Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/cJZxUCWK8lPtqPXFgXFsmYM7hm4.roa
File: cJZxUCWK8lPtqPXFgXFsmYM7hm4.roa (raw, json)
Hash identifier: nH0RMB+uhb2HqzrRgXgyezUnAAJpwTseU4bOOYksEt0=
Subject key identifier: 70:96:71:50:25:8A:F2:53:ED:A8:F5:C5:81:71:6C:99:83:3B:86:6E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0872
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cJZxUCWK8lPtqPXFgXFsmYM7hm4.roa
Signing time: Tue 30 Apr 2024 02:18:31 +0000
ROA not before: Tue 30 Apr 2024 02:18:31 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.102.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2162 (0x872)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:18:31 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=70967150258AF253EDA8F5C581716C99833B866E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e8:99:44:6e:92:69:55:e1:0b:b9:de:6c:7e:
81:2f:68:36:48:bb:bd:a3:f1:6f:c0:83:48:0f:8c:
4c:31:b4:1d:ce:35:14:04:6a:10:1d:4c:97:20:45:
b0:9a:c7:a9:33:6e:ac:be:69:91:69:14:56:37:d0:
d5:9f:c9:b6:f2:d6:86:ef:89:be:40:79:4c:84:3e:
e1:66:29:af:9e:2b:b1:d8:a2:a5:9d:b2:57:a2:b9:
25:12:5f:bf:f9:eb:40:a1:9c:37:bb:a7:ab:66:95:
ba:f7:ea:fd:6d:03:52:92:fa:4b:73:be:78:a4:44:
e7:c6:f2:99:e1:99:b2:80:ba:c8:ae:dd:0f:1f:10:
85:81:ea:cb:7d:56:f0:a9:7c:41:e5:ff:1e:dc:c4:
49:a6:6b:64:0f:85:14:46:e5:be:c7:af:0e:ab:1b:
8d:f9:01:89:cb:72:97:7f:ca:9e:d5:ec:3d:18:19:
98:7c:0d:87:dd:59:61:2c:93:c2:8b:f7:f2:00:74:
7a:8e:14:79:1d:e2:60:d0:18:ba:a6:32:da:d5:e9:
43:42:cc:88:02:5c:e8:71:93:03:f7:73:0e:87:b9:
b8:37:3d:e3:ca:ef:29:84:ed:31:f5:76:bf:1d:e7:
14:71:dd:bf:0d:0a:1d:5b:2e:17:9d:fe:85:90:b0:
87:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:96:71:50:25:8A:F2:53:ED:A8:F5:C5:81:71:6C:99:83:3B:86:6E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/cJZxUCWK8lPtqPXFgXFsmYM7hm4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.102.0/23
Signature Algorithm: sha256WithRSAEncryption
a5:93:88:d1:45:b3:bb:6c:77:e4:13:1b:fe:bf:0f:4e:47:74:
63:ff:f8:ee:84:dd:41:8c:6c:8e:c1:5a:c5:5a:33:d0:b3:49:
56:c1:64:58:da:0c:c0:b6:07:ab:fc:27:15:cd:74:91:b4:7e:
7a:4a:d3:27:8d:7c:bb:84:b6:44:22:58:4b:e0:66:5f:b5:2b:
b2:90:25:bf:ca:9b:49:89:4f:30:44:27:fc:0f:52:92:ac:8d:
1a:32:a9:9e:ab:d8:a7:90:f3:13:4f:9d:df:52:37:7b:8e:3e:
53:a4:0c:b6:1c:cc:08:a1:5b:c5:7b:8e:10:99:12:32:d6:89:
4e:f0:66:df:1b:9a:bc:c4:93:20:1a:61:12:30:2f:6d:e2:2d:
80:c8:2b:60:3a:3a:b7:26:c9:4d:76:be:9e:03:99:cd:0a:1d:
37:c6:03:b2:85:d5:3a:3e:4d:ae:6f:0e:91:0e:9b:ba:ba:39:
b7:28:4e:af:b6:39:29:29:48:79:49:02:1b:b2:9f:5e:28:31:
0d:fa:82:4e:d1:d4:e3:d4:95:3f:43:25:98:cf:3b:67:ba:f6:
0e:4c:33:d1:89:87:d9:6c:82:5f:be:49:03:01:77:f8:1a:5b:
c5:0b:e7:71:b2:6e:6d:fe:e4:8d:d8:5b:47:97:af:b4:e6:46:
70:e2:ea:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:47 2025 by rpki-client