Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ckr3xqc4_jgs9F6ZyVjze3oavkw.roa
File: Ckr3xqc4_jgs9F6ZyVjze3oavkw.roa (raw, json)
Hash identifier: Uvt69Tat2RdJIayZz6FHvF0OFzHuRSRQXBnjKahM6bM=
Subject key identifier: 0A:4A:F7:C6:A7:38:FE:38:2C:F4:5E:99:C9:58:F3:7B:7A:1A:BE:4C
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 07C2
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ckr3xqc4_jgs9F6ZyVjze3oavkw.roa
Signing time: Tue 30 Apr 2024 02:08:45 +0000
ROA not before: Tue 30 Apr 2024 02:08:45 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.224.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1986 (0x7c2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:08:45 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=0A4AF7C6A738FE382CF45E99C958F37B7A1ABE4C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:3a:d5:12:1c:be:a4:c0:0c:27:8d:3b:0b:32:
7d:3c:18:09:a2:4d:44:89:67:3f:07:8b:ee:56:c4:
4d:bc:08:f4:cb:02:69:e3:4e:a3:5b:07:ce:59:62:
f8:c5:af:9a:08:b9:cf:94:e7:cb:79:c4:ae:11:f1:
80:cd:2f:4d:42:f8:88:40:63:eb:49:e1:b7:42:cc:
02:ef:fc:8a:05:b1:92:ca:af:76:38:df:8e:3e:2c:
7b:86:2c:fa:be:4f:d1:eb:f2:6f:ec:17:f9:4c:3c:
e8:e3:05:fc:32:97:c9:ef:32:98:16:c2:f3:95:e6:
09:29:82:68:b8:89:60:ef:bb:a1:6e:2c:97:89:28:
f4:89:12:66:84:18:dd:31:36:ea:5d:33:8a:0a:e5:
19:d0:d3:aa:ca:e6:cc:44:03:41:f3:56:52:a5:4d:
26:84:a5:b9:ed:35:16:a1:5f:16:74:48:bb:0d:d4:
ca:2b:0f:36:47:69:66:ad:ab:1e:25:9b:2c:33:b3:
f0:71:71:3d:1d:ae:f2:1c:ee:c8:4c:48:7e:a4:cf:
5f:fb:53:bb:bb:22:a7:ae:77:0c:8f:a1:78:96:da:
b8:d6:40:8b:6c:40:6f:f5:0a:3a:31:f5:75:07:7b:
47:22:6d:87:84:fc:8a:cf:00:e2:3f:b5:47:3d:c3:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:4A:F7:C6:A7:38:FE:38:2C:F4:5E:99:C9:58:F3:7B:7A:1A:BE:4C
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ckr3xqc4_jgs9F6ZyVjze3oavkw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.224.0/23
Signature Algorithm: sha256WithRSAEncryption
8a:60:fc:ac:3f:1e:3b:df:80:1e:50:4e:2b:9c:a5:f5:9e:50:
eb:e7:15:b6:50:49:50:51:7a:7f:07:9f:28:a2:34:b8:e5:cf:
61:44:bd:b9:1a:2c:1b:f3:c7:bd:60:bc:1d:f5:4a:29:77:43:
3c:6a:9b:fd:ef:42:a6:33:ed:d6:c7:67:28:74:5a:31:fe:63:
6e:1b:e4:08:38:b0:98:33:2c:3e:a6:bc:12:96:e6:91:f8:7e:
7e:1f:92:2d:1a:6b:ce:51:7e:3f:c1:63:51:12:53:cb:a4:91:
82:6f:0e:d1:b9:74:e8:99:fd:7d:8f:5c:44:48:f3:f1:33:b7:
e4:bc:27:95:6c:1c:e0:a1:c2:9d:2b:d4:dc:78:51:81:8d:31:
f2:05:92:df:a8:25:45:aa:c0:aa:d6:7a:a3:ac:0c:08:87:e5:
8e:78:b9:91:10:d6:f7:41:c5:7d:ed:d2:9a:fe:1b:bd:48:a6:
88:79:1e:d8:4e:25:ae:18:24:ee:67:73:46:7e:74:b9:1c:f7:
57:61:d0:3e:05:d8:58:4a:6f:fc:2d:df:07:aa:b1:7c:b1:d1:
1e:57:0d:b7:7d:5a:14:62:a7:7c:28:e6:90:f4:8e:30:5b:68:
e9:76:45:3b:67:71:30:62:94:90:98:9a:4f:7a:a9:68:89:55:
ef:1a:a5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:29 2025 by rpki-client