Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1PEjog9qxjf6pXh2DCLNWR-jdhg.roa
File: 1PEjog9qxjf6pXh2DCLNWR-jdhg.roa (raw, json)
Hash identifier: zTLlaZUtKYxEaSggw7sDye8evyX5G9UCA94jocsT23s=
Subject key identifier: D4:F1:23:A2:0F:6A:C6:37:FA:A5:78:76:0C:22:CD:59:1F:A3:76:18
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0908
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1PEjog9qxjf6pXh2DCLNWR-jdhg.roa
Signing time: Tue 30 Apr 2024 02:28:40 +0000
ROA not before: Tue 30 Apr 2024 02:28:40 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 1.67.236.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2312 (0x908)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:28:40 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=D4F123A20F6AC637FAA578760C22CD591FA37618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8c:10:b3:84:d2:b0:42:e7:0e:03:24:84:c2:
cb:42:48:42:a7:13:89:a1:f4:3c:0d:f0:64:39:18:
1a:7d:bf:ad:06:3c:d8:f7:16:19:49:46:77:e8:84:
2d:e4:15:d2:50:47:1c:78:5c:93:f2:30:ae:c1:fe:
be:75:2c:f3:20:c3:52:ec:57:83:c6:59:87:2f:60:
26:ab:f8:a2:d2:05:a4:ff:f6:25:37:2d:6b:c0:9b:
35:ba:3f:1b:f9:51:fc:1c:a7:ee:e3:74:72:28:d8:
09:50:07:28:ba:3c:45:95:2f:da:52:78:e7:02:fa:
cd:82:2e:0c:7a:9a:92:15:72:25:f1:fe:da:2f:19:
31:a1:6f:b3:64:b9:9a:be:31:96:5b:66:1a:eb:e6:
49:35:96:5b:ed:d9:b1:f7:e7:eb:04:0b:e6:05:4d:
e5:fa:5c:43:29:a0:16:23:42:bb:ea:4c:73:f1:15:
2b:20:bd:c5:9b:c2:80:d0:4a:4e:4b:b2:66:f8:a3:
f9:fc:65:79:fd:70:d1:3e:06:2b:74:98:14:8c:8a:
a9:20:ff:5b:3d:e2:7d:5f:40:5c:b6:3e:84:2c:05:
a4:9a:52:f9:12:89:5f:80:a1:88:ef:ce:85:3c:ec:
88:ab:ae:d9:67:97:0d:b9:32:cf:8e:4d:34:b4:98:
67:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F1:23:A2:0F:6A:C6:37:FA:A5:78:76:0C:22:CD:59:1F:A3:76:18
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1PEjog9qxjf6pXh2DCLNWR-jdhg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.236.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:ad:54:b6:2c:dd:64:55:83:ef:b0:2c:50:0d:2c:79:a2:78:
88:10:93:8f:e3:6b:09:67:40:24:de:af:12:4a:31:43:d3:e4:
5a:7e:13:30:fb:be:a7:f3:7b:3d:7b:78:6e:ff:a7:65:53:88:
89:e2:4f:5d:f8:28:14:93:48:38:ef:56:d8:4a:67:ce:4d:1d:
3b:d0:52:a0:2e:1c:8d:14:a0:7f:c1:d9:9f:ff:9c:f3:04:cd:
db:64:73:e1:5f:bf:e7:8e:2e:03:d8:1c:0d:7c:1c:de:b3:40:
53:12:5e:24:3b:f0:43:a8:28:99:f7:c4:81:8f:a8:b7:2f:6e:
e0:3b:c2:ef:aa:2b:f8:50:bd:a7:ad:c7:4b:5f:23:ee:b3:ad:
29:b3:b9:a4:1a:72:d5:28:da:bc:43:e0:d3:b2:a2:9d:c0:41:
66:18:ab:36:31:5e:87:e8:dd:0b:ff:1e:c8:3e:c3:60:c0:fa:
64:82:65:58:2a:00:22:76:b9:77:9a:10:a2:58:ee:0f:87:ab:
a9:34:e4:bc:f3:c8:79:7e:7c:07:da:65:21:7e:b4:44:0b:62:
18:73:6a:70:f3:17:f8:74:fa:42:88:24:f9:1c:77:f7:a0:13:
6e:a9:da:f7:30:a4:e6:98:56:3f:94:c2:54:2c:5e:97:64:6b:
89:5c:3c:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:20 2025 by rpki-client