Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IAWwZscj9P78aBOtkjZrPmxifv0.roa
File: IAWwZscj9P78aBOtkjZrPmxifv0.roa (raw, json)
Hash identifier: N/+FSJ33bO1lb9L3CSYofflrzJWpDwQFjUA/eFKiiVQ=
Subject key identifier: 20:05:B0:66:C7:23:F4:FE:FC:68:13:AD:92:36:6B:3E:6C:62:7E:FD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0ACA
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IAWwZscj9P78aBOtkjZrPmxifv0.roa
Signing time: Fri 22 Nov 2024 06:19:41 +0000
ROA not before: Fri 22 Nov 2024 06:19:41 +0000
ROA not after: Sat 15 Nov 2025 01:30:03 +0000
asID: 9605
IP address blocks: 27.230.46.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2762 (0xaca)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Nov 22 06:19:41 2024 GMT
Not After : Nov 15 01:30:03 2025 GMT
Subject: CN=2005B066C723F4FEFC6813AD92366B3E6C627EFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:87:f6:83:eb:b7:5a:ab:ce:fe:c6:68:0f:6c:
ce:09:7c:6a:82:18:72:1b:36:e8:4f:34:ab:34:a2:
eb:17:10:49:b4:77:01:19:c0:d1:5f:b3:18:a7:a3:
0a:c9:48:d9:8b:09:75:c8:19:54:85:9b:7a:e0:c2:
7b:29:8a:16:f6:2f:a4:11:cd:b2:75:64:44:e1:93:
c8:2a:d7:68:79:76:fb:b6:c6:42:17:e1:bc:1a:b0:
b9:c5:7c:d9:23:c8:72:af:00:f9:93:40:46:3c:5c:
df:8c:c3:0f:59:d6:e3:9c:2e:51:72:2e:4b:29:0b:
d4:48:02:11:5f:e0:f8:bd:3f:97:b3:fe:f2:1d:15:
eb:7b:db:20:2c:ae:54:36:34:9e:f2:b9:6d:25:e1:
f3:5c:63:4e:78:db:a8:a3:94:ef:30:65:87:f7:87:
23:01:3d:35:6b:b8:ec:6e:88:f8:48:48:64:46:f8:
b3:24:6e:f2:d6:a0:40:ff:e7:91:89:52:e6:b3:77:
7c:29:bc:27:d6:dd:b1:21:ab:cf:51:27:de:0c:57:
6a:32:87:c6:81:af:cc:b6:ce:3d:e7:9b:2a:5b:51:
49:32:20:46:ae:df:e5:8d:12:0e:16:46:17:0e:52:
05:ea:5b:83:bf:b9:89:07:a9:71:bd:1a:48:18:c5:
e1:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:05:B0:66:C7:23:F4:FE:FC:68:13:AD:92:36:6B:3E:6C:62:7E:FD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IAWwZscj9P78aBOtkjZrPmxifv0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.230.46.0/23
Signature Algorithm: sha256WithRSAEncryption
b2:e5:92:57:90:1c:7c:d3:dd:1c:1a:1c:aa:39:bc:65:5d:86:
b4:07:e2:ae:a7:f7:ad:29:7c:e0:18:59:9d:c5:27:eb:6e:20:
38:08:28:28:8f:68:1d:47:1b:ee:18:e7:e5:dc:27:72:2d:e1:
91:b4:6a:26:31:c5:37:6a:f8:ad:88:6f:35:0b:56:ec:6f:21:
d5:6e:94:7c:18:86:61:d6:8a:fe:16:63:63:59:ea:c6:e2:36:
eb:13:f7:a3:5b:02:f4:82:ca:f5:c5:80:b9:11:1b:76:f2:27:
8f:95:64:e2:60:3c:5f:80:29:d1:01:18:90:42:62:c6:c6:b7:
8b:09:80:6f:28:61:f9:69:14:a6:dc:5e:33:7b:a8:37:09:24:
f4:5a:fe:3b:98:b5:cb:ea:41:71:91:92:db:bb:20:99:15:fb:
d2:04:24:d4:9a:de:5a:1b:46:b9:45:6f:83:92:8c:f2:00:e4:
b6:9a:0d:d9:20:41:74:05:b0:81:63:8a:d6:88:67:f4:57:22:
a2:2f:01:85:7a:57:ad:58:10:1d:b6:6a:26:6c:84:1c:1c:df:
94:5c:75:66:39:e2:1b:ab:ff:bf:96:08:c2:55:6e:56:39:8f:
86:41:94:e9:88:f4:5d:c8:91:db:8e:53:24:71:96:e5:e0:0b:
b5:ac:77:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:06:33 2025 by rpki-client