Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/XhKltBm1fwkihtyh34RhbNfIKSs.roa
File: XhKltBm1fwkihtyh34RhbNfIKSs.roa (raw, json)
Hash identifier: JMrggle229pYOWhzb/bkOOGNvjXqASDofC8SITBoqME=
Subject key identifier: 5E:12:A5:B4:19:B5:7F:09:22:86:DC:A1:DF:84:61:6C:D7:C8:29:2B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 097F
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XhKltBm1fwkihtyh34RhbNfIKSs.roa
Signing time: Sun 30 Jun 2024 01:36:20 +0000
ROA not before: Sun 30 Jun 2024 01:36:20 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.79.220.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2431 (0x97f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:36:20 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=5E12A5B419B57F092286DCA1DF84616CD7C8292B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:1e:b1:e3:70:ce:17:a8:6d:87:ca:40:b3:bd:
65:a2:3d:2e:a2:cc:39:fe:b3:c7:c5:6f:fa:d3:ad:
bd:26:01:02:8d:7b:f1:7c:25:a7:d5:ef:cc:94:a2:
eb:f8:b2:78:0f:83:30:72:ac:13:78:32:b4:19:52:
df:20:f4:c7:34:c4:67:c5:8f:68:d5:b3:91:3d:e6:
48:c8:68:7f:58:4b:c5:a7:30:32:e6:4a:5f:7d:d7:
3a:4f:7f:60:89:96:a2:ab:c4:3c:03:e7:0f:aa:3c:
c4:49:31:5a:56:24:4f:1b:80:9d:60:8d:17:5b:d2:
7e:2c:c7:b0:88:67:e6:7a:94:cc:51:12:ad:66:c4:
37:d6:f1:25:aa:df:cf:17:43:8e:7a:61:a7:0c:35:
c0:c4:37:65:6b:0d:16:5f:69:49:f9:29:07:9c:4d:
4c:76:94:52:79:34:05:70:90:0f:b8:78:81:17:16:
fc:8f:bf:42:3d:b9:83:6e:53:25:cc:5f:3e:2c:42:
11:0d:27:60:0b:80:78:a1:47:f3:b2:1c:04:b2:f7:
2e:69:6e:2b:65:c0:32:d4:59:b7:c2:91:56:64:19:
c7:b3:31:5e:e2:3b:2e:93:79:70:47:b2:8c:c9:69:
ea:76:ad:9f:c8:4d:6a:11:88:78:77:c6:25:43:b3:
03:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:12:A5:B4:19:B5:7F:09:22:86:DC:A1:DF:84:61:6C:D7:C8:29:2B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/XhKltBm1fwkihtyh34RhbNfIKSs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.79.220.0/22
Signature Algorithm: sha256WithRSAEncryption
6f:29:23:ce:04:2c:c3:7a:db:30:6f:ea:3b:71:a6:d9:a5:4b:
f1:28:d6:ac:c6:9c:31:82:81:d1:13:5a:64:d5:e8:46:fc:e5:
9e:e9:f1:ea:91:74:1a:0f:bb:6e:12:c3:78:3c:06:5e:21:bf:
6c:ba:71:cd:ed:9e:4e:89:6d:b5:ad:2d:fa:a4:92:73:1e:f7:
aa:f2:d6:42:66:0d:0e:e4:b0:59:39:fb:ab:16:92:25:ee:2c:
33:90:1a:47:91:32:2f:e4:e4:f5:cc:78:50:58:86:1b:48:b0:
c9:4e:1f:6d:a0:d5:59:7d:27:e4:0b:f3:87:42:34:8f:26:8a:
b5:45:c3:2d:45:99:4a:15:27:09:94:95:e1:a9:74:a9:a6:e5:
56:92:fd:90:f7:eb:10:13:2c:84:a2:d0:ea:96:9b:73:96:42:
e2:81:c0:4c:e2:91:81:04:93:30:d9:16:18:b4:73:74:dc:ec:
f7:a0:0f:53:af:11:b2:86:48:e7:a5:10:12:8b:c8:10:7b:83:
21:11:76:13:79:13:f4:8e:3b:80:7c:2c:87:b5:23:ff:fe:29:
7a:1d:08:f4:a7:4b:b3:44:e8:86:9f:7c:6e:b5:c4:24:e2:47:
f3:9f:b9:3b:d9:49:49:b4:29:08:1b:89:32:26:32:26:e9:57:
2d:ff:25:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:21 2025 by rpki-client