Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/8R1mwClv5uDpjzpq9Yn4CVN9IOA.roa
File: 8R1mwClv5uDpjzpq9Yn4CVN9IOA.roa (raw, json)
Hash identifier: B4ZV3KQmeSdZoZk1h6jdKsenf8NqAbBO4tioPWLG/O8=
Subject key identifier: F1:1D:66:C0:29:6F:E6:E0:E9:8F:3A:6A:F5:89:F8:09:53:7D:20:E0
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 09E3
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8R1mwClv5uDpjzpq9Yn4CVN9IOA.roa
Signing time: Sun 30 Jun 2024 01:42:19 +0000
ROA not before: Sun 30 Jun 2024 01:42:19 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.76.226.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2531 (0x9e3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:42:19 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=F11D66C0296FE6E0E98F3A6AF589F809537D20E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:46:43:98:94:8c:8c:11:d4:21:9b:7d:3b:8e:
62:8c:43:16:75:69:5f:a3:70:78:88:82:4c:1f:99:
12:bd:05:8a:ba:a0:42:87:37:6d:46:9a:dd:4d:7a:
66:54:d7:78:08:82:94:8a:4b:dc:74:70:7e:7f:c0:
ed:a9:e8:be:60:64:56:c0:29:77:d1:27:c8:b2:3b:
5f:6f:53:58:f2:6e:6d:d2:da:e3:e0:1f:5d:61:6e:
5e:e8:82:f3:ce:5f:55:a5:fd:95:86:76:6a:b2:38:
34:12:f4:c1:d7:d5:eb:3b:f3:27:8d:36:6e:37:02:
d5:28:02:fb:f3:81:3e:52:97:d1:7b:97:41:57:24:
7b:5e:af:ed:90:98:bd:91:85:61:93:8f:c0:23:4c:
1c:89:8c:09:b5:67:d7:2c:3d:bc:87:a7:ac:19:9c:
f4:a7:6a:59:c2:73:3f:2a:ea:07:b6:b7:02:c3:7d:
c2:c8:aa:96:5c:5e:33:bb:9a:4d:10:ed:9e:24:18:
10:8e:04:e6:9b:71:4e:42:9e:b4:80:53:bd:8c:1a:
89:83:29:e2:06:d4:68:57:03:70:d3:a6:44:fd:1f:
67:41:b1:38:41:7a:19:f2:b0:47:29:49:b3:14:10:
ef:31:18:8f:9c:ef:be:ca:c1:31:11:a4:fb:29:4f:
48:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:1D:66:C0:29:6F:E6:E0:E9:8F:3A:6A:F5:89:F8:09:53:7D:20:E0
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/8R1mwClv5uDpjzpq9Yn4CVN9IOA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.76.226.0/23
Signature Algorithm: sha256WithRSAEncryption
12:b9:1a:81:73:cb:a3:a8:ad:ea:66:d2:41:c4:0e:1e:85:cf:
d2:e4:19:f3:bf:8a:0f:38:24:5c:bc:fc:c4:78:2d:b6:bb:45:
8a:24:f8:23:4f:8f:9f:5d:97:30:65:2e:db:d8:7c:d7:fd:bf:
98:41:19:97:83:bd:61:6e:77:6c:81:4f:6b:48:1c:29:ea:a0:
62:c5:b3:af:9b:ee:7b:2b:03:25:86:3f:95:bf:a5:e5:51:82:
f4:92:67:c1:a8:a9:a8:1a:ac:ba:82:7c:26:2a:1f:db:36:38:
0f:4b:9b:5c:2c:88:7e:bb:78:5a:5c:37:ca:29:d6:2a:ce:ed:
34:3d:1a:8e:d8:1b:93:0d:e0:99:41:9a:bc:7e:77:7c:72:c4:
07:d3:31:7e:6e:33:a0:c1:ea:fe:a5:d4:06:e6:95:76:0f:ed:
e4:89:25:f1:d7:10:86:20:f1:e6:8f:2d:2c:60:3d:d8:e7:c7:
b7:ab:c1:26:f0:8a:3b:93:da:73:0c:0b:e6:95:1d:29:d1:cd:
2c:49:63:4c:96:73:79:57:50:eb:30:52:c9:03:bf:fc:04:2b:
15:71:95:ee:90:10:52:a8:65:35:3e:90:9e:92:c0:53:d7:71:
64:57:09:24:0a:3a:08:f4:c3:50:e6:a9:01:98:b2:45:7d:1d:
48:f1:47:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:10:54 2025 by rpki-client