:7f:9d:d5:8c:b7:d9:4a:63:99:f4:4c:
ed:70:fe:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:02:12 2025 by rpki-client