Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/2g30bRKIMFYcYCe3f9D0kNrDiTc.roa
File: 2g30bRKIMFYcYCe3f9D0kNrDiTc.roa (raw, json)
Hash identifier: Rre4YPWr/NcassrIlVFjKNriIv86iGGDRYMnfBdUtsw=
Subject key identifier: DA:0D:F4:6D:12:88:30:56:1C:60:27:B7:7F:D0:F4:90:DA:C3:89:37
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0960
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2g30bRKIMFYcYCe3f9D0kNrDiTc.roa
Signing time: Sun 30 Jun 2024 01:33:31 +0000
ROA not before: Sun 30 Jun 2024 01:33:31 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 49.108.238.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2400 (0x960)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:33:31 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=DA0DF46D128830561C6027B77FD0F490DAC38937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c9:b2:7a:33:2b:dd:15:82:6c:b3:f5:f0:21:
a0:bd:ea:11:38:de:44:a2:68:8c:b3:ad:41:a1:a4:
a6:f3:5c:a4:85:aa:7f:3f:c1:5b:da:e0:e8:8e:a1:
98:98:9b:cc:88:17:06:53:a0:b1:65:4d:f8:4d:e9:
3f:99:9e:fd:db:32:89:6f:4f:d0:f6:a5:59:a2:f8:
c6:71:78:de:f4:e1:b5:36:48:ff:4a:1d:f2:a6:ff:
cd:7d:6d:ce:00:e6:0c:70:44:c4:5f:c3:c8:dd:6e:
40:90:bf:c9:db:64:bf:b6:2b:2c:dd:e2:ca:d7:54:
e8:df:ae:b3:c1:c6:04:db:89:f7:b0:63:87:ca:d0:
54:da:b9:82:42:47:27:7a:04:72:68:24:25:44:32:
cb:ab:c3:a0:1a:ad:15:7f:d4:aa:5b:12:59:ee:68:
50:07:f9:e5:3b:f2:6e:4b:9d:bb:65:5b:2d:b6:ff:
4e:cf:28:33:98:92:f5:a2:95:ff:4b:e3:37:9c:69:
2e:92:83:8f:7f:55:24:80:89:5c:54:ef:dc:9e:fb:
11:80:7d:70:6f:7e:9d:a5:15:f2:9d:3a:fe:39:53:
8a:da:99:f6:9c:3c:6e:aa:91:5c:17:ae:68:9d:1b:
c6:1d:48:22:65:e0:23:02:0d:60:b3:1c:68:55:a6:
a2:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0D:F4:6D:12:88:30:56:1C:60:27:B7:7F:D0:F4:90:DA:C3:89:37
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/2g30bRKIMFYcYCe3f9D0kNrDiTc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.108.238.0/24
Signature Algorithm: sha256WithRSAEncryption
15:aa:d3:86:63:d2:7a:a4:20:de:fa:5d:ab:df:1a:39:f6:24:
f4:56:eb:75:22:ee:6b:f1:f4:e6:8a:a3:7c:c8:b7:a1:c6:6c:
f0:5a:a1:65:17:4d:94:82:76:1e:f2:26:be:5a:25:fe:1c:a3:
5e:ff:3f:87:8d:05:29:78:47:f9:d3:6a:00:3b:65:29:6a:6b:
20:bf:70:c3:da:f6:3a:d9:b6:09:4c:86:ab:0f:98:51:d4:bb:
f9:df:1d:13:ff:4c:9d:45:d1:f7:76:ce:8e:8f:bb:c5:eb:ea:
33:90:c3:8c:50:65:1e:cf:13:39:27:c0:01:e6:b6:53:10:8f:
cf:35:f4:70:f1:82:12:d7:08:93:1d:96:bc:de:24:76:76:d4:
ba:d9:61:02:15:fb:0d:e7:02:4f:af:f2:3c:c1:e1:00:2f:6f:
3a:b4:e0:2c:a0:34:6b:a9:a1:46:77:fa:ee:a3:99:3c:3b:d4:
a0:46:56:02:a3:3d:44:27:f4:37:85:0b:2b:25:bb:55:53:5c:
60:ea:22:8e:fa:7c:43:44:75:4b:97:5e:fe:4a:e0:62:02:59:
aa:10:78:ed:91:d3:ff:1e:37:57:4f:66:56:a9:6e:e9:f6:57:
93:f6:bd:86:c1:ea:3c:b6:43:ee:35:c4:c9:fd:08:94:b5:82:
05:e5:b0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:08:01 2025 by rpki-client