Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30349/QKipjVHfoNIJTAlKEfx42fp5Njg.roa
File: QKipjVHfoNIJTAlKEfx42fp5Njg.roa (raw, json)
Hash identifier: xO2EpiWqrzCfiB2iZ/yZVNY5lAsJFG94Qmsmr7RNFzE=
Subject key identifier: 40:A8:A9:8D:51:DF:A0:D2:09:4C:09:4A:11:FC:78:D9:FA:79:36:38
Certificate issuer: /CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Certificate serial: 1E
Authority key identifier: 5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/QKipjVHfoNIJTAlKEfx42fp5Njg.roa
Signing time: Wed 18 Sep 2024 07:28:08 +0000
ROA not before: Wed 18 Sep 2024 07:28:08 +0000
ROA not after: Mon 15 Sep 2025 01:30:03 +0000
asID: 131951
IP address blocks: 2405:25c0:a100::/40 maxlen: 40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 30 (0x1e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5A5A08F9BFE0C541CC8D98027A16497EA5192023
Validity
Not Before: Sep 18 07:28:08 2024 GMT
Not After : Sep 15 01:30:03 2025 GMT
Subject: CN=40A8A98D51DFA0D2094C094A11FC78D9FA793638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:04:27:b7:ea:a8:58:b4:5f:b9:91:c9:b1:7f:
1e:33:0d:8c:8c:cf:f9:00:8c:1d:9a:a8:de:e1:73:
cb:ad:68:11:c3:e1:c6:f1:be:22:73:c4:88:de:f1:
79:47:b3:b0:9c:08:41:06:f0:5a:2e:c1:35:22:f0:
68:39:22:4a:78:7a:36:a8:df:65:1b:48:c3:c1:d9:
37:1f:e1:3c:00:fd:ed:81:8e:f0:3e:0c:bb:0a:66:
2d:86:34:be:c9:86:01:ff:0f:50:08:71:36:e5:59:
2a:fb:88:2b:45:d2:cb:8f:00:19:88:6e:89:96:b9:
04:3e:33:85:ba:8f:52:ad:91:2f:92:13:b0:49:49:
58:d3:b6:91:e9:b0:07:53:1d:92:cf:9d:61:fc:4d:
44:43:29:fb:af:72:7b:23:da:a0:d8:27:ea:cf:a4:
bf:5f:7b:ac:76:27:c8:77:16:75:b9:5e:da:7e:c0:
73:65:09:e3:e3:5a:50:3f:cd:0a:24:df:42:41:60:
e5:fd:30:e6:35:f0:b4:be:1a:74:a7:f8:ce:35:ad:
7f:65:dc:97:a8:c1:fc:66:08:bd:2d:cf:91:63:2b:
7a:c5:82:b2:34:0c:ae:df:85:0b:db:d0:b4:ee:ce:
67:9d:07:44:b5:8d:96:84:2c:c7:da:0e:10:8b:ef:
99:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A8:A9:8D:51:DF:A0:D2:09:4C:09:4A:11:FC:78:D9:FA:79:36:38
X509v3 Authority Key Identifier:
keyid:5A:5A:08:F9:BF:E0:C5:41:CC:8D:98:02:7A:16:49:7E:A5:19:20:23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/WloI-b_gxUHMjZgCehZJfqUZICM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WloI-b_gxUHMjZgCehZJfqUZICM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30349/QKipjVHfoNIJTAlKEfx42fp5Njg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2405:25c0:a100::/40
Signature Algorithm: sha256WithRSAEncryption
14:db:9b:af:a9:3e:b5:8f:de:24:9a:5a:16:60:f2:e5:46:16:
14:aa:70:96:8e:80:e7:12:ca:98:1d:85:9a:9b:2d:5b:23:2a:
83:e9:85:8a:20:2d:07:0b:58:7b:b3:8f:d0:d0:87:f8:71:5b:
21:1d:7f:7e:b2:93:03:6c:9b:48:bf:37:41:62:28:5b:fb:62:
24:34:e2:9b:ef:35:00:ed:5b:94:50:bd:88:10:69:fe:56:5e:
1e:f7:4d:a7:8f:87:35:5f:c9:29:ff:e3:00:14:8a:82:31:e5:
05:b8:94:8a:de:1a:51:c5:69:d0:aa:85:2b:b3:20:d4:c6:30:
44:f5:f5:6d:c0:ad:56:6c:86:92:2c:75:0b:9e:b4:76:0f:3f:
50:dc:f8:e9:d7:6c:6f:72:92:6d:ca:b9:5e:64:b9:50:b5:26:
d2:95:9f:ba:c5:f5:a3:93:79:47:41:a8:1b:22:03:8d:72:ba:
5b:a3:13:bf:24:98:d5:bf:eb:bb:00:14:c5:9f:ad:ae:57:6f:
9e:be:63:24:30:a1:40:e8:e2:80:7c:19:32:0c:72:99:4c:de:
9d:41:18:aa:6f:74:43:f3:24:ab:64:48:84:36:a2:c3:54:66:
9b:cf:ab:29:e6:69:52:8d:28:dc:65:81:64:56:ec:81:35:05:
ac:c0:97:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:39 2025 by rpki-client