Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30291/a8vTnHEuXQdQMz1hdsqJhpLWovs.roa
File: a8vTnHEuXQdQMz1hdsqJhpLWovs.roa (raw, json)
Hash identifier: IsHdrXMLkx2xctsVKiNrEbXqUcKB0pTNkb8UnLWpGWg=
Subject key identifier: 6B:CB:D3:9C:71:2E:5D:07:50:33:3D:61:76:CA:89:86:92:D6:A2:FB
Certificate issuer: /CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Certificate serial: 1E
Authority key identifier: 1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/a8vTnHEuXQdQMz1hdsqJhpLWovs.roa
Signing time: Sat 30 Nov 2024 01:32:23 +0000
ROA not before: Sat 30 Nov 2024 01:32:23 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 59125
IP address blocks: 2400:a140::/32 maxlen: 33
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1CB60B40A98AEAE054CAEE4C09CB7D9AEADE3E9D
Validity
Not Before: Nov 30 01:32:23 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=6BCBD39C712E5D0750333D6176CA898692D6A2FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a1:9a:40:8a:89:48:90:68:d2:dc:51:83:de:
57:9f:19:fc:3d:d9:ea:98:ba:07:b5:fc:03:fa:e1:
11:ca:32:0e:4e:88:ae:18:38:b9:e5:1d:9e:b5:88:
99:92:0a:7a:6b:c7:8f:66:49:65:c4:4b:e6:7c:ad:
e3:0f:a6:95:c3:2d:4f:90:b7:d7:11:55:02:ca:c9:
7e:b7:f7:34:7c:39:ba:96:84:bd:94:d3:99:c4:17:
44:f7:be:22:43:c5:55:c7:c1:8a:f7:ef:df:d8:74:
d2:97:90:98:31:74:27:e6:fc:be:8e:fb:99:45:53:
7d:32:6a:c4:77:7c:cc:5b:55:39:19:d6:90:f8:f7:
5e:1e:44:dc:94:89:a2:b7:45:3a:6a:e8:5a:ff:be:
e9:d8:af:ad:da:e3:fb:a5:03:bb:6d:26:7c:31:b2:
99:24:2b:fa:b6:43:cd:6d:67:b4:74:0b:00:f0:92:
e7:63:fb:96:c0:92:45:e7:00:43:a6:94:b1:69:df:
5a:99:35:36:21:db:88:f6:79:e4:d7:b8:3f:cf:3f:
3c:4e:a3:e1:54:be:b4:11:e0:c8:40:09:72:58:3c:
29:aa:b1:1e:e5:a3:cd:5e:8c:07:67:6b:54:e3:6f:
07:b8:fd:c7:19:d8:dc:66:da:c3:20:18:6f:17:d1:
5b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:CB:D3:9C:71:2E:5D:07:50:33:3D:61:76:CA:89:86:92:D6:A2:FB
X509v3 Authority Key Identifier:
keyid:1C:B6:0B:40:A9:8A:EA:E0:54:CA:EE:4C:09:CB:7D:9A:EA:DE:3E:9D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/HLYLQKmK6uBUyu5MCct9murePp0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HLYLQKmK6uBUyu5MCct9murePp0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30291/a8vTnHEuXQdQMz1hdsqJhpLWovs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2400:a140::/32
Signature Algorithm: sha256WithRSAEncryption
09:e3:28:85:ae:7d:b6:80:95:0e:22:db:9d:d3:15:5e:85:1f:
5b:e8:1e:db:86:6e:26:22:40:66:a3:92:c4:e0:cd:99:ea:d8:
c3:05:68:65:5d:7a:1d:40:9e:6f:57:68:ca:a0:ef:66:3a:49:
95:c2:b9:14:7c:24:5c:b8:92:69:13:4b:88:e5:88:a4:96:3c:
74:f3:54:ee:e5:56:49:ef:2e:10:e3:94:98:41:75:f9:5b:82:
97:ae:b4:c6:5e:b2:3a:77:65:3d:4f:92:8a:7e:7d:94:c4:c9:
2d:a2:e9:f2:dc:2e:68:6b:57:4d:13:47:48:48:b4:67:80:d8:
dd:12:6b:e3:76:cd:fd:86:d4:d1:f7:37:41:87:6d:f9:eb:87:
47:e8:9c:d9:94:58:3d:b4:35:34:47:1f:97:59:4c:da:af:b3:
f6:37:32:ad:a3:0c:1d:5c:81:6b:74:85:7c:87:67:43:e0:e5:
d3:68:39:60:c6:83:76:d9:78:90:f9:22:14:b1:08:00:1f:94:
e4:b3:72:c7:a4:5e:4d:b9:82:71:a0:48:24:52:b7:a5:56:0e:
d2:9f:cd:23:cf:ab:80:4c:66:08:51:0b:d6:08:a9:83:aa:ca:
2e:8a:91:5c:44:fc:c2:b6:a2:3d:55:ed:03:86:80:b9:5a:5c:
3f:82:72:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:16 2025 by rpki-client