Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30321/O68Swxdyhk1ylOoviUmvrU9roiU.roa
File: O68Swxdyhk1ylOoviUmvrU9roiU.roa (raw, json)
Hash identifier: hp6PpPM+TxATqIpiEwJrwrBsGL+8Trwa/HZK5dL3t6I=
Subject key identifier: 3B:AF:12:C3:17:72:86:4D:72:94:EA:2F:89:49:AF:AD:4F:6B:A2:25
Certificate issuer: /CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2
Certificate serial: 22
Authority key identifier: 54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/O68Swxdyhk1ylOoviUmvrU9roiU.roa
Signing time: Sun 01 May 2022 01:30:58 +0000
ROA not before: Sun 01 May 2022 01:30:58 +0000
ROA not after: Thu 27 Apr 2023 09:52:34 +0000
asID: 63774
IP address blocks: 2402:b7c0::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 34 (0x22)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5472C40748CDA9E9BC08EAE425C682617E92E4A2
Validity
Not Before: May 1 01:30:58 2022 GMT
Not After : Apr 27 09:52:34 2023 GMT
Subject: CN=3BAF12C31772864D7294EA2F8949AFAD4F6BA225
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2f:e0:4d:91:e3:40:ce:96:67:be:72:d8:c9:
b9:db:ec:e7:b0:23:c6:0c:6a:47:85:b2:0d:73:37:
de:9e:5d:d0:3c:2c:04:3a:f0:e8:a1:0b:07:ed:56:
70:9e:6f:de:5c:7b:5a:34:0d:4d:6e:b0:3d:da:5d:
7e:95:39:cb:94:71:c4:8e:d1:0d:14:9e:8d:c9:c5:
97:6a:bc:bd:08:fe:f4:7f:cd:c8:12:d3:88:25:84:
8e:0d:7d:e4:d5:33:44:b7:1b:9f:20:32:71:be:d6:
63:dd:59:5b:fa:e0:8a:47:a2:e7:29:b3:7e:3b:75:
d3:48:c7:4a:ad:ac:43:21:d9:71:98:19:bb:9f:e5:
14:dc:92:a0:77:bb:77:db:f4:8a:10:a4:ab:a6:50:
a5:cd:d2:a0:65:a0:2e:2b:42:0c:6a:a3:db:c9:3f:
91:0a:ba:e0:14:f9:19:0f:08:1b:bb:ce:fb:24:20:
94:ac:6e:49:6e:a6:35:7b:bd:bd:e0:52:a9:9e:1b:
6e:f7:bb:39:e8:c4:e4:82:4f:82:1c:d3:c8:85:8c:
b0:75:d2:74:11:a4:97:e7:e9:fd:e2:29:75:53:02:
c5:5a:96:82:4e:3d:e0:34:1b:d8:e6:4a:50:07:26:
b8:43:73:10:7d:3e:b7:b0:42:e5:54:5b:1d:1a:8d:
d0:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:AF:12:C3:17:72:86:4D:72:94:EA:2F:89:49:AF:AD:4F:6B:A2:25
X509v3 Authority Key Identifier:
keyid:54:72:C4:07:48:CD:A9:E9:BC:08:EA:E4:25:C6:82:61:7E:92:E4:A2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/VHLEB0jNqem8COrkJcaCYX6S5KI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VHLEB0jNqem8COrkJcaCYX6S5KI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30321/O68Swxdyhk1ylOoviUmvrU9roiU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2402:b7c0::/32
Signature Algorithm: sha256WithRSAEncryption
95:c9:4a:75:13:05:da:1b:14:c2:fe:90:0a:fc:f8:d7:97:15:
23:d6:c6:d1:0c:88:40:b5:25:32:0b:a2:ba:b9:35:0c:ee:64:
28:88:50:c8:4a:b5:12:09:78:7a:a0:2e:9f:09:3b:35:6b:2a:
77:ae:80:a0:71:36:97:39:b8:65:6e:3a:80:ef:dd:1f:dd:11:
42:98:1b:ee:b9:40:eb:93:d9:c6:c6:0d:2c:1b:68:78:e4:c2:
56:14:73:ac:cd:d4:39:a9:c4:8d:56:1d:07:94:f6:dd:99:0d:
2e:ed:fc:da:5c:ab:53:cb:b7:de:fa:a5:65:24:0a:63:2a:5e:
e0:6b:fb:61:f6:34:29:86:49:88:57:1d:57:4a:62:a3:59:d7:
0a:47:ce:81:c4:06:d7:9e:42:79:cc:b9:36:2c:80:10:ee:db:
77:18:a0:94:52:99:75:30:a0:59:7b:ef:5b:1c:45:da:ea:51:
d3:ee:ab:1a:8f:af:4a:8c:92:39:4a:83:37:73:da:26:9a:1a:
e1:ed:61:e3:9c:a4:a3:44:60:79:e4:5b:5c:5f:18:b6:c7:91:
00:44:bd:a7:77:fd:e7:f6:68:f4:53:f7:78:d0:d5:7c:aa:7b:
e0:41:72:f3:67:51:39:1e:35:e2:78:7a:a8:68:ed:6c:75:4a:
8b:f4:b6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:46 2025 by rpki-client