Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q22VJc0dVe4bF-pTWt5YcX_gR5s.roa
File: Q22VJc0dVe4bF-pTWt5YcX_gR5s.roa (raw, json)
Hash identifier: wjl3w/fWcizehWQdrxhKQIwn3pU599uFkKGmA+DvNS8=
Subject key identifier: 43:6D:95:25:CD:1D:55:EE:1B:17:EA:53:5A:DE:58:71:7F:E0:47:9B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05F1
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q22VJc0dVe4bF-pTWt5YcX_gR5s.roa
Signing time: Thu 29 Feb 2024 01:35:41 +0000
ROA not before: Thu 29 Feb 2024 01:35:41 +0000
ROA not after: Fri 14 Feb 2025 01:30:03 +0000
asID: 9605
IP address blocks: 1.75.224.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1521 (0x5f1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Feb 29 01:35:41 2024 GMT
Not After : Feb 14 01:30:03 2025 GMT
Subject: CN=436D9525CD1D55EE1B17EA535ADE58717FE0479B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c0:68:14:1e:bd:17:3f:fd:d4:d1:3c:1f:6a:
53:7f:44:3a:da:2f:a2:3c:0b:6b:61:fc:bd:91:b1:
9f:73:42:3e:88:82:a8:01:13:43:27:aa:65:7f:8b:
1b:b0:43:9a:26:6e:2e:2a:16:ce:71:0a:9e:58:7e:
b4:96:21:96:26:5f:52:3a:ec:eb:95:67:ba:e6:c4:
99:46:1b:d0:ce:0a:83:a9:8b:68:56:ec:5b:9f:d4:
49:3d:81:bb:86:ad:ba:1d:18:ba:71:74:64:7b:29:
d2:bb:30:3d:bc:6d:aa:8c:ec:e4:2a:94:85:d2:82:
34:d2:40:5a:71:43:30:63:f2:2a:cb:de:1b:32:b0:
34:9a:85:e9:b9:e5:dc:4b:08:87:9a:92:7b:cc:7e:
c7:5a:14:87:3c:ae:84:cd:83:f7:a5:b4:05:7e:f2:
f0:06:f4:e4:17:2b:08:ef:a9:56:70:64:8b:b9:53:
92:e8:78:8d:56:2e:36:53:69:ef:c6:a5:30:f9:77:
56:c8:b1:6a:57:a9:f8:49:31:f3:64:cf:f9:b1:1a:
d0:9c:8d:c7:a6:72:0d:1d:30:4f:67:c7:ea:13:b3:
bb:66:a4:6c:09:a3:06:2f:ab:5b:47:9e:85:b5:20:
74:ee:16:ba:9b:71:62:f6:89:5d:1b:41:b4:e9:fa:
22:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:6D:95:25:CD:1D:55:EE:1B:17:EA:53:5A:DE:58:71:7F:E0:47:9B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q22VJc0dVe4bF-pTWt5YcX_gR5s.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.75.224.0/22
Signature Algorithm: sha256WithRSAEncryption
97:ea:2d:fa:f5:ef:23:9d:3d:7d:97:76:f7:74:80:91:0f:70:
c5:ad:bb:7b:8c:6f:82:0d:c9:2c:99:8d:fe:0a:50:c4:cb:a5:
e9:9e:03:f4:53:bc:0f:63:4c:5f:1e:ab:01:ce:42:ed:73:8c:
61:6d:79:e3:c7:1b:e0:ab:d0:60:cf:d5:a2:c4:8e:25:fe:fe:
86:68:47:00:c4:bb:9c:86:0a:c7:c3:67:2f:45:8b:b3:6c:36:
13:f4:ac:f8:8b:52:ec:ef:0d:70:48:ff:fc:b4:52:09:19:b5:
ab:75:f9:55:32:74:3e:b1:f8:0a:cf:49:a5:58:32:28:2b:28:
9a:50:52:74:5b:15:2e:9d:9f:4e:ee:45:b9:f1:8f:1e:18:cb:
ae:04:48:e9:f8:aa:76:13:2b:2a:3f:e9:8d:c2:40:cb:4d:7d:
bf:17:b8:09:9b:5b:e3:6c:02:fb:41:a7:c4:84:7f:04:d2:d6:
be:b8:04:aa:1d:71:e7:28:77:a9:b3:b6:3a:d2:4c:ee:05:c2:
4e:6b:37:ee:09:eb:8d:b2:07:30:75:04:53:e0:a6:5f:81:dd:
3d:8c:ea:fd:db:e0:c4:09:1a:21:a4:55:fb:fd:4c:5b:30:3a:
27:9b:f5:09:92:f6:69:c9:19:99:4b:c9:8a:15:bd:44:5b:6a:
e6:72:b1:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:11:14 2025 by rpki-client