Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KexURCfBU4fNZ9MMecaGa3kShQI.roa
File: KexURCfBU4fNZ9MMecaGa3kShQI.roa (raw, json)
Hash identifier: qDjlwLUTjGCnx3Tv39uTH3Tiy5T7mudm6du/3L+0d6k=
Subject key identifier: 29:EC:54:44:27:C1:53:87:CD:67:D3:0C:79:C6:86:6B:79:12:85:02
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 091F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KexURCfBU4fNZ9MMecaGa3kShQI.roa
Signing time: Tue 30 Apr 2024 02:30:25 +0000
ROA not before: Tue 30 Apr 2024 02:30:25 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 183.74.8.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2335 (0x91f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:30:25 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=29EC544427C15387CD67D30C79C6866B79128502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:38:35:a3:64:df:fd:5c:52:9a:95:41:ea:3b:
de:45:cb:da:94:78:45:63:7d:9e:a9:03:cf:d4:3d:
d5:c1:05:6b:12:6b:66:bb:17:f1:a6:d0:d4:b8:e4:
47:d6:e4:01:86:ca:b4:dd:d3:1a:38:b8:f6:a7:f4:
dc:11:2b:4c:1a:b3:1e:a8:81:c0:d6:a9:0e:f4:c8:
37:9b:2d:e9:b4:2f:7c:e8:a1:bb:69:ea:9f:10:23:
7a:be:ad:22:4d:1b:64:40:9b:fc:41:c4:7a:28:10:
7b:f0:63:26:df:71:a1:81:a4:33:da:47:00:b2:4f:
b8:fc:b6:5e:51:f3:33:31:85:fe:6a:8a:43:03:32:
55:53:ff:55:98:08:29:e4:1c:85:3a:57:68:04:39:
27:82:60:a5:c1:74:ab:b9:9a:d7:da:11:ee:ba:8c:
3e:c1:d0:45:f0:bc:9a:2f:e1:9f:c7:fc:e5:25:16:
0a:c0:a1:ec:47:e2:14:ed:3a:ae:05:aa:bc:ab:14:
89:68:77:af:ee:2c:8e:06:2b:53:97:a2:fe:68:d6:
d6:d0:37:b2:23:34:6e:a0:b5:4b:a6:63:b0:c8:cf:
58:7b:e2:82:35:5a:31:8b:59:da:87:5a:52:f5:87:
00:08:80:19:62:37:b3:c2:12:8f:b7:3a:35:7b:bb:
a7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:EC:54:44:27:C1:53:87:CD:67:D3:0C:79:C6:86:6B:79:12:85:02
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KexURCfBU4fNZ9MMecaGa3kShQI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
183.74.8.0/23
Signature Algorithm: sha256WithRSAEncryption
0f:b8:12:40:16:bd:be:bb:89:a8:c2:e1:b3:6b:e1:0e:b3:0a:
29:27:73:6e:94:ec:4d:4e:80:66:76:30:b3:47:17:ab:40:65:
1c:8e:6c:6f:24:c1:78:2e:43:6b:66:7a:ad:7d:83:15:93:3a:
30:55:4e:eb:2b:21:26:12:51:c3:91:cb:1a:57:d6:a9:60:7f:
70:5d:4f:3c:85:cb:61:b3:76:5b:5c:9e:e3:41:48:a7:80:8f:
4e:33:43:4b:b3:ff:fd:88:04:5a:0d:8c:00:0b:5c:7b:7b:14:
46:6a:b3:b6:c4:f3:1e:59:3d:ed:45:0c:bd:d5:a6:3e:12:67:
7b:e3:fb:2a:d1:83:19:ad:60:2e:82:c3:44:dc:ab:f2:d3:0c:
50:f2:15:42:ac:d3:2d:58:76:e8:3c:24:bb:6e:cf:bb:dc:16:
43:a3:f6:ce:40:de:1f:58:2d:f3:ca:7f:d1:21:45:36:de:db:
58:40:fb:f7:55:7a:7c:50:58:dd:81:30:0f:10:fb:ec:fc:c4:
03:d9:71:40:6a:33:a2:b4:a4:33:30:2d:94:71:2b:b1:fb:83:
6f:56:ad:a9:fc:d0:04:c9:ca:41:5f:c6:f0:99:03:be:99:07:
da:ab:e9:8f:2a:10:e3:39:1d:c6:76:b5:02:63:df:a3:56:f6:
94:74:4f:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:36 2025 by rpki-client