Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30245/F4_6mMGK-HTepssz1B8N-bnlse0.roa
File: F4_6mMGK-HTepssz1B8N-bnlse0.roa (raw, json)
Hash identifier: axV7ZGLQ7OOMyJT4G1Pv+HssyML+VnNx/zerJPxUQl8=
Subject key identifier: 17:8F:FA:98:C1:8A:F8:74:DE:A6:CB:33:D4:1F:0D:F9:B9:E5:B1:ED
Certificate issuer: /CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A
Certificate serial: 1D
Authority key identifier: 3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/F4_6mMGK-HTepssz1B8N-bnlse0.roa
Signing time: Sat 31 Aug 2024 01:31:37 +0000
ROA not before: Sat 31 Aug 2024 01:31:37 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 10000
IP address blocks: 2405:ed00::/32 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 29 (0x1d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3C267D028FD99C613E3A6F425415D7DB7FCD1D4A
Validity
Not Before: Aug 31 01:31:37 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=178FFA98C18AF874DEA6CB33D41F0DF9B9E5B1ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:f0:63:49:94:ac:8c:71:fd:7c:29:41:9e:fc:
7d:83:5a:0c:26:1b:46:79:0e:4b:90:4d:a0:a1:98:
97:ef:99:6f:4c:06:20:b7:2c:96:47:70:e6:e9:16:
f2:61:e3:2b:84:d4:8c:9d:f8:0e:c9:22:53:11:44:
6e:f9:25:93:3e:e5:af:89:ee:43:e2:c4:2b:3f:65:
f8:da:28:33:55:9d:0f:8c:bc:f0:9c:1b:c9:96:53:
fd:32:12:10:ae:79:09:f0:34:33:e7:05:e4:13:c3:
a4:b0:2b:fa:a5:14:35:58:5f:4b:df:bf:42:0d:b8:
bf:81:c9:6d:1b:82:d5:08:e1:cf:94:7c:93:42:06:
2c:d6:97:c7:2d:4c:3f:bb:37:64:0c:39:27:b8:7c:
6c:c5:ad:a5:50:a7:c8:b9:84:63:41:fd:7c:e2:22:
d3:f9:91:cb:60:6c:5b:44:9c:57:5e:e4:84:83:08:
c9:e2:0b:ef:84:5d:1f:eb:ac:ec:66:d8:41:6d:e3:
a7:14:49:57:c9:e8:dc:c2:67:d9:4b:35:7d:da:69:
44:4d:89:d6:ba:e6:58:17:3b:a8:53:06:4e:43:6d:
bc:de:f4:f5:33:05:7d:de:0c:ff:3c:b4:d0:56:50:
c2:71:73:ea:19:c0:cb:82:4e:58:cd:5e:63:ef:af:
7d:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:8F:FA:98:C1:8A:F8:74:DE:A6:CB:33:D4:1F:0D:F9:B9:E5:B1:ED
X509v3 Authority Key Identifier:
keyid:3C:26:7D:02:8F:D9:9C:61:3E:3A:6F:42:54:15:D7:DB:7F:CD:1D:4A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PCZ9Ao_ZnGE-Om9CVBXX23_NHUo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30245/F4_6mMGK-HTepssz1B8N-bnlse0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:ed00::/32
Signature Algorithm: sha256WithRSAEncryption
37:56:5e:e9:d5:6f:21:3e:f0:42:03:e3:6b:a8:2f:96:e8:8a:
27:b8:86:35:1c:a3:4a:33:8f:c8:4a:d6:3c:6a:f1:d0:a4:25:
48:48:09:bb:af:c1:1a:ac:42:ce:89:be:c4:95:85:cb:8d:79:
39:f8:c3:ba:26:3c:e6:b6:09:8f:90:a0:f9:01:da:f0:03:68:
db:fa:ba:7b:02:96:73:f2:38:36:18:ab:3e:b4:a3:96:c2:40:
50:0d:e4:23:cf:ee:0b:9b:ef:a5:19:87:30:da:d8:3b:c9:b7:
85:51:f3:d6:38:2f:6b:32:6f:5b:60:62:f4:9c:ed:de:d0:c6:
e7:12:a6:bc:dd:8d:eb:95:74:95:bd:98:c4:61:62:29:3a:ad:
1b:1f:d5:70:c7:7d:ea:02:4b:6a:9d:e1:9a:b0:31:c3:49:9c:
cd:de:14:49:12:2d:a8:65:3e:6b:aa:d3:ac:62:5e:e1:5d:77:
d3:af:dc:dc:df:f2:17:21:96:1b:d0:05:b7:69:8d:81:fc:ea:
f8:c5:8c:c0:1e:68:04:16:0f:51:e0:c1:d3:c9:3d:96:65:f4:
e6:24:d3:37:5c:7d:ee:8a:1c:dd:4b:26:63:47:d8:b6:33:08:
1b:cc:88:49:c3:69:6f:ad:09:42:6b:e2:22:6c:ba:ba:b6:9d:
57:26:88:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:39 2025 by rpki-client