Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z1OqSCZz46XQkrJBtkMKAjyXC-o.roa
File: z1OqSCZz46XQkrJBtkMKAjyXC-o.roa (raw, json)
Hash identifier: A77afSQp889sNmGYRBb/gV/v+aMT63vj5vZY1sHzllY=
Subject key identifier: CF:53:AA:48:26:73:E3:A5:D0:92:B2:41:B6:43:0A:02:3C:97:0B:EA
Certificate issuer: /CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Certificate serial: 02C5
Authority key identifier: 51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z1OqSCZz46XQkrJBtkMKAjyXC-o.roa
Signing time: Tue 30 Apr 2024 01:39:36 +0000
ROA not before: Tue 30 Apr 2024 01:39:36 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 240a:6b:bf00::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 709 (0x2c5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5126173B8D6B3FF10E3F03FB0560FE6551DEA2DB
Validity
Not Before: Apr 30 01:39:36 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=CF53AA482673E3A5D092B241B6430A023C970BEA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:88:a1:f6:77:8b:56:41:5b:a4:aa:86:b8:33:
8f:e9:90:8f:79:b1:7b:b9:82:8e:30:1e:a8:e0:93:
89:58:aa:1c:57:01:4f:8b:87:fc:cf:1f:c2:35:8a:
41:39:83:c2:31:40:f1:35:bd:66:4c:ae:14:a1:86:
88:9a:56:83:ca:9d:d1:9a:5f:d0:0f:2f:9c:79:be:
2a:fd:3a:b3:8d:1e:d4:1f:ed:0d:4c:d5:b4:fb:23:
30:60:4c:fb:b0:c0:2a:2c:c3:25:e0:ae:bc:1b:38:
4b:21:27:89:78:96:db:31:f2:2c:ac:db:24:df:87:
c8:1c:58:2a:c4:53:16:bc:02:e6:6f:fc:b9:cf:cb:
e0:bf:02:cf:cf:19:36:3b:00:b4:71:d4:34:c0:79:
6a:96:cc:46:e1:bb:97:89:3a:83:1c:40:f9:e1:21:
a8:ec:ae:61:c1:30:61:19:9b:79:93:60:82:d6:24:
a5:d6:94:80:0d:9c:75:75:86:6f:69:5b:30:67:49:
a2:ec:ca:b6:2f:35:6e:5f:a5:d0:b0:92:02:be:9d:
23:2e:45:60:6c:90:19:26:54:24:88:5b:6e:af:4d:
b1:d5:71:f5:42:fe:4e:6f:c9:ba:0b:6b:c0:c0:0b:
be:d5:51:7c:68:19:6c:d8:a3:00:dd:06:f1:72:23:
f0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:53:AA:48:26:73:E3:A5:D0:92:B2:41:B6:43:0A:02:3C:97:0B:EA
X509v3 Authority Key Identifier:
keyid:51:26:17:3B:8D:6B:3F:F1:0E:3F:03:FB:05:60:FE:65:51:DE:A2:DB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/USYXO41rP_EOPwP7BWD-ZVHeots.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/USYXO41rP_EOPwP7BWD-ZVHeots.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30129/z1OqSCZz46XQkrJBtkMKAjyXC-o.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
240a:6b:bf00::/40
Signature Algorithm: sha256WithRSAEncryption
19:80:66:a4:ed:97:a3:1c:d7:d4:d7:7b:d2:8e:16:cb:61:60:
61:81:0b:a9:76:2a:47:18:29:b2:3b:06:9e:bb:29:c9:d6:ed:
af:ec:c8:1d:96:d6:1d:27:d2:5b:bc:f3:a3:c1:d6:42:85:0f:
01:6a:f4:c8:63:fe:12:2d:ea:b6:88:1e:29:3b:0a:4b:f9:75:
13:29:09:c4:e8:c1:f3:29:a6:a0:f4:21:a9:af:d3:5f:69:e6:
ff:d4:69:70:d7:a8:6a:e6:60:6f:87:f3:53:1b:0f:78:f1:44:
1b:3d:48:ad:c4:10:4a:77:d7:ed:8d:0c:22:41:5f:dc:61:a5:
23:7d:7d:67:55:8f:9e:f6:ef:b5:cd:2d:ee:fc:ea:dc:23:92:
8b:2b:00:13:d5:ef:7b:2f:c1:b0:19:cd:53:9a:68:00:6f:3c:
01:46:79:c9:bb:c0:99:71:e5:50:ac:93:c5:45:ad:a5:f3:23:
1f:8f:c2:bf:34:ac:65:0d:09:e2:91:0e:74:da:84:8c:73:87:
ed:a5:5d:f1:13:bc:1b:71:11:f5:06:8e:c0:13:4c:3e:b8:9e:
1b:39:dc:71:f4:dd:92:26:8e:65:f6:17:0d:34:21:b3:4e:af:
8e:b6:31:bb:d4:7c:c8:b1:4d:81:81:a7:e9:0d:9c:12:3c:e8:
f5:0d:08:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:46:39 2025 by rpki-client