Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZYQjTipXoUiONzQ-lDbjOFiuxNw.roa
File: ZYQjTipXoUiONzQ-lDbjOFiuxNw.roa (raw, json)
Hash identifier: lWsjUK5RTdzIErM7w0vtr6YcTPHgjqoVs0XBhrzW9Ig=
Subject key identifier: 65:84:23:4E:2A:57:A1:48:8E:37:34:3E:94:36:E3:38:58:AE:C4:DC
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 89
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZYQjTipXoUiONzQ-lDbjOFiuxNw.roa
Signing time: Wed 29 Mar 2023 16:04:56 +0000
ROA not before: Wed 29 Mar 2023 16:04:56 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.204.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 137 (0x89)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 29 16:04:56 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=6584234E2A57A1488E37343E9436E33858AEC4DC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:97:6c:6f:9e:c4:f4:c3:e4:c1:02:f7:4e:f6:
26:c3:a1:85:20:b3:be:e6:54:02:d3:1f:50:6a:d2:
08:af:64:43:69:b9:ed:08:cf:98:da:da:71:c6:78:
44:0b:40:b7:f6:88:8d:ff:54:3a:7a:6c:fa:12:bf:
b6:be:f6:02:8d:41:69:36:ae:86:0f:ee:44:7b:28:
26:db:1e:90:21:19:59:14:3a:a2:fd:1d:4b:82:46:
96:74:85:46:68:58:c0:0d:a6:7f:4b:96:ae:99:93:
81:f8:1b:c8:ed:bd:d5:ef:cb:ae:96:4d:23:6f:93:
11:3b:37:01:59:5e:e4:4d:a8:9e:52:84:4e:68:99:
89:bf:3d:c1:06:df:44:5f:7e:83:c5:28:49:41:8b:
ea:82:f2:5c:77:85:85:d7:29:bf:ad:ee:a8:c0:cd:
6e:d5:48:3e:88:42:09:9e:f9:12:85:f6:7a:6b:5e:
31:5a:08:c9:8d:39:8f:de:f3:a0:5e:5f:7c:84:df:
9d:1a:77:98:72:2a:1a:f1:1b:d7:d9:34:64:c7:33:
84:f7:92:e8:18:6e:3c:ce:c0:03:73:b8:1a:8c:55:
a1:a1:79:2a:46:93:9e:72:44:ca:fa:62:14:ac:0e:
d9:3f:53:ac:78:00:af:28:2e:97:1a:02:f1:af:82:
be:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:84:23:4E:2A:57:A1:48:8E:37:34:3E:94:36:E3:38:58:AE:C4:DC
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ZYQjTipXoUiONzQ-lDbjOFiuxNw.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.204.0/22
Signature Algorithm: sha256WithRSAEncryption
d0:6c:a1:e5:0a:f7:f6:eb:7a:7a:97:57:fd:bf:b7:b4:d2:db:
d4:d7:12:e6:91:e1:5b:05:a1:3e:1b:f0:61:b5:1d:1d:4e:bd:
b5:33:6e:b6:81:a9:dd:1c:52:ae:d1:6e:53:f1:52:32:c4:ae:
ee:0e:74:6c:c2:9c:4f:ab:1c:a6:fd:c9:22:3e:09:37:9b:7a:
c2:9d:5e:7c:ce:3a:bf:11:02:e5:7d:8d:cd:8a:5b:51:91:a2:
58:84:45:6b:c5:9e:bd:75:64:1e:cd:1a:39:2f:e2:5f:46:77:
9a:4d:d7:7d:8e:33:23:c6:3c:ae:34:a5:c9:bc:30:80:7a:6c:
82:de:20:8c:8d:61:bf:7c:6f:cb:5b:1b:13:96:c1:0b:92:09:
b5:38:98:51:c9:b2:0b:89:f8:eb:ff:c1:23:3c:0b:3f:02:d7:
c8:11:ae:ac:4a:02:36:79:3b:e7:2a:27:f8:55:ed:78:aa:fa:
82:f0:5f:a1:d4:b5:9e:9e:78:95:fd:b1:1f:4f:d8:3e:1d:07:
32:65:c7:f7:22:9d:73:ed:39:c7:44:03:0e:a0:98:56:0d:7d:
ad:11:52:41:37:4f:3e:ea:58:f8:5e:49:82:b2:1d:68:cc:1b:
0a:9a:f3:06:99:0a:5f:d6:b8:f4:6a:a9:5d:5a:e4:8c:98:7d:
22:d0:09:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:17 2025 by rpki-client