Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eIZFKOdTLRRAq2piHeSwiakE_iQ.roa
File: eIZFKOdTLRRAq2piHeSwiakE_iQ.roa (raw, json)
Hash identifier: be35ZKD/wzKL+CXvp55ZoAs7lcjvU+TeKCuVxgSxcDA=
Subject key identifier: 78:86:45:28:E7:53:2D:14:40:AB:6A:62:1D:E4:B0:89:A9:04:FE:24
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 02B7
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eIZFKOdTLRRAq2piHeSwiakE_iQ.roa
Signing time: Tue 30 Apr 2024 01:39:30 +0000
ROA not before: Tue 30 Apr 2024 01:39:30 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:5f00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 695 (0x2b7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:39:30 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=78864528E7532D1440AB6A621DE4B089A904FE24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:3d:20:1c:b4:55:b2:be:c5:a2:39:38:c5:f5:
9e:67:99:2f:1c:02:65:ed:20:14:ce:88:78:db:da:
77:5e:58:37:e3:6f:f5:4f:21:e1:56:1f:6c:2e:45:
fd:f5:d6:23:d5:30:c1:26:8f:ba:47:91:75:18:6f:
62:2e:aa:8b:8e:fa:03:b0:6c:d9:cb:34:a6:70:7a:
a0:3c:77:b9:e0:d0:eb:5d:d5:a7:77:ec:1e:45:a5:
c6:bf:07:91:cf:bf:4b:2f:64:e7:48:97:b5:53:17:
3a:98:56:ea:55:e2:a5:fe:28:06:40:b3:4e:37:55:
6c:42:c5:1b:1b:30:1e:7e:a6:09:41:c1:8f:76:57:
2c:4d:f7:20:cd:d0:42:5d:b7:39:83:11:cd:82:a5:
dd:01:67:db:e2:d5:92:88:3d:db:ac:6a:2d:5e:b1:
1b:4b:8b:8d:1a:4a:5d:1a:7c:55:8e:f0:f7:ea:af:
a6:7b:03:55:eb:21:31:65:a8:42:21:1b:92:44:a5:
14:4e:d9:7e:4e:a6:f4:5c:75:21:f6:b7:1a:84:85:
ba:14:56:ea:13:ea:33:94:87:70:dd:f7:31:9c:d9:
e4:ec:34:5f:aa:20:e9:00:d3:66:eb:54:8d:cb:c3:
bc:2e:07:fa:a7:f3:0d:1a:69:18:37:9a:b2:6c:b1:
be:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:86:45:28:E7:53:2D:14:40:AB:6A:62:1D:E4:B0:89:A9:04:FE:24
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/eIZFKOdTLRRAq2piHeSwiakE_iQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:5f00::/40
Signature Algorithm: sha256WithRSAEncryption
36:7a:69:34:83:e8:ea:fa:72:c5:59:be:f1:40:b0:62:03:e2:
2b:1f:80:68:07:f6:37:1b:fd:8e:6c:5e:ed:06:eb:a3:bb:ae:
46:41:a0:3f:8c:99:ee:0f:3f:be:45:3a:32:29:ac:5f:34:13:
6f:53:cb:a3:6f:d8:c6:6a:b3:1b:6b:86:99:db:c4:90:34:fc:
c6:2d:d8:07:dd:93:4b:62:08:86:c7:1e:bd:62:f2:88:ae:05:
76:d4:8a:2a:e2:2f:af:31:e2:e9:b1:3f:77:73:77:f1:e6:82:
ec:e4:a1:50:f8:fb:bc:c5:65:bf:56:9b:78:34:70:56:8d:5b:
24:02:ae:83:91:88:9b:cd:1a:57:b8:ff:3b:3d:86:be:54:79:
34:cd:80:8a:d2:0f:8e:03:39:b4:8a:ba:c2:13:60:6b:97:eb:
23:e5:e1:ef:c0:32:01:28:b4:30:fc:14:e9:54:8c:5e:f0:13:
61:a7:02:27:f4:4a:0c:4d:c7:54:9d:37:54:c8:de:bd:bd:67:
2e:d1:71:0b:62:c2:cb:a8:c6:39:a8:c1:2b:bd:39:4b:9e:32:
7c:d2:de:1a:28:cd:c7:3a:22:f4:c2:41:a1:e3:75:72:2c:62:
4b:ff:4c:1f:51:38:03:b5:83:7f:5f:8d:1e:2e:f1:45:16:27:
92:28:fe:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:01:18 2025 by rpki-client