Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jm9tIHzC8SpSKYlPB7wWl6tWCB8.roa
File: Jm9tIHzC8SpSKYlPB7wWl6tWCB8.roa (raw, json)
Hash identifier: 0y+ZBTjk2utFj0Kh/+JSnWljs/Hc6A1LRbpbj942biA=
Subject key identifier: 26:6F:6D:20:7C:C2:F1:2A:52:29:89:4F:07:BC:16:97:AB:56:08:1F
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A93
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jm9tIHzC8SpSKYlPB7wWl6tWCB8.roa
Signing time: Sun 30 Jun 2024 01:52:41 +0000
ROA not before: Sun 30 Jun 2024 01:52:41 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.67.248.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2707 (0xa93)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:52:41 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=266F6D207CC2F12A5229894F07BC1697AB56081F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:69:77:67:e9:ff:c8:f7:dd:e4:3d:83:78:27:
56:68:8a:7c:65:8c:00:02:8c:06:6c:ad:45:d6:dd:
c5:ab:e3:ac:46:ca:29:c9:9f:51:f2:d4:23:f0:87:
6d:50:76:4a:3c:96:ca:5a:14:41:c4:86:31:3b:f1:
6a:53:ac:e1:27:ee:52:fa:a0:aa:42:93:31:d2:3a:
3c:44:64:b3:0d:45:c0:27:d4:42:0c:cd:f4:a7:f4:
68:aa:80:5f:0b:b2:05:8d:a7:94:1f:18:9a:a4:29:
91:9b:82:a4:1b:6d:01:75:ca:8e:7a:30:de:ce:17:
3c:af:09:4b:d2:e2:a0:e3:39:b3:f1:47:58:9f:3f:
9c:13:ec:7d:6e:87:d1:32:c2:3c:be:a9:e1:29:ed:
d0:11:31:dd:dd:b4:55:d3:5c:12:1b:79:c1:cd:f0:
ff:41:21:fc:7d:ae:21:e2:be:55:7e:64:69:6d:55:
bc:b3:f6:40:c3:01:c4:15:ab:ec:9d:0b:c5:bb:63:
74:7e:bc:d8:15:4a:ec:11:cb:f0:d8:f0:ea:52:b0:
4b:c6:a0:4a:7a:14:46:73:ab:ca:eb:70:5b:16:7c:
fb:4f:ca:1e:09:18:ac:fe:aa:b7:67:96:8b:24:8b:
59:46:0a:12:8c:bf:a0:40:9c:b3:2a:47:9c:a3:f7:
e3:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:6F:6D:20:7C:C2:F1:2A:52:29:89:4F:07:BC:16:97:AB:56:08:1F
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Jm9tIHzC8SpSKYlPB7wWl6tWCB8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.248.0/21
Signature Algorithm: sha256WithRSAEncryption
5e:23:6a:24:27:68:84:52:b5:d7:89:f4:4c:de:ba:7b:da:d5:
6e:56:76:a9:29:2c:f8:dd:3e:da:1c:76:51:2c:0e:82:46:e6:
97:36:fa:58:96:37:18:cb:54:22:81:a6:b8:08:af:e6:21:fd:
a9:94:4c:81:5e:f6:64:f4:16:a8:75:7a:b0:7a:0d:9c:55:b5:
28:c8:6c:e2:f2:46:df:32:31:c3:c9:12:d8:0b:ef:f1:a1:05:
27:df:1c:b8:5b:9d:50:6a:6a:c2:7c:0b:41:ee:34:a0:d4:1a:
69:46:84:dc:cf:d5:e6:03:7c:71:fa:0d:7e:00:c5:be:a4:66:
80:63:3b:ed:4a:2c:b7:7e:9b:13:fd:64:5e:92:81:a1:6b:e5:
00:3d:cc:c8:28:30:90:bb:65:66:cb:11:1d:41:43:b0:0a:04:
79:c5:01:75:cc:e2:b6:1a:53:aa:4f:58:47:a8:b4:13:6e:12:
76:70:81:22:09:ab:57:23:3f:18:aa:a1:f0:4b:02:1b:29:f4:
74:5e:0c:b2:e1:1f:2a:3c:58:3b:19:f0:fc:cb:67:53:3a:ad:
7e:94:ff:32:1c:be:98:5e:47:5b:25:af:49:52:8c:4e:76:2b:
71:65:50:ef:b9:bf:55:d8:4b:62:d1:f3:bc:1e:0f:bb:a3:9d:
81:89:a0:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:41 2025 by rpki-client