Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/L2sOgkpbLt9EWwfLOPOwf9ZKZRQ.roa
File: L2sOgkpbLt9EWwfLOPOwf9ZKZRQ.roa (raw, json)
Hash identifier: cAvjWaLPhLqlucnI+svDQsjF3K2+dK19WvwY/rTBZm8=
Subject key identifier: 2F:6B:0E:82:4A:5B:2E:DF:44:5B:07:CB:38:F3:B0:7F:D6:4A:65:14
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0685
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L2sOgkpbLt9EWwfLOPOwf9ZKZRQ.roa
Signing time: Tue 30 Apr 2024 01:38:04 +0000
ROA not before: Tue 30 Apr 2024 01:38:04 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.21.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1669 (0x685)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:38:04 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=2F6B0E824A5B2EDF445B07CB38F3B07FD64A6514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:22:71:bf:5f:2f:16:b3:cc:c7:35:aa:f2:7e:
e7:db:a0:ef:ad:71:54:05:d7:4c:8e:10:6a:50:f1:
1e:d8:9e:8e:04:5a:39:bd:cb:47:c7:2f:f5:f8:5b:
c7:d1:ce:48:57:f4:e3:c2:42:cf:1a:5c:2d:1d:ce:
06:ce:0e:f6:f6:4c:98:41:98:8c:3d:0c:c3:ba:19:
0d:0b:e7:d6:84:5f:44:a9:66:fb:3f:ef:7f:4d:99:
d9:6d:e0:9d:22:9e:c9:25:52:62:b3:2e:64:2a:5c:
d9:18:95:c7:db:9a:50:e8:57:a3:e8:0f:3f:a5:26:
07:92:c7:7f:ef:3d:e3:8e:f9:89:75:a0:8b:23:99:
d3:6b:ba:95:20:08:dd:89:72:a5:69:6d:7c:c7:d8:
26:c7:e2:07:40:9f:b7:07:87:67:47:e1:b3:c8:c0:
10:86:78:2e:02:b1:cd:15:49:e6:de:5c:9b:8c:99:
f7:09:32:26:15:42:98:2a:6d:98:d1:47:61:5e:ed:
33:e4:1b:88:7b:1f:66:92:fa:ff:0d:40:50:3c:8f:
df:3c:f6:29:3d:e5:c2:24:62:db:9f:f3:a2:91:50:
53:91:6c:48:f1:32:eb:52:f2:bb:3f:14:e5:b9:9e:
f8:48:1d:1a:01:37:80:db:8e:b0:a6:fd:78:23:de:
26:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:6B:0E:82:4A:5B:2E:DF:44:5B:07:CB:38:F3:B0:7F:D6:4A:65:14
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/L2sOgkpbLt9EWwfLOPOwf9ZKZRQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.21.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:1b:3c:7e:0a:f9:78:b3:d6:30:36:cd:47:b9:d3:28:6c:0a:
5c:3f:93:71:fc:17:5f:15:ae:3f:1d:5d:ef:fd:6c:ed:d5:b1:
eb:ea:56:7d:ad:c7:4d:65:b2:cf:c7:3b:99:0e:8a:b0:d9:5a:
6b:48:30:d5:76:47:7f:16:31:6c:90:1a:e5:6e:a1:c1:d1:14:
be:3e:64:6b:9d:9b:4b:8a:3b:1f:6a:66:ee:ad:ef:d7:b7:ee:
31:5b:fa:1b:68:9b:fc:9f:62:2a:2c:a7:ac:33:8d:f4:11:0c:
5d:b9:40:9e:03:30:35:71:c0:4a:9f:23:98:d6:d6:ed:64:2f:
20:f1:bc:15:bd:84:43:20:92:e7:4f:3f:6b:bb:65:fd:ac:41:
03:35:e1:4e:32:f1:70:fe:1f:4c:1b:b3:b8:05:ec:5e:12:f0:
22:09:78:07:02:76:e8:a7:4c:a4:d8:29:9f:7e:ab:98:84:7f:
19:48:78:98:8c:80:0b:a0:7c:cc:cd:b2:f5:f5:d5:8b:84:55:
60:e4:b8:d9:60:1f:93:01:b2:d0:37:16:71:c9:e8:34:5a:d0:
11:84:d2:cc:2e:bc:a1:05:a8:60:80:d6:0f:72:d0:ee:42:63:
82:4b:9a:c7:00:9f:98:03:c7:94:8c:80:a5:74:98:fa:ac:92:
85:a7:35:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:49 2025 by rpki-client