Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ec9O2whCco_wN565-KIRlPYUeP8.roa
File: Ec9O2whCco_wN565-KIRlPYUeP8.roa (raw, json)
Hash identifier: 0BvmFpJLJdQzt/L1DoN0SG77foSEqChjuV2jKKGxd5s=
Subject key identifier: 11:CF:4E:DB:08:42:72:8F:F0:37:9E:B9:F8:A2:11:94:F6:14:78:FF
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0109
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ec9O2whCco_wN565-KIRlPYUeP8.roa
Signing time: Wed 24 May 2023 16:10:15 +0000
ROA not before: Wed 24 May 2023 16:10:15 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.164.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 24 16:10:15 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=11CF4EDB0842728FF0379EB9F8A21194F61478FF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:59:cd:fc:27:a9:ad:88:ca:d9:ee:ff:ca:3f:
4d:c4:3a:e2:02:a1:5c:28:23:4a:d3:28:6e:ec:8c:
71:b5:cb:da:d4:0c:ad:05:54:76:db:63:a9:2d:1c:
bf:5b:46:75:01:e4:e8:25:e9:53:28:7a:64:a2:a8:
8e:de:a3:6f:78:1c:3c:6e:ef:ef:d1:59:b2:8d:04:
10:52:f6:42:fd:50:93:5c:c1:b4:35:1a:e9:6c:2c:
e6:01:12:64:66:98:ec:f0:d9:f3:38:88:16:59:80:
4a:6e:86:18:40:08:a0:19:1e:e1:fe:e6:0a:b9:a6:
1b:b8:14:bf:d1:6d:51:4f:22:fa:3e:7f:8d:99:ac:
8f:3a:4f:c4:5b:eb:9f:17:25:19:83:ff:de:f5:e3:
5a:43:9e:da:9f:eb:0d:f8:d9:ae:8f:b5:c7:93:7f:
13:11:3c:a4:12:ce:36:e7:35:95:f1:da:ca:2d:26:
e1:8d:40:5e:34:9e:5c:5f:1c:0b:e0:41:b7:98:2e:
37:f4:3a:0d:68:9d:0b:8c:00:10:83:97:e4:75:2d:
36:f7:43:01:89:8d:84:46:6f:12:31:0b:b2:c2:f9:
83:93:81:17:d5:c0:f6:54:02:eb:55:1f:31:36:23:
70:bb:7c:eb:cc:f9:81:dd:04:fe:84:78:7f:23:47:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:CF:4E:DB:08:42:72:8F:F0:37:9E:B9:F8:A2:11:94:F6:14:78:FF
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Ec9O2whCco_wN565-KIRlPYUeP8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.164.0/22
Signature Algorithm: sha256WithRSAEncryption
2a:94:8d:28:f4:6b:5f:e7:b4:7a:ee:26:e5:65:fa:6d:4f:70:
61:ba:2f:dd:6a:ce:38:ee:3e:f3:c7:1e:32:ab:1f:3a:10:c8:
85:ab:3a:ce:0b:8a:fc:84:d1:af:72:15:b2:94:13:d9:12:0a:
74:43:28:11:10:3f:4c:09:74:2e:54:8b:6d:b5:94:df:ee:9e:
53:04:f0:85:96:b0:bb:67:98:be:44:34:8e:d9:79:1c:b8:e6:
2e:95:0c:d0:d7:32:8d:52:42:71:c9:57:c0:82:ff:ae:4b:df:
95:59:5b:bd:8f:01:fc:8c:f5:ff:e4:14:97:17:fe:b0:60:26:
48:ea:57:12:b2:b1:ea:bd:05:b5:a5:c2:3c:d5:23:26:ad:d9:
e7:33:34:c1:f1:24:e6:62:23:7d:0d:7e:95:a3:f9:13:ba:f8:
82:73:49:9c:b3:05:f4:eb:38:b9:9a:cb:8f:cf:5d:a3:cb:32:
d3:13:1a:b8:e9:5b:fb:fc:75:5e:91:f1:8b:bb:db:ad:f5:fd:
1b:f7:12:88:b7:e1:94:df:cc:87:ff:50:32:51:0a:c6:ed:41:
f1:82:a6:49:3f:c1:60:b1:34:9c:a4:6e:96:17:35:78:ec:60:
ba:1b:33:fc:69:ab:83:2e:f3:5e:f0:bd:ae:76:4d:7f:eb:49:
7b:8c:f1:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:37:51 2025 by rpki-client