Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/fgaiPTjaw93krUDTZB0i0B2Exno.roa
File: fgaiPTjaw93krUDTZB0i0B2Exno.roa (raw, json)
Hash identifier: /HFwH3tHWyCUwXlyyDx4MKf5rKocoz4S2h8GMjB7Dao=
Subject key identifier: 7E:06:A2:3D:38:DA:C3:DD:E4:AD:40:D3:64:1D:22:D0:1D:84:C6:7A
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 098D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fgaiPTjaw93krUDTZB0i0B2Exno.roa
Signing time: Sun 30 Jun 2024 01:36:25 +0000
ROA not before: Sun 30 Jun 2024 01:36:25 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 27.230.90.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2445 (0x98d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:36:25 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=7E06A23D38DAC3DDE4AD40D3641D22D01D84C67A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:dc:ad:33:55:6b:bb:d9:48:a2:42:5d:f7:1a:
26:66:1a:29:1e:8f:d9:c2:d5:49:51:a9:5f:43:62:
f0:da:0b:c5:31:a8:fc:f9:a3:41:14:24:f5:78:82:
c0:d9:50:b0:19:bc:9f:d7:f8:e1:67:96:d2:b3:39:
8e:9c:99:5b:7f:f2:88:ff:95:25:91:1b:72:3e:ae:
52:33:cf:95:7f:cb:14:7e:c2:3e:f9:9c:32:5d:ba:
3e:38:03:b6:35:92:cb:25:bf:0c:11:df:bd:09:d1:
6a:54:b4:71:fa:84:6f:b0:e0:d3:9d:dc:d8:e5:82:
80:ec:df:f5:08:37:18:44:bb:41:bd:4f:17:49:03:
86:0a:24:bc:55:c0:45:02:72:0a:8c:c0:83:16:af:
dd:92:35:eb:b7:ae:00:53:81:fd:ea:9a:f1:01:d6:
c0:81:71:f5:a9:ca:a0:9e:7f:f1:2b:9f:89:cb:73:
84:38:cf:c3:50:1c:ec:79:75:2e:48:be:51:6a:46:
a4:f8:cb:e9:71:d7:84:c9:a3:5b:8e:b1:5b:8c:2f:
e0:0b:72:b3:89:47:b5:14:97:12:6f:82:73:da:f9:
20:68:8b:1f:e1:be:ac:23:30:38:99:54:0b:a2:16:
bd:32:2b:16:91:fe:aa:a2:b0:7d:a7:bc:89:6a:f2:
7b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:06:A2:3D:38:DA:C3:DD:E4:AD:40:D3:64:1D:22:D0:1D:84:C6:7A
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/fgaiPTjaw93krUDTZB0i0B2Exno.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.230.90.0/23
Signature Algorithm: sha256WithRSAEncryption
8d:7e:92:fb:e5:6e:04:81:ee:ed:d2:3a:91:c7:72:5e:11:d6:
44:b1:00:bb:de:e3:ff:09:00:2f:ae:4a:57:61:3c:fe:a9:a7:
99:58:2b:a3:65:12:13:e8:6c:bd:41:90:be:db:5d:ea:71:93:
20:2e:57:c0:5b:30:46:17:39:19:44:bf:da:1b:02:7e:03:fb:
b1:66:6f:83:f2:5a:5c:84:70:72:6b:60:5d:54:d4:cf:7b:a5:
a8:d3:db:82:e4:66:70:b8:35:e4:f3:92:af:5d:77:c3:8b:93:
a5:c1:fc:84:e3:e4:f6:aa:14:52:f2:b2:44:da:26:9b:4c:c8:
ec:0b:1e:5d:07:56:3f:73:70:53:c3:8a:21:9c:93:81:7a:ce:
34:71:25:db:ce:bb:cf:fc:c9:04:24:2a:21:dc:bf:42:6e:71:
ea:23:47:a1:1a:ad:f5:4a:33:82:01:f5:8e:db:9e:43:1e:12:
71:eb:9d:08:d1:96:a7:58:83:83:08:8d:d3:26:dd:4e:19:15:
cb:83:b3:d3:56:bf:85:c5:83:e2:22:f5:4f:30:ea:5a:40:6a:
77:b5:24:c4:d1:18:a8:f3:49:00:75:fe:ab:b2:48:c1:69:f7:
7a:5b:b5:68:ac:49:5b:2b:e6:a0:4f:65:2d:38:96:74:c5:f9:
22:87:2c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:56 2025 by rpki-client