Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-8XNKprG28d9P4g9wtV15D45q9Y.roa
File: -8XNKprG28d9P4g9wtV15D45q9Y.roa (raw, json)
Hash identifier: 041vQk21hTN8WSvLYXz+9WWSV0XWNKaQ4nBxVlYrci4=
Subject key identifier: FB:C5:CD:2A:9A:C6:DB:C7:7D:3F:88:3D:C2:D5:75:E4:3E:39:AB:D6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 07A1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-8XNKprG28d9P4g9wtV15D45q9Y.roa
Signing time: Tue 30 Apr 2024 02:06:29 +0000
ROA not before: Tue 30 Apr 2024 02:06:29 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.8.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1953 (0x7a1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:06:29 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=FBC5CD2A9AC6DBC77D3F883DC2D575E43E39ABD6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:88:b3:7a:63:2f:a4:b6:c1:3c:ce:44:5c:a2:
75:a6:d9:91:c1:d9:86:52:57:97:63:ee:eb:d0:4a:
4f:2d:4f:78:ab:f1:5c:d8:5b:88:c9:ef:26:de:49:
91:a3:9c:6b:f3:ed:89:1c:59:c9:97:85:27:3e:7a:
fe:35:c6:8f:60:07:51:93:2c:d5:9b:c1:fd:b6:44:
ec:94:af:b3:6f:9d:80:c6:13:22:ac:70:87:23:49:
3f:cc:e5:4f:8b:50:69:41:1c:85:84:35:c3:1e:06:
c3:f2:a2:58:ce:3b:b7:3d:01:f4:6b:e8:45:97:c1:
e9:24:96:4a:7f:98:c2:a8:cf:f2:b5:fe:4d:ab:b8:
fd:96:f6:a5:96:61:da:e2:68:b0:52:5a:aa:51:2e:
68:91:1e:46:e0:10:17:a9:3d:35:b5:76:66:e0:58:
18:68:de:ee:3c:a9:8d:61:57:c8:f0:40:99:19:4a:
aa:b4:18:3b:a8:5f:1e:c4:9f:37:bc:e2:a0:56:44:
70:9f:a5:6e:10:95:72:50:a9:26:e8:a0:3d:32:84:
3b:cc:3b:e6:e4:eb:a0:08:0b:3b:bd:6a:38:7e:6b:
cc:33:e7:7d:43:e4:cd:67:85:2f:af:17:43:b8:03:
11:d1:90:4c:8a:5a:f8:35:d8:ea:24:1c:5b:fd:db:
7d:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:C5:CD:2A:9A:C6:DB:C7:7D:3F:88:3D:C2:D5:75:E4:3E:39:AB:D6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-8XNKprG28d9P4g9wtV15D45q9Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.8.0/21
Signature Algorithm: sha256WithRSAEncryption
80:c7:4b:15:32:ea:75:66:8f:4e:b1:60:1b:73:34:ea:a4:4e:
50:fe:b7:24:ee:e4:3b:77:02:e8:7f:e0:31:f8:b1:6a:a5:3a:
c3:3e:53:dd:13:38:fe:13:1f:77:89:0b:6c:e8:70:2a:a1:09:
fe:d0:9e:52:10:45:f8:46:23:5d:5b:d5:f4:87:dd:de:4b:70:
fe:95:a3:4f:d6:bf:c5:d9:28:ea:f1:5f:ea:3d:59:e6:13:ee:
fa:6e:76:02:50:9d:be:4d:a3:86:6a:f9:94:96:bb:45:7a:59:
a8:be:4b:9f:9d:e3:43:53:4b:d1:5c:ce:ee:b0:77:36:4c:b4:
c1:72:58:69:b8:17:d3:fd:22:17:d4:39:65:c8:96:02:3e:21:
82:31:a7:6e:0b:b0:95:9e:b3:76:3a:12:4c:74:ac:4a:f4:aa:
19:2e:80:da:51:88:63:d1:81:52:9c:be:4d:2f:92:c1:d3:b0:
70:8a:d7:29:2a:df:e4:46:8d:d4:f6:62:0c:c4:4c:42:43:10:
10:f9:cf:33:52:84:a1:f6:24:76:05:b1:ef:86:44:ba:09:79:
3e:35:bf:1e:a2:d1:92:81:43:0f:5a:21:c6:67:5d:ed:52:bd:
6d:90:7a:90:69:40:be:47:1c:56:0a:6f:23:0d:eb:91:3e:8e:
d8:73:3a:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:27 2025 by rpki-client