Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/MdR5ONaaeQEr9tBc6gPhHj6aNJ0.roa
File: MdR5ONaaeQEr9tBc6gPhHj6aNJ0.roa (raw, json)
Hash identifier: pQLD7EhoEaAPsWKQiZu09fg+DMM33HnOyidt/GsqI1Q=
Subject key identifier: 31:D4:79:38:D6:9A:79:01:2B:F6:D0:5C:EA:03:E1:1E:3E:9A:34:9D
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0A7F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MdR5ONaaeQEr9tBc6gPhHj6aNJ0.roa
Signing time: Sun 30 Jun 2024 01:52:32 +0000
ROA not before: Sun 30 Jun 2024 01:52:32 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.66.128.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2687 (0xa7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:52:32 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=31D47938D69A79012BF6D05CEA03E11E3E9A349D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:da:ff:b6:f9:68:fe:6e:5b:5e:05:9e:b9:21:
21:5a:6c:ce:e3:ad:1a:95:f5:d6:f6:83:ee:f4:d6:
f0:3a:51:77:7d:51:a3:39:3c:fe:68:94:ef:65:67:
c2:4a:c1:04:91:1a:6b:34:cd:7e:ad:75:02:35:ae:
be:47:fb:7e:8d:89:1b:1b:53:1b:01:e1:e5:0a:7a:
8e:11:3c:30:36:7f:80:2c:13:11:84:1c:38:ff:f7:
b0:22:6d:0b:95:97:f8:fd:a5:62:07:0c:e4:ea:dc:
d5:55:a0:56:ff:d1:59:07:f0:71:7c:73:f1:3e:7f:
20:23:df:d7:20:09:9e:18:c0:3f:4d:47:e0:d7:d0:
4c:f3:fe:73:58:9a:42:9f:93:a4:dc:6e:af:80:b8:
53:cd:5b:ed:dc:e8:01:1d:97:7c:d3:25:f6:9f:9a:
d8:39:ef:55:48:c4:bf:e9:92:00:cd:04:3b:fa:6a:
4d:4f:1d:07:31:a0:68:3b:60:4d:9e:52:60:ea:41:
98:ff:d7:e4:f2:20:c2:6d:37:6e:a0:de:74:d9:4f:
95:db:97:3b:82:52:7f:3b:66:1a:67:88:e2:bb:25:
02:25:1c:c7:ca:d3:23:f5:a4:bc:7b:ed:1f:cd:77:
1e:97:3b:1a:8a:2f:27:d0:a7:dc:43:c6:14:57:32:
5f:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:D4:79:38:D6:9A:79:01:2B:F6:D0:5C:EA:03:E1:1E:3E:9A:34:9D
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/MdR5ONaaeQEr9tBc6gPhHj6aNJ0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.66.128.0/18
Signature Algorithm: sha256WithRSAEncryption
11:ab:3a:e6:46:6a:c2:59:7d:c0:31:ad:12:b0:1e:45:96:2a:
11:49:28:87:8e:63:87:f7:26:c5:db:4f:50:bc:2b:20:31:bb:
0f:3e:fa:ce:83:c7:e5:11:4f:4d:66:27:35:4b:f1:cd:23:d3:
87:ed:d7:63:5c:d2:0e:99:6c:a7:3e:f0:6a:4f:c9:1e:b9:91:
b9:8e:e3:d5:f9:76:55:75:ba:88:87:64:f0:72:08:db:f6:bc:
fb:42:46:5b:fa:17:7e:26:e7:eb:54:2a:2b:46:a8:31:6b:84:
11:2b:e1:2c:65:77:63:9f:72:bc:82:03:87:3b:1d:10:fc:12:
d0:bf:7d:40:23:7f:b2:84:77:da:c5:f9:33:e0:73:8d:08:e2:
7e:7b:2e:ac:d8:3a:8b:0d:0f:b4:cb:56:7c:f1:f4:87:23:08:
d4:73:54:b4:6c:f9:6b:be:98:e5:c7:4c:dd:e6:71:2d:e2:60:
6d:70:4e:7c:ac:22:fb:58:01:5d:ea:48:ae:38:c4:4e:cd:70:
ea:64:57:07:8d:36:a4:62:28:d5:e7:d0:3c:95:ff:b0:5c:48:
03:f4:86:2c:e8:db:31:71:9d:92:3f:c1:ab:0d:3d:72:7c:97:
01:fa:d5:36:31:c5:3a:59:81:84:df:f7:1e:0d:3c:f4:0b:d5:
2b:f9:40:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:17 2025 by rpki-client