Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_2kvfUgX97nwisCsUQBThyanknc.roa
File: _2kvfUgX97nwisCsUQBThyanknc.roa (raw, json)
Hash identifier: SX/L+EPUUEGq81x18UdPfeVWT+ZyX0iIA4YzqIjpXOc=
Subject key identifier: FF:69:2F:7D:48:17:F7:B9:F0:8A:C0:AC:51:00:53:87:26:A7:92:77
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 098C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_2kvfUgX97nwisCsUQBThyanknc.roa
Signing time: Sun 30 Jun 2024 01:36:25 +0000
ROA not before: Sun 30 Jun 2024 01:36:25 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 27.231.0.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2444 (0x98c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:36:25 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=FF692F7D4817F7B9F08AC0AC5100538726A79277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:b1:a5:70:2f:03:f3:8a:02:6e:24:52:bd:bd:
c5:eb:0e:0b:51:87:2f:31:ca:d9:a0:e8:6d:d1:77:
67:e8:0e:e1:9c:9c:4e:ad:2e:e8:1c:09:12:b8:ac:
2b:00:ae:47:d6:79:d9:e8:2b:9e:8a:72:97:10:c5:
4b:90:86:bb:d3:fa:d1:be:9d:4c:9e:a3:51:de:d6:
27:15:2e:fc:92:e9:fd:2d:ae:cf:12:db:12:e6:14:
31:5d:ea:a1:f0:8b:d7:55:7b:3e:1e:06:9f:77:cb:
22:0c:75:30:2f:a1:ab:20:e1:be:d3:bb:e4:9b:10:
6a:45:9b:e9:8c:fb:54:bd:d2:1f:28:5b:6d:d8:dc:
d7:41:3e:9d:de:19:c1:8b:09:39:5e:81:31:ae:a8:
51:9f:9f:78:00:44:38:00:0f:5d:69:41:29:c0:53:
a8:7e:21:a5:99:89:8d:87:1f:5a:7d:a7:4c:fe:97:
c7:7f:6e:e5:9a:a3:24:df:c5:86:ac:51:bc:dc:42:
bb:b1:b7:42:65:05:04:05:b3:a7:42:36:42:ee:db:
ba:ea:ff:b2:45:66:cf:7a:e9:9b:be:d1:cb:ad:ac:
41:c7:14:fd:c2:55:ca:f3:3f:fe:6f:37:80:10:eb:
59:da:ad:21:c7:1f:23:1c:d9:8e:ba:b3:01:25:c7:
c1:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:69:2F:7D:48:17:F7:B9:F0:8A:C0:AC:51:00:53:87:26:A7:92:77
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_2kvfUgX97nwisCsUQBThyanknc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.231.0.0/17
Signature Algorithm: sha256WithRSAEncryption
10:ba:27:a3:2b:51:ef:e0:ed:e4:8f:46:a0:28:56:4a:c1:44:
e7:69:11:9f:a2:ad:48:66:b9:1c:c1:5a:34:26:f3:85:51:67:
47:4f:2d:53:49:65:cd:34:91:c6:c0:e8:78:c1:24:63:c4:09:
81:d2:a3:7c:36:13:26:4b:53:86:b0:07:f7:bc:97:0e:e9:28:
ac:03:f4:93:8b:68:63:6c:31:29:16:32:a4:ca:b0:59:e4:f2:
24:0c:5c:82:d6:9f:9d:b6:9d:3e:3d:7e:ca:45:9c:bd:62:c2:
33:13:a9:ba:79:02:de:c5:84:16:97:70:b6:c3:af:28:ce:47:
cd:35:49:68:7c:ef:20:d4:d2:f0:e4:56:b8:5b:3b:63:0b:b8:
dd:6c:b4:db:ff:de:f4:76:33:cc:e5:d5:58:40:42:d0:85:c3:
b2:a9:30:a3:55:59:71:62:e1:cf:80:7e:b4:55:e3:ea:cb:c9:
ad:2d:e9:26:0e:7e:9f:3f:05:a1:1b:e3:29:8b:75:27:28:2b:
62:38:a2:ab:11:f7:b4:3c:5a:63:19:d9:f3:b1:c7:87:6c:97:
40:fa:62:ef:ab:0b:72:99:24:fd:2b:99:45:d3:8b:3b:eb:7f:
8e:7b:2a:9d:38:5d:6d:dd:5a:85:94:f0:36:a7:dd:f7:75:fd:
55:fe:14:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:42:28 2025 by rpki-client