Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30316/ukby2XTNC1U6nri9MYrABj9L6cg.roa
File: ukby2XTNC1U6nri9MYrABj9L6cg.roa (raw, json)
Hash identifier: UwV4rn8/p/8/LMrz4/68iq42pEQ8jVmLjXY2PGSC4rU=
Subject key identifier: BA:46:F2:D9:74:CD:0B:55:3A:9E:B8:BD:31:8A:C0:06:3F:4B:E9:C8
Certificate issuer: /CN=51C29DDD0721552C44D8BCB4EF865BCA1071224D
Certificate serial: 11
Authority key identifier: 51:C2:9D:DD:07:21:55:2C:44:D8:BC:B4:EF:86:5B:CA:10:71:22:4D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UcKd3QchVSxE2Ly074ZbyhBxIk0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/ukby2XTNC1U6nri9MYrABj9L6cg.roa
Signing time: Wed 11 Dec 2024 08:50:23 +0000
ROA not before: Wed 11 Dec 2024 08:50:23 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 24229
IP address blocks: 2404:168::/32 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17 (0x11)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51C29DDD0721552C44D8BCB4EF865BCA1071224D
Validity
Not Before: Dec 11 08:50:23 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=BA46F2D974CD0B553A9EB8BD318AC0063F4BE9C8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7b:3e:29:f1:28:a0:3a:dc:e5:09:a5:61:0f:
f7:63:24:f7:c4:61:e4:58:26:88:ed:ce:f5:91:ad:
9b:26:59:fb:88:4b:bb:6e:c9:0c:f6:e9:13:d5:0c:
28:3b:d8:2d:b7:da:b0:03:cf:ee:3e:a7:18:6b:dd:
b6:50:60:74:9b:fc:b4:5d:43:29:b7:39:c4:f8:43:
ef:2b:1b:f5:1d:3a:99:71:79:61:9c:4c:d0:c9:f1:
0b:f2:6e:b9:4c:3b:e7:bc:95:ae:22:97:50:f4:f1:
0c:f4:67:a1:a9:14:b1:e7:d9:e1:8e:d7:1a:dc:d9:
39:af:43:62:eb:f1:94:2b:20:63:53:1c:23:b0:7b:
51:d0:fb:b1:0f:0c:b4:8f:85:86:fd:a7:3e:6a:c8:
21:3a:41:3f:8e:79:ac:9d:00:01:97:bc:56:5f:90:
b8:69:c7:40:3c:3b:92:62:e8:f9:9a:2b:9f:40:48:
0c:84:4c:0f:94:00:52:fd:7f:6c:49:66:c6:a1:57:
eb:ad:4e:2f:58:cf:c1:90:e0:c3:85:7e:aa:9c:22:
26:24:16:11:16:3a:7c:4e:87:af:5c:47:08:1e:57:
ce:1e:e0:c6:3d:00:9e:0c:ac:a5:e9:ea:3f:e8:1a:
5b:3d:e1:b2:04:02:c0:d2:05:e8:08:fd:93:1b:bb:
0f:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:46:F2:D9:74:CD:0B:55:3A:9E:B8:BD:31:8A:C0:06:3F:4B:E9:C8
X509v3 Authority Key Identifier:
keyid:51:C2:9D:DD:07:21:55:2C:44:D8:BC:B4:EF:86:5B:CA:10:71:22:4D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/UcKd3QchVSxE2Ly074ZbyhBxIk0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UcKd3QchVSxE2Ly074ZbyhBxIk0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30316/ukby2XTNC1U6nri9MYrABj9L6cg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2404:168::/32
Signature Algorithm: sha256WithRSAEncryption
5a:24:ff:ea:f6:89:00:97:1c:05:60:db:b9:d2:43:cf:a9:e7:
be:1f:17:06:f0:08:48:47:38:55:da:c8:8e:80:df:ac:70:34:
f2:59:4e:90:a9:8f:2c:1e:b0:77:06:cb:d8:ec:bb:21:1a:fc:
ce:b2:84:ed:38:a8:7d:22:e7:36:30:6b:fc:0e:c3:f3:e2:0b:
e7:61:60:5f:8a:5d:58:d2:5b:45:d9:65:a2:e5:3e:0d:a4:ae:
91:9a:ed:76:f6:5e:8a:b4:20:38:bc:88:8c:a6:02:51:bc:40:
a1:5b:32:48:e9:5c:78:0b:19:5a:0a:2a:4d:55:82:e3:3a:cf:
2d:04:52:06:c1:85:b6:1b:d3:69:c3:92:55:69:2b:7f:e5:2b:
8f:2b:ff:5d:80:80:fb:88:3d:c6:91:27:68:ea:98:ae:ca:54:
af:26:87:7f:f7:4b:ac:5c:7c:ce:34:3e:60:34:1d:35:72:dd:
38:f3:97:cc:e7:0f:59:c0:75:ad:db:4d:f1:1b:48:13:64:c8:
b7:4b:e2:46:50:b4:ea:ca:73:04:1b:79:13:2a:d5:47:fe:d1:
8b:96:9a:e7:f3:0c:e3:57:04:15:34:d9:98:64:d4:18:1a:e9:
b4:b3:d7:38:59:cb:e5:64:0d:7b:36:ec:16:b4:37:91:e7:b7:
21:96:b9:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:18 2025 by rpki-client