Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/SBIQoweWbzOaTxGKxSbonjOTGDI.roa
File: SBIQoweWbzOaTxGKxSbonjOTGDI.roa (raw, json)
Hash identifier: NVYuP6zSfMGA4s3iH4mC8GSXk7ti13fzC/7H6I6t22Y=
Subject key identifier: 48:12:10:A3:07:96:6F:33:9A:4F:11:8A:C5:26:E8:9E:33:93:18:32
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0647
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SBIQoweWbzOaTxGKxSbonjOTGDI.roa
Signing time: Tue 30 Apr 2024 01:31:30 +0000
ROA not before: Tue 30 Apr 2024 01:31:30 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.101.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1607 (0x647)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:31:30 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=481210A307966F339A4F118AC526E89E33931832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:0f:68:e7:6c:dd:b2:9d:92:8e:43:dc:18:c9:
13:57:79:07:2e:0f:e7:21:b9:45:5a:5a:ef:d7:e4:
60:ea:4a:00:2b:aa:0e:29:06:53:33:06:3a:50:92:
57:4e:f9:09:c4:1a:74:16:e8:66:8e:bf:54:c2:ef:
45:d9:ac:7f:74:12:22:ad:a3:91:16:49:50:13:2a:
54:dd:8a:d3:31:38:31:28:3d:66:6d:04:a7:fd:5a:
ba:d1:40:22:5c:66:f8:c5:43:57:13:d8:ef:2b:4b:
68:e6:47:58:dd:3f:04:03:55:46:25:50:d3:57:f1:
85:b0:f9:23:2d:72:33:ed:a3:38:18:b9:17:ac:5f:
10:6a:d1:29:8d:4e:64:15:d1:09:5b:e2:fb:da:b2:
5d:b0:22:21:ca:79:2d:e3:ed:9b:40:6f:3a:05:6e:
1d:a8:b6:34:71:c9:56:79:aa:b3:c3:6f:e4:30:e5:
aa:a4:47:b9:f0:d9:d4:e1:9f:ae:00:01:1b:b0:66:
62:e0:f7:e6:c3:5b:7b:ee:7b:af:77:0b:2d:d5:b2:
5b:4f:26:31:7f:07:60:87:53:ff:82:a8:f2:de:0d:
80:ae:e9:29:36:1d:d5:7c:2b:c3:39:ff:5f:11:f9:
2e:16:02:8c:9f:e2:4f:df:60:6f:1e:f7:96:74:71:
49:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:12:10:A3:07:96:6F:33:9A:4F:11:8A:C5:26:E8:9E:33:93:18:32
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/SBIQoweWbzOaTxGKxSbonjOTGDI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.101.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:3d:05:00:e0:90:c6:31:df:a4:d1:83:cb:ec:97:e9:61:84:
47:de:d1:77:98:26:5b:8b:e4:cd:e5:2a:8f:b0:44:70:e4:ae:
22:97:a5:ae:91:cc:cf:53:9a:41:93:86:4d:1e:c8:af:74:8e:
ae:b9:c2:4e:0b:d4:9d:8a:bc:99:21:dc:46:3b:f9:36:24:54:
ae:25:4e:b2:5d:d6:64:9f:ca:a5:0e:f2:51:0e:ce:3e:4e:85:
3b:97:c1:4c:e3:9a:a1:af:7c:5e:c9:04:14:09:20:73:7f:e5:
56:83:dd:e1:59:49:86:73:9e:56:ec:d2:a3:d5:67:b3:2e:08:
db:12:e7:a1:8a:f7:92:f7:d5:12:a2:c3:d6:25:8f:41:79:37:
52:90:89:7d:c3:df:b6:2b:c0:c6:1b:35:9c:58:27:3a:e5:20:
9b:0e:7d:95:fb:b0:c2:30:92:e8:ee:75:cc:3d:ea:19:55:ba:
32:30:72:7d:4b:5b:3b:24:d3:9b:ad:79:7f:88:f8:fa:54:95:
3d:f6:f7:f1:dc:5c:ce:fc:56:0d:88:bd:e7:c2:0e:cd:bb:78:
cb:17:31:09:6e:e8:09:34:4e:3a:32:3f:3b:5c:dc:46:8e:b9:
1c:98:19:9b:f6:49:1b:c0:bc:ef:c7:d9:d8:5c:ef:2e:7c:a2:
c7:ea:62:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:08 2025 by rpki-client