Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/k36KtEY8EntZQDiEit-F6tVtMa0.roa
File: k36KtEY8EntZQDiEit-F6tVtMa0.roa (raw, json)
Hash identifier: KSSNxIioUWywozLM92YDe4sQcrXthHPADG3oGBp39Lw=
Subject key identifier: 93:7E:8A:B4:46:3C:12:7B:59:40:38:84:8A:DF:85:EA:D5:6D:31:AD
Certificate issuer: /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial: 4A
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k36KtEY8EntZQDiEit-F6tVtMa0.roa
Signing time: Sun 30 Jun 2024 01:40:24 +0000
ROA not before: Sun 30 Jun 2024 01:40:24 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 158.199.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 74 (0x4a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Validity
Not Before: Jun 30 01:40:24 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=937E8AB4463C127B594038848ADF85EAD56D31AD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e3:7b:74:b4:79:e5:d3:fd:4c:91:fc:f6:2b:
95:08:6d:ea:cc:ca:a7:cd:65:d5:ee:2f:09:99:04:
6c:52:63:27:40:a1:b3:d9:49:e1:d0:76:7c:76:e6:
40:1b:bf:9e:40:6e:2e:51:18:d7:41:54:24:00:38:
a8:44:01:94:5b:f6:a2:cd:58:cc:14:39:8c:e7:bb:
19:0a:43:60:84:96:c0:13:0b:8d:53:38:6c:01:76:
7d:16:1c:ac:ab:fd:31:75:ea:ae:a9:52:74:2a:d1:
ba:71:c6:66:56:c3:77:21:50:5f:f0:17:8d:f7:64:
77:ad:15:af:aa:c5:6c:80:d1:c2:6f:90:50:c1:98:
a2:c6:35:8e:9f:ce:d4:59:5a:5f:9d:fe:be:85:1f:
ec:08:69:50:c3:a2:49:21:91:f6:e1:57:1c:fc:29:
44:4f:00:f6:94:1c:be:08:dd:2a:72:03:87:04:f2:
0d:09:07:f6:c2:ae:8c:f0:18:a3:ef:b1:66:ab:94:
41:6a:a5:aa:37:fa:73:f7:2a:36:19:75:33:42:74:
85:a9:1b:3c:28:e5:35:67:f1:80:f4:8c:18:19:ef:
31:7d:65:6c:94:08:1d:53:6b:5e:f5:40:99:52:83:
80:29:88:3f:4b:48:0e:e5:31:0e:32:84:45:d7:cd:
93:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:7E:8A:B4:46:3C:12:7B:59:40:38:84:8A:DF:85:EA:D5:6D:31:AD
X509v3 Authority Key Identifier:
keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/k36KtEY8EntZQDiEit-F6tVtMa0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
158.199.32.0/20
Signature Algorithm: sha256WithRSAEncryption
92:5b:27:ce:57:f4:95:10:71:7d:83:47:19:d1:f2:6f:29:8b:
c0:37:9f:69:50:1c:2b:63:c7:71:56:f2:59:61:f7:05:c5:27:
06:35:04:ca:1a:a1:68:f8:29:c1:24:fa:6f:56:a9:46:a9:dc:
72:c2:44:a0:7b:ed:e7:14:95:4f:65:8b:5b:34:97:f2:6a:18:
b5:0e:49:9b:a0:94:30:b4:f8:f6:7a:77:87:f5:95:7a:cc:8a:
c1:13:46:50:15:80:1b:6b:1f:03:c0:da:d5:eb:05:9c:5c:24:
2a:3d:a5:67:aa:8e:4c:fb:88:c7:d2:6a:ae:02:fd:83:6f:28:
42:33:a9:3a:26:94:ea:22:aa:66:3a:6c:02:a1:bd:f2:30:8c:
4a:6f:5f:97:ce:5b:3b:1b:88:ad:f6:f8:3b:4b:b0:a9:f3:fa:
89:0c:e7:c4:a9:3a:9e:b0:b5:7a:6e:0f:4c:44:c9:37:22:fd:
27:e7:9f:73:ad:13:18:ad:09:fe:ac:bf:78:ae:68:08:99:50:
84:6c:b7:93:1a:f9:4b:ce:31:30:a5:ab:fd:3d:5e:43:6e:16:
38:1f:34:69:5d:fd:b5:2d:5d:5c:64:cb:79:7d:ca:e6:f1:49:
e2:93:39:b8:29:97:f9:ea:54:cd:10:92:24:e2:40:a0:c4:73:
e2:95:d1:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:24 2025 by rpki-client