Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/IKfpcgZnQ_SWgLTZK8wgsj3oBpg.roa
File: IKfpcgZnQ_SWgLTZK8wgsj3oBpg.roa (raw, json)
Hash identifier: hzDvLBi9XWOCc8SKpYr7OinLVmu2PUziBQhDcu28UOY=
Subject key identifier: 20:A7:E9:72:06:67:43:F4:96:80:B4:D9:2B:CC:20:B2:3D:E8:06:98
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 04CB
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IKfpcgZnQ_SWgLTZK8wgsj3oBpg.roa
Signing time: Thu 27 Jul 2023 16:48:18 +0000
ROA not before: Thu 27 Jul 2023 16:48:18 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 49.106.174.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1227 (0x4cb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:48:18 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=20A7E972066743F49680B4D92BCC20B23DE80698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cb:f3:be:0b:6e:0d:a0:68:df:34:39:09:a9:
74:c3:ba:db:89:d3:45:ce:01:bc:44:64:bb:e6:02:
d9:6b:10:15:5f:f6:04:37:bb:ac:5f:a4:1a:98:95:
76:23:66:b6:55:d3:56:43:ca:11:ae:79:9a:e0:a7:
de:f3:38:23:32:9b:e9:dd:10:c4:0a:92:76:27:d8:
e8:cc:14:b8:91:72:4b:bf:7e:aa:cf:e2:96:dd:26:
55:99:bf:38:ff:b8:10:d1:70:78:1c:0d:93:d8:e7:
2b:a4:d5:9d:84:38:4a:93:34:55:29:d4:be:c5:3f:
27:7b:c1:b3:3d:45:8d:df:95:c1:be:62:29:f1:96:
4e:d3:48:e5:90:5a:10:a8:d2:f7:6b:32:78:e7:51:
07:0e:45:0d:e3:c2:a7:6f:90:4d:55:a9:88:c7:e7:
3c:67:be:ff:5e:fe:78:73:55:51:bc:ed:70:8c:1f:
75:a2:21:28:da:7c:7a:ea:5f:72:12:19:02:7b:34:
f9:99:66:be:b0:c7:81:95:fa:a1:2b:44:35:98:45:
a0:4d:08:ee:f2:f7:0a:a8:91:2c:ec:a2:d9:28:f5:
13:c6:a6:9c:fd:cf:f8:fa:44:ce:8c:6d:59:ec:42:
d1:42:2f:16:72:cd:d5:f6:34:26:15:f2:b6:71:37:
fb:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:A7:E9:72:06:67:43:F4:96:80:B4:D9:2B:CC:20:B2:3D:E8:06:98
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/IKfpcgZnQ_SWgLTZK8wgsj3oBpg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.174.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:a5:1b:72:09:4c:e2:0c:9b:e8:cb:37:93:5c:44:a4:a7:41:
eb:83:af:1b:7d:1d:a5:72:77:42:29:21:c3:27:01:af:5b:db:
ff:4d:c8:a7:87:50:9d:c7:0f:b0:a0:4b:b4:1f:78:35:85:7d:
00:fd:89:87:a6:06:95:54:1c:41:28:a1:70:f4:9a:93:7d:56:
ad:ac:0a:2d:81:0e:c4:64:b1:4a:c9:87:23:28:9f:54:6c:45:
d2:7b:b8:2e:25:d9:45:04:07:85:91:0d:e3:ca:94:2c:8b:74:
16:87:6f:02:9f:9e:be:34:f1:7c:72:a2:c2:a8:43:fe:72:7f:
a6:79:5b:47:5d:aa:8d:0d:5f:be:43:f5:fa:2c:1b:3e:66:0c:
b8:a4:2b:7b:26:05:c1:80:f5:ac:c9:73:b7:1a:2c:9e:d3:0a:
6f:5c:85:b0:51:4b:16:9d:90:e2:f3:63:3a:dd:89:a2:70:2b:
b6:7b:26:0a:a6:0d:fd:e3:12:9c:8c:bf:39:89:ca:cb:04:9e:
4c:c3:59:3b:9b:ad:e2:97:67:59:d6:38:a4:bd:86:25:ec:c5:
1e:7a:a5:df:39:32:d7:fd:d1:e1:26:10:5c:30:33:7d:f8:5e:
f6:17:a1:d5:19:86:f3:9c:5c:cd:4f:7f:37:11:2c:fc:da:68:
e5:eb:f0:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:56 2025 by rpki-client