Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/QTxJPtFM9gUluQzmZeWk8vNdwXs.roa
File: QTxJPtFM9gUluQzmZeWk8vNdwXs.roa (raw, json)
Hash identifier: 0gdAkqcCd1yuMegPfYOZQU0PS7hrTzn/QMi+zyghz9M=
Subject key identifier: 41:3C:49:3E:D1:4C:F6:05:25:B9:0C:E6:65:E5:A4:F2:F3:5D:C1:7B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 05A5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QTxJPtFM9gUluQzmZeWk8vNdwXs.roa
Signing time: Thu 27 Jul 2023 17:00:18 +0000
ROA not before: Thu 27 Jul 2023 17:00:18 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.76.80.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1445 (0x5a5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 17:00:18 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=413C493ED14CF60525B90CE665E5A4F2F35DC17B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:ed:be:73:1d:12:f5:bf:c0:e7:f7:0f:88:1c:
0d:2b:60:62:39:8a:01:5d:7c:98:59:ed:f1:9c:dd:
03:4e:b2:14:7e:49:d5:41:fc:bf:6f:3b:3c:57:a4:
05:38:72:2d:05:c6:e4:5d:c5:2c:81:bf:6c:10:2e:
6a:75:bb:19:2f:01:35:1b:80:cb:87:7c:15:7b:69:
0a:08:09:c1:ae:d3:a2:7c:f0:2a:bf:2c:75:d7:27:
02:9e:4f:46:d7:6d:63:de:e4:dd:8c:e0:83:90:6a:
b6:eb:2c:ca:b7:f4:e1:e2:12:4f:6f:ef:0c:38:ea:
86:1d:04:7a:3c:e2:da:c0:3d:a6:10:11:b9:89:b3:
8e:21:54:40:5b:c0:3e:cb:40:72:53:76:38:15:13:
26:af:20:3a:b0:fc:76:6c:73:5b:96:94:7f:99:37:
e5:84:a8:8c:04:0c:db:24:39:43:e3:0b:0d:1e:c8:
ef:d7:17:f5:df:37:5e:39:44:5c:0d:86:b8:28:10:
9d:f7:36:88:8f:65:54:0f:d4:66:18:43:bf:c3:91:
2d:ee:57:5a:68:e5:ef:73:55:4c:3e:69:0b:29:36:
d4:0f:e1:aa:c6:36:55:f2:a4:64:ac:10:6e:46:19:
8a:51:dc:b1:98:0a:c2:9c:7b:27:f9:3b:20:5c:0f:
56:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3C:49:3E:D1:4C:F6:05:25:B9:0C:E6:65:E5:A4:F2:F3:5D:C1:7B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/QTxJPtFM9gUluQzmZeWk8vNdwXs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.76.80.0/22
Signature Algorithm: sha256WithRSAEncryption
63:ed:e9:7e:0f:4b:f0:ed:77:b7:d2:0f:5c:26:94:4e:97:06:
a9:e7:65:0f:3a:41:07:dd:e9:d0:23:33:73:3c:f3:ac:92:86:
0d:7e:3c:fc:2b:a2:17:1b:7b:56:1b:47:3b:61:d9:88:4c:7a:
74:a0:f9:a0:3c:19:d5:66:a2:e3:0e:40:ef:d8:54:e4:fb:48:
0c:9c:ab:81:39:d1:26:96:45:8f:ae:77:60:18:54:7c:32:51:
cf:56:89:67:22:c9:58:0c:56:5b:c7:55:99:7f:01:b9:2f:e6:
64:03:fc:56:ff:77:3b:01:24:89:3c:28:e9:ef:f2:4b:92:14:
a0:b5:7b:b4:09:1d:ad:3c:f7:03:5b:03:69:92:5a:51:b4:28:
29:6f:c5:05:b4:b1:15:ed:b9:89:06:9f:19:3c:0c:6b:0e:14:
eb:ea:58:17:c8:c4:26:89:04:e5:04:55:01:38:ba:5c:e9:fc:
4c:2f:ff:5d:3d:9c:1d:38:47:38:1f:1d:2f:73:58:af:65:1d:
eb:6c:44:d7:5b:44:76:85:28:c7:b0:95:14:29:f1:d6:e3:d9:
b6:fe:0b:15:c0:57:02:69:3c:b6:d3:f1:a4:22:b2:fe:e8:18:
57:f8:a9:ef:26:f4:30:10:fb:7b:7a:ce:9a:99:d5:d3:ba:04:
85:e5:f4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:35:27 2025 by rpki-client