Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/3HOr43692ReOAtUPMtVDvV3GGpQ.roa
File: 3HOr43692ReOAtUPMtVDvV3GGpQ.roa (raw, json)
Hash identifier: 0d9DbR/rrC142Y28gJ5A/oZK4BKHHzcMlKvckHb3ygg=
Subject key identifier: DC:73:AB:E3:7E:BD:D9:17:8E:02:D5:0F:32:D5:43:BD:5D:C6:1A:94
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 039A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3HOr43692ReOAtUPMtVDvV3GGpQ.roa
Signing time: Thu 01 Jun 2023 17:59:28 +0000
ROA not before: Thu 01 Jun 2023 17:59:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.28.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 922 (0x39a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 17:59:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=DC73ABE37EBDD9178E02D50F32D543BD5DC61A94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:f0:25:e8:31:27:5a:98:8c:25:32:27:7d:4b:
ce:2c:18:39:f6:bf:e9:5b:62:02:24:4c:27:cc:8c:
ae:24:a0:fe:5c:29:62:e5:6a:f2:e8:86:26:2c:ad:
9c:d4:ae:78:b3:63:67:0f:e8:bf:73:57:53:5f:b0:
f3:48:1d:fb:af:bf:77:27:31:ab:67:62:e6:5d:73:
6a:c4:91:37:e5:6a:6b:14:ab:27:1d:a3:0a:97:f4:
a2:69:6f:a8:0b:c2:c0:87:38:47:aa:d8:2a:37:db:
69:69:a4:c3:7f:6a:6d:a4:f0:6e:73:5b:b7:1a:9b:
04:2c:c9:76:54:63:63:a6:21:bf:09:5a:af:fb:56:
f7:b8:9d:ad:b1:ec:c6:69:cc:02:bc:ef:70:cc:98:
c6:26:bf:fe:cc:10:a8:55:f9:ab:a2:35:87:4d:3e:
f0:9a:f0:3c:2b:92:5a:ae:82:ac:d8:fb:57:63:d3:
bd:c5:32:4a:e8:3a:92:af:e9:8e:cc:9c:d8:76:88:
49:9f:7b:84:7b:f7:90:83:7b:b4:c2:f5:0d:f1:45:
38:9a:fb:7c:9b:71:1b:9e:09:2c:4e:f6:93:7a:4b:
08:36:17:85:cf:a3:e3:26:7d:0a:4d:55:38:47:7a:
d2:56:73:33:1f:41:ca:3b:18:9c:61:30:e2:72:74:
62:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:73:AB:E3:7E:BD:D9:17:8E:02:D5:0F:32:D5:43:BD:5D:C6:1A:94
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/3HOr43692ReOAtUPMtVDvV3GGpQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.28.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:8a:2e:66:bb:78:c1:60:09:cd:1c:8b:56:a8:6f:74:bc:d2:
63:b0:6b:bb:51:23:04:dd:1a:21:f4:5a:31:3c:b5:3b:da:23:
0b:ad:30:1a:ca:87:80:b0:aa:71:90:cc:c4:a3:fb:ae:e6:52:
42:c2:9a:c0:66:d2:51:83:6d:48:d8:a6:35:67:0e:f0:f1:cf:
4b:24:e1:fd:5e:69:1b:84:80:78:f6:4f:c5:11:bf:d3:b1:07:
0f:31:da:d8:7f:dc:89:f0:99:26:8b:55:25:26:6e:ac:d6:43:
e7:bd:27:f4:6e:b5:90:e0:20:c3:2f:c3:b7:da:bd:f5:5e:8c:
41:a2:83:ea:02:21:7e:0e:d4:4b:00:2f:5c:a4:56:ef:38:a3:
67:50:a2:28:ab:a9:60:86:33:f0:40:26:ac:16:95:f7:01:1e:
62:48:8c:a0:a8:45:b5:f5:4b:17:91:c2:ba:4a:db:6f:a0:c8:
ef:ca:74:07:42:57:54:da:5f:e9:eb:74:3f:3d:8e:03:42:26:
01:44:d8:6e:ef:fb:4c:45:33:f5:08:1b:a2:86:c1:8b:fc:12:
cc:c3:22:e8:34:24:8e:b7:fb:23:6e:55:96:72:b3:ad:14:86:
49:6b:da:a4:fc:31:4a:58:56:5d:0b:65:e5:e0:17:d7:fe:5c:
24:11:08:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:58 2025 by rpki-client