Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ghaRKtsUG5ii_9eQpoJFfDPQtkk.roa
File: ghaRKtsUG5ii_9eQpoJFfDPQtkk.roa (raw, json)
Hash identifier: +AgPyrFJwTFgseVUsd7qxM3iKcCEu4QT948VtIgexyQ=
Subject key identifier: 82:16:91:2A:DB:14:1B:98:A2:FF:D7:90:A6:82:45:7C:33:D0:B6:49
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 074E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ghaRKtsUG5ii_9eQpoJFfDPQtkk.roa
Signing time: Tue 30 Apr 2024 01:58:55 +0000
ROA not before: Tue 30 Apr 2024 01:58:55 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.105.114.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1870 (0x74e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 01:58:55 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=8216912ADB141B98A2FFD790A682457C33D0B649
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:41:8d:aa:e1:4c:99:16:42:13:d7:20:69:c0:
14:66:62:30:f3:b8:56:d8:c8:61:f7:d7:c6:7b:51:
24:f1:48:6a:a9:e7:61:24:da:e4:84:41:cd:cb:41:
7e:91:14:fa:16:e8:d1:a0:fb:e7:99:69:85:8a:8b:
b9:06:5e:ec:f0:69:ab:33:38:fc:f9:ce:91:b9:09:
30:dd:81:75:03:7c:12:4a:b2:2f:66:8c:fc:4c:57:
80:a5:21:77:c6:f0:9a:ef:f6:1f:67:78:12:b9:e9:
af:c6:2b:1f:a4:0c:d8:ce:4c:b3:75:3e:1d:90:e6:
38:45:81:88:f3:3b:8d:2d:c7:4c:12:79:d2:10:70:
97:36:56:ec:b7:35:46:0b:44:80:54:73:da:ca:a6:
24:d6:95:74:8b:66:fb:9d:4c:82:7e:a5:5d:87:5f:
75:7e:4d:e7:6c:2e:92:ed:7c:a5:4a:0a:45:01:74:
b9:f4:1d:46:a6:52:4b:78:ba:b1:b3:bd:36:ae:57:
b7:27:d5:d9:fe:1a:6e:14:c6:14:77:0d:6b:a6:f8:
fe:76:4b:9a:68:11:66:6d:e0:e9:a0:a9:74:2f:75:
64:cb:ce:14:ff:5d:f6:cd:a9:a6:1c:cc:08:6f:28:
a9:43:7c:00:cc:87:bc:e0:86:c9:cd:34:04:e3:3c:
46:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:16:91:2A:DB:14:1B:98:A2:FF:D7:90:A6:82:45:7C:33:D0:B6:49
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ghaRKtsUG5ii_9eQpoJFfDPQtkk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.105.114.0/23
Signature Algorithm: sha256WithRSAEncryption
d9:6a:2c:69:38:3b:14:f0:34:9d:53:19:3f:a9:d8:1e:19:2b:
65:7f:fd:36:2d:b9:6c:51:fa:37:b2:d8:4e:9a:73:78:e7:ca:
a8:0d:e2:e5:84:b6:7f:a5:57:32:49:96:3f:c7:a3:57:29:71:
b4:a8:56:cc:94:52:89:21:f7:61:6b:8c:a8:79:70:4e:5e:df:
b5:62:2f:a1:7d:5c:dc:28:e4:04:e6:18:85:5d:0a:17:d5:df:
f2:23:b3:8f:f1:78:98:f6:cd:dc:6c:50:aa:4f:df:f3:88:2f:
61:14:e3:fc:55:3a:12:5c:73:4e:3a:1d:64:97:ae:cb:e7:74:
da:57:7d:09:94:c8:e9:6b:80:94:18:af:f8:f8:ad:02:60:13:
6a:97:49:fb:92:76:3b:ff:1f:ec:98:3d:26:4e:dc:cc:84:af:
ac:93:d4:9f:ab:e9:32:41:7b:f7:7f:12:b0:10:c9:7a:c9:25:
bf:93:6e:22:26:de:13:f6:5d:8b:d5:35:87:32:fc:a6:aa:b0:
8d:61:e9:ea:cf:e5:70:31:a4:78:02:1e:06:a6:47:95:e9:6c:
8a:a3:58:44:dd:21:ed:d9:00:f8:a8:d0:90:5e:55:8c:6d:c1:
b7:ba:ae:91:9d:64:38:f1:ec:a0:1c:32:64:87:31:9e:ed:ae:
7f:b2:28:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:28:11 2025 by rpki-client