Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lastq5qgr2iaxoSE_SjE-f8zpHY.roa
File: Lastq5qgr2iaxoSE_SjE-f8zpHY.roa (raw, json)
Hash identifier: N+/Eh41v8x4B5c62Z72+kfErhwOpeRtOSwezJXxGLg8=
Subject key identifier: 2D:AB:2D:AB:9A:A0:AF:68:9A:C6:84:84:FD:28:C4:F9:FF:33:A4:76
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0956
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lastq5qgr2iaxoSE_SjE-f8zpHY.roa
Signing time: Sun 30 Jun 2024 01:29:39 +0000
ROA not before: Sun 30 Jun 2024 01:29:39 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.67.236.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2390 (0x956)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:29:39 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=2DAB2DAB9AA0AF689AC68484FD28C4F9FF33A476
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:a2:f7:e0:04:93:fd:e1:c5:2d:fb:b0:b8:fd:
a7:25:b6:f2:e8:6c:ca:64:53:cd:8c:73:3e:12:2e:
8c:ed:c0:1a:08:c2:44:6a:57:ce:fb:3a:52:30:94:
0e:53:3b:5c:fc:c8:7a:50:a0:91:46:8a:7c:59:80:
88:3d:16:16:49:ef:4d:a7:ba:6f:38:f9:c0:89:9a:
fe:27:90:c1:50:00:67:1c:4c:9a:27:5d:3c:d4:21:
17:99:1e:65:9d:7d:ba:1b:f8:7b:c3:57:82:57:ef:
33:3c:3f:39:30:53:2b:70:22:27:b5:43:65:c4:20:
88:79:5b:54:b9:0c:db:36:c0:0a:f2:63:b7:3f:25:
f9:06:69:cc:b9:1f:c3:4b:71:51:19:ff:21:3a:91:
18:33:3c:fa:81:93:10:83:66:02:63:72:12:1d:06:
9d:b3:ea:b0:ca:7b:48:08:67:f9:70:47:3f:69:48:
d9:7a:83:bc:3d:42:28:ee:f7:13:11:e5:7b:ee:57:
56:f2:2f:1d:b5:91:ae:8a:8a:fc:46:14:ff:03:03:
7c:b3:2d:0c:89:eb:ca:37:39:79:2a:8f:6b:04:7c:
4b:2b:07:ee:84:42:49:94:f3:d9:29:0e:f2:fa:7b:
3b:64:d0:9a:e9:c1:16:a2:a0:70:20:4f:c2:a8:c7:
0b:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:AB:2D:AB:9A:A0:AF:68:9A:C6:84:84:FD:28:C4:F9:FF:33:A4:76
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Lastq5qgr2iaxoSE_SjE-f8zpHY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.67.236.0/24
Signature Algorithm: sha256WithRSAEncryption
ce:5f:bc:01:da:55:74:93:f7:5e:92:4b:e6:53:cd:33:bd:55:
f3:54:ac:87:30:d3:c5:c4:ca:84:1d:e5:d2:0a:5d:e0:2f:d2:
62:bd:cf:bc:00:c3:cc:e1:a1:e2:27:1a:9f:f1:d9:ec:2f:76:
4e:08:61:7a:aa:6b:34:5a:d3:3b:b3:9c:49:6d:1d:b1:4e:37:
e4:e6:3c:1c:5e:0f:1d:41:15:30:61:3c:59:67:40:89:ff:88:
bf:d4:e7:c4:84:1c:b2:5a:c9:1d:19:74:e1:dc:c9:fb:a2:39:
27:6d:18:05:2b:c1:23:02:33:7a:ce:5f:44:a8:2b:e9:d7:b7:
5f:99:c5:d3:a4:3b:8a:a5:ff:dd:8f:c6:05:aa:60:5e:13:c7:
c9:6c:d6:8d:1b:86:e2:22:5a:dd:50:35:de:8e:e0:5a:2e:4f:
db:2a:d1:ca:e6:15:b6:82:d6:08:58:14:f0:ee:aa:74:09:2d:
9c:28:c2:ff:67:32:1f:3a:b9:b7:ae:18:33:01:79:bd:ab:5c:
8c:92:3d:1f:49:c9:ea:d4:b3:28:30:a8:c0:ef:44:7f:8f:db:
80:5f:02:3e:86:b1:d5:b6:e9:8e:6d:4c:8f:39:8e:cf:01:4e:
ed:42:bc:0d:b6:57:82:4f:83:23:14:7b:cb:27:24:ce:4d:83:
5e:cc:83:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:06 2025 by rpki-client