Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/M4A5KDijhICsiWoxoedCl228hu0.roa
File: M4A5KDijhICsiWoxoedCl228hu0.roa (raw, json)
Hash identifier: qdceeA5vJLRMUsYMU+W0wVh6Ze22D8FoM6wxk/lrqYI=
Subject key identifier: 33:80:39:28:38:A3:84:80:AC:89:6A:31:A1:E7:42:97:6D:BC:86:ED
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A55
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M4A5KDijhICsiWoxoedCl228hu0.roa
Signing time: Sun 30 Jun 2024 01:48:32 +0000
ROA not before: Sun 30 Jun 2024 01:48:32 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.79.108.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2645 (0xa55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:48:32 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=3380392838A38480AC896A31A1E742976DBC86ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:54:3f:4b:e3:d1:99:d2:09:b2:2b:b3:88:90:
df:68:5a:47:3f:c7:7d:e5:76:36:86:6d:7a:53:5a:
c7:6b:d6:83:b3:fe:4c:ee:0c:8a:13:e8:c4:d5:77:
ca:b0:2f:d1:22:a1:58:b0:01:85:8f:10:30:3b:7d:
24:b3:f0:e8:60:f4:6a:3e:36:1f:f2:e2:40:37:49:
32:83:ed:cc:60:7d:2b:97:f9:df:3c:8f:4b:4e:65:
cc:a2:6e:11:22:68:36:24:89:ba:38:33:65:90:26:
97:c7:8e:ca:91:1d:d2:44:bf:34:48:db:12:24:81:
96:a5:92:4d:7f:57:81:7f:ad:26:16:05:06:0c:a9:
97:68:82:54:d9:79:10:83:bf:16:96:0f:3d:d9:a9:
be:01:cd:c3:35:ed:51:3c:ed:04:86:c6:1d:6f:7a:
b4:75:f6:73:42:e8:6a:1a:a9:24:5e:39:04:22:2a:
31:10:d2:5a:33:f5:6e:a9:f0:77:0c:e9:67:8a:42:
38:1d:64:5b:20:97:ae:c4:27:26:26:d0:71:bd:41:
1b:cb:0e:bb:2d:92:a0:c7:9a:f7:87:a3:1e:9c:db:
e8:9d:31:ca:3c:21:26:d0:55:2e:01:08:3c:a4:4a:
da:04:23:90:9b:9d:ce:70:ee:e3:18:ee:de:93:8a:
c7:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:80:39:28:38:A3:84:80:AC:89:6A:31:A1:E7:42:97:6D:BC:86:ED
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/M4A5KDijhICsiWoxoedCl228hu0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.108.0/22
Signature Algorithm: sha256WithRSAEncryption
e3:e8:01:3a:35:20:cd:46:6c:7e:64:3d:f0:5b:05:3a:3e:18:
97:29:a1:95:97:86:74:94:3f:e2:87:8f:4b:5b:68:72:9f:9f:
f1:74:c1:da:6f:62:77:3d:88:bb:28:19:9e:23:71:7f:21:77:
e0:83:14:2a:87:12:51:29:43:2b:e8:29:2d:fd:32:aa:d1:a3:
24:28:24:e8:13:b9:6b:8c:93:bd:ee:81:fd:ba:60:d2:64:18:
07:17:8f:a3:5b:1f:59:04:35:6f:a3:45:4c:3e:7c:e3:c1:95:
44:58:14:ef:8b:42:ee:ba:ff:e9:71:1d:db:bc:7d:fa:ea:44:
fd:b0:c1:e4:99:93:62:03:3f:18:dd:ff:6d:4c:df:04:50:87:
d4:07:0c:59:89:5a:c0:7c:7d:8f:25:3b:76:bb:b0:1d:2a:6c:
0e:7e:37:19:54:9e:99:b6:26:b7:16:ee:0a:b1:d6:cc:1f:8f:
ce:5c:01:0b:37:4b:2a:38:a2:3c:fb:be:33:1a:45:cc:62:14:
b8:fd:de:9a:1c:f1:c3:6f:4f:ba:ab:76:b4:f1:50:8f:91:0b:
70:2e:09:96:77:a6:88:4a:02:d1:20:4d:0e:6b:04:57:db:04:
ca:f0:99:bc:62:6b:17:6e:44:89:9d:e2:11:04:07:1e:18:28:
c3:d5:8c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:48:05 2025 by rpki-client