Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_-IKSFJGd-hC0kHWG4gEUjhKDP0.roa
File: _-IKSFJGd-hC0kHWG4gEUjhKDP0.roa (raw, json)
Hash identifier: zcsH4nosbeESqHafCYd7LCAFpDPqrFWjyxOlPvvNrk8=
Subject key identifier: FF:E2:0A:48:52:46:77:E8:42:D2:41:D6:1B:88:04:52:38:4A:0C:FD
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 094A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_-IKSFJGd-hC0kHWG4gEUjhKDP0.roa
Signing time: Sun 30 Jun 2024 01:29:34 +0000
ROA not before: Sun 30 Jun 2024 01:29:34 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 1.72.16.0/21 maxlen: 21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2378 (0x94a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:29:34 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=FFE20A48524677E842D241D61B880452384A0CFD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e2:32:34:67:b4:36:ff:ef:ec:a7:40:91:38:
d3:21:c1:50:f9:f7:da:bf:a0:34:27:fe:37:4a:da:
4d:37:f9:04:30:1b:c8:16:57:d4:be:ee:7e:b1:01:
a1:be:dd:22:71:bb:36:33:87:7f:ff:5e:d9:3a:76:
fb:0c:f9:84:ab:15:9c:6f:cb:3b:eb:75:72:d1:19:
42:84:f9:07:75:de:c9:5d:e6:ff:02:72:c3:cc:37:
ca:62:de:f0:81:da:4b:9a:cc:b0:b9:83:89:d0:78:
8e:d5:f5:d4:4d:3e:6e:a9:a6:a7:82:86:7f:63:61:
d5:74:33:24:18:f2:c3:85:fd:f8:40:3a:b5:ce:36:
42:c5:1b:58:a7:51:c7:64:45:30:68:a1:0c:83:a8:
51:60:7d:02:a8:03:f9:e1:5f:98:1f:1b:13:30:ea:
98:0f:6d:2b:86:7d:b2:46:66:14:fb:3d:c6:aa:1e:
5a:7f:38:fd:81:c5:cf:53:de:dc:ce:99:f9:7a:c8:
3b:62:f3:3f:f6:5c:ab:18:cf:72:20:0d:7e:3c:1a:
b2:8a:4b:3b:3a:fa:c8:15:40:80:3e:ea:dc:57:17:
a9:0b:05:62:7d:83:41:c2:fa:f7:17:63:7b:e2:d0:
48:8d:c3:af:04:1b:c2:78:ed:18:46:f4:1b:de:df:
77:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:E2:0A:48:52:46:77:E8:42:D2:41:D6:1B:88:04:52:38:4A:0C:FD
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_-IKSFJGd-hC0kHWG4gEUjhKDP0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.16.0/21
Signature Algorithm: sha256WithRSAEncryption
0e:00:a1:d9:05:01:9f:77:b4:46:6b:28:df:98:56:b1:a8:51:
c2:d0:a6:dd:96:c5:09:a5:d9:a7:fb:0a:85:99:38:cc:b5:79:
1c:4e:18:7e:06:4c:02:f7:39:d4:07:fc:b1:c0:c2:52:70:5d:
07:ef:1b:15:71:4d:05:93:0f:74:b9:92:7a:52:e4:b3:da:d0:
c2:cc:9c:48:6e:0d:e3:35:98:94:0b:3a:df:46:e4:d6:a7:b8:
8b:2a:46:72:45:ac:05:1b:c9:68:98:cf:4d:68:d9:73:4e:87:
f9:a8:4a:50:3e:f7:48:0b:f1:ce:e5:f2:ee:81:61:28:d2:4c:
83:23:21:a5:87:a7:09:3c:4a:fa:db:81:0c:ff:91:8d:58:2f:
a9:49:3e:da:a1:35:31:e6:e1:c3:30:b8:5a:a3:c6:74:bf:a0:
eb:4d:5c:05:8e:f5:c0:b9:fa:1d:0a:43:ab:2b:94:bc:0b:27:
bf:e5:02:c3:de:dd:b6:7e:32:96:a4:04:42:c5:8b:42:36:6e:
b1:cd:84:95:53:34:34:e1:5a:a6:fa:b6:1a:7c:81:bb:20:45:
3e:70:8b:e9:f9:b1:3c:5d:66:45:b4:9d:b9:09:78:c9:fe:0b:
e6:82:c3:7c:f0:e3:e3:37:1f:83:0a:df:c5:b4:3d:2e:36:46:
92:d7:22:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:22 2025 by rpki-client