Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/1ne8mrJfS6AMWZ4seDjNE2CaBvA.roa
File: 1ne8mrJfS6AMWZ4seDjNE2CaBvA.roa (raw, json)
Hash identifier: dtQnR/v4KIpek+pkZx3RP2rgNRMMbN0B8E869i95r+8=
Subject key identifier: D6:77:BC:9A:B2:5F:4B:A0:0C:59:9E:2C:78:38:CD:13:60:9A:06:F0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0150
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1ne8mrJfS6AMWZ4seDjNE2CaBvA.roa
Signing time: Wed 24 May 2023 16:31:18 +0000
ROA not before: Wed 24 May 2023 16:31:18 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.79.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 336 (0x150)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:31:18 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=D677BC9AB25F4BA00C599E2C7838CD13609A06F0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:56:9c:82:fc:d1:05:a6:e4:26:f9:9e:c5:
e5:0d:14:74:ab:e0:68:73:de:12:c4:42:7e:59:c2:
47:ec:20:2a:e8:da:59:4a:84:6f:93:d1:00:d2:7e:
98:ad:c8:be:75:dc:58:e4:92:22:17:2a:53:b0:b3:
e8:10:51:95:4a:54:4c:b9:0f:12:56:ea:8f:ad:c0:
fa:6e:d2:fd:79:7d:b6:42:b1:4c:66:6c:d8:f6:84:
c5:d9:2c:19:37:0e:28:f5:b7:e8:37:66:ca:58:d8:
bb:67:cc:23:b1:81:e6:c8:a6:08:a2:98:7c:c0:d3:
9e:6a:49:b8:f7:ba:bb:8f:2a:80:1c:36:bc:75:83:
a5:77:4d:d4:6f:e9:a0:35:8b:d8:59:48:5c:ba:38:
47:34:25:c4:77:0f:b2:7b:81:2b:15:84:7a:e6:64:
58:a8:e0:c1:52:65:a8:f9:45:c5:03:57:6f:68:cd:
a5:8c:5a:c5:47:d0:e3:54:2b:40:58:49:85:cb:60:
b5:26:e6:42:b9:78:03:25:72:04:f6:29:ab:68:78:
97:b0:26:b4:9f:e5:fc:11:e7:82:33:c4:ff:49:ea:
88:17:46:79:51:3f:a8:57:4c:74:0c:f6:da:68:04:
59:4b:6d:55:70:0f:bd:dd:ee:ed:79:66:ce:4f:cc:
ce:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:77:BC:9A:B2:5F:4B:A0:0C:59:9E:2C:78:38:CD:13:60:9A:06:F0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/1ne8mrJfS6AMWZ4seDjNE2CaBvA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.23.0/24
Signature Algorithm: sha256WithRSAEncryption
c2:93:f4:dd:af:c6:24:aa:61:c0:7b:2b:28:51:81:6d:40:60:
4e:70:d3:74:de:e4:f5:64:c1:0a:b1:18:96:ee:7b:4a:d2:39:
95:5c:ef:8a:11:9c:52:34:a2:34:db:0e:7f:5a:7e:96:64:ed:
94:b5:06:3d:95:b0:bf:5c:8c:df:e6:72:80:05:50:e4:5e:0c:
34:bd:63:34:42:fd:c9:45:50:57:60:7b:5b:6e:eb:10:cc:26:
22:92:52:44:ef:b0:94:7d:ef:df:68:e9:4f:be:69:98:22:9e:
07:d0:f4:64:a6:31:22:8a:1f:dc:71:08:52:d1:c5:67:04:99:
6a:ea:3e:c0:14:1f:1e:9a:bf:d3:ac:8c:99:9f:5b:77:ff:de:
16:d8:cc:c3:c5:48:57:38:6b:a4:39:e0:f7:05:35:4d:5c:f9:
01:8b:c6:c6:29:56:54:f9:29:23:a9:6f:0e:07:a8:fb:f6:b1:
c7:eb:e7:f1:d8:f8:cb:ab:e4:e2:10:b4:67:d9:31:90:b1:d0:
39:60:ba:f8:f8:10:c6:23:c6:db:91:60:47:9c:6f:be:4f:f9:
26:02:0b:42:04:8a:24:2b:07:68:2c:b1:39:00:b7:72:fa:ea:
de:b8:db:bf:5b:db:e0:7c:97:25:1b:2f:07:58:f3:52:3c:55:
af:a5:f6:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:33 2025 by rpki-client