Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q7QnVSczVBu0Ji6eLc-U-yGPPt4.roa
File: Q7QnVSczVBu0Ji6eLc-U-yGPPt4.roa (raw, json)
Hash identifier: km516tV9O6FeQk59gCTMG8Tzjc9lt1a2Iw8jjug/mLo=
Subject key identifier: 43:B4:27:55:27:33:54:1B:B4:26:2E:9E:2D:CF:94:FB:21:8F:3E:DE
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0838
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q7QnVSczVBu0Ji6eLc-U-yGPPt4.roa
Signing time: Tue 30 Apr 2024 02:14:30 +0000
ROA not before: Tue 30 Apr 2024 02:14:30 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.104.23.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2104 (0x838)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:14:30 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=43B427552733541BB4262E9E2DCF94FB218F3EDE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:3c:e9:7d:c4:ef:dc:e1:c1:22:12:b3:ad:3b:
8d:c2:52:0d:0a:ab:9e:b2:6c:5d:ee:f6:cc:7f:ac:
32:a9:b7:50:cf:3e:98:64:4b:f3:0d:7d:e3:ff:60:
4d:ea:54:10:91:30:0d:ac:4e:76:8a:a9:c6:ef:ce:
db:0f:5c:81:8b:b4:05:23:32:e9:8a:91:f0:26:ab:
c9:0d:07:47:a9:4f:a8:5c:2d:9f:3d:53:b7:98:20:
ff:8a:b3:ab:05:20:82:35:a7:1a:b3:92:ce:7a:75:
08:2e:d5:5d:79:1e:7f:3a:b4:1e:33:33:ed:cf:86:
5d:e8:60:cc:18:da:2c:f5:ec:3a:a3:15:ca:2f:b0:
70:55:38:92:c4:45:a4:65:33:50:68:63:af:ac:07:
f3:b4:53:67:51:31:12:dc:f0:97:9b:04:36:ed:3d:
9f:00:14:9a:82:68:63:df:db:81:06:57:72:70:89:
c5:3c:12:e7:67:0d:76:77:1c:cb:99:f7:45:a8:a7:
d5:9e:69:b3:a1:bb:aa:63:dd:a7:cf:0d:d8:27:f2:
a1:9c:09:9a:f5:34:b1:b0:3e:41:77:4a:52:49:62:
3f:92:9e:cb:59:0f:49:48:96:7f:78:c3:d1:d1:f8:
61:9a:5f:aa:35:ff:8d:83:cc:cc:0a:93:45:85:96:
63:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B4:27:55:27:33:54:1B:B4:26:2E:9E:2D:CF:94:FB:21:8F:3E:DE
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/Q7QnVSczVBu0Ji6eLc-U-yGPPt4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.104.23.0/24
Signature Algorithm: sha256WithRSAEncryption
74:e5:4b:8c:91:da:f1:ff:49:30:87:9c:49:78:a3:48:1a:82:
a6:76:60:a6:6a:9c:82:52:a0:c0:98:e6:28:f7:8b:57:05:02:
cb:4e:eb:ef:1e:1b:eb:67:21:3c:24:8c:93:d8:bd:86:3e:8d:
7e:c6:2a:68:23:d6:fa:cc:3a:91:2b:8a:cb:60:03:fd:80:66:
46:e6:40:b4:5f:7b:33:e9:39:3a:cf:82:4e:b7:f4:79:21:54:
0f:c9:df:86:d7:21:c4:d9:c8:a3:16:dd:90:a0:18:99:41:e0:
f9:f2:b6:1c:23:ec:9a:aa:db:ee:f6:65:31:01:92:b3:8f:82:
22:5c:c7:74:f0:97:79:4f:cb:6a:99:6f:6a:b6:2e:75:b9:76:
42:43:d2:14:a3:77:c4:a6:8a:55:1e:91:06:6c:c0:b6:6c:f0:
e2:cf:c4:6f:be:4a:71:f5:ac:39:fb:d7:e7:c4:b6:bf:c1:ac:
7d:a4:68:6f:91:8b:66:9c:a4:40:25:1c:f9:c1:e3:bd:87:34:
4f:07:cb:a3:67:25:a5:a2:0b:45:4e:d2:f6:24:e6:d6:78:eb:
c3:7a:92:fd:55:06:de:d4:dd:9e:c1:7a:9c:32:d6:06:68:eb:
f3:f1:b4:9f:e5:67:7e:cd:71:59:63:19:64:7a:5d:c2:d0:b4:
c0:c7:91:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:12 2025 by rpki-client