Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/mvJ87G5ALog61Dj4-nGZejVun54.roa
File: mvJ87G5ALog61Dj4-nGZejVun54.roa (raw, json)
Hash identifier: as52BDDhIw7AdbjdNnNvfPKPSS7RKL+yXyJcLsgNY78=
Subject key identifier: 9A:F2:7C:EC:6E:40:2E:88:3A:D4:38:F8:FA:71:99:7A:35:6E:9F:9E
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 093B
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mvJ87G5ALog61Dj4-nGZejVun54.roa
Signing time: Mon 17 Jun 2024 08:39:52 +0000
ROA not before: Mon 17 Jun 2024 08:39:52 +0000
ROA not after: Sun 15 Jun 2025 01:30:03 +0000
asID: 9605
IP address blocks: 1.73.248.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2363 (0x93b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 17 08:39:52 2024 GMT
Not After : Jun 15 01:30:03 2025 GMT
Subject: CN=9AF27CEC6E402E883AD438F8FA71997A356E9F9E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:44:53:a1:fc:17:d4:1a:21:60:42:c9:43:3f:
b6:93:fd:1c:4f:d1:5d:c6:7a:e3:3c:53:bf:68:17:
87:f8:c3:81:eb:4b:3e:46:4e:34:03:2f:d1:80:56:
18:cb:e7:ab:14:b5:f4:58:6a:ff:e4:52:b4:1f:56:
9f:7e:38:8c:d5:59:26:78:56:11:a2:d2:f2:6f:ab:
65:1d:19:b2:ba:86:77:c5:57:39:8c:3f:6d:0e:84:
73:7b:14:66:f4:40:1d:15:44:9f:b9:5f:8b:c5:d7:
b7:74:d9:6f:b1:71:de:38:1f:e5:03:1a:6d:de:09:
d4:5e:11:cf:ee:ee:37:df:2b:77:5c:62:b7:34:3c:
08:65:13:a1:31:bf:ef:f1:69:aa:cf:8b:a7:ff:4c:
ff:f6:7c:3e:ba:01:b3:c5:74:e9:2b:56:be:3e:9b:
67:a4:b2:77:d5:4e:6d:a6:8d:12:5a:95:75:be:2e:
8f:2b:2d:1f:c9:fa:7d:8e:f3:02:57:1a:dc:23:f7:
de:e6:81:16:53:7a:ad:a2:1a:5d:0c:7f:cd:71:47:
4c:59:4b:b3:de:cf:eb:d5:59:14:66:55:d8:42:d6:
e0:2b:64:c6:42:bf:dd:37:4f:a1:53:cf:3d:61:c9:
05:e8:be:3d:0d:4b:ab:fd:06:41:b7:de:3c:c5:b2:
da:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F2:7C:EC:6E:40:2E:88:3A:D4:38:F8:FA:71:99:7A:35:6E:9F:9E
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/mvJ87G5ALog61Dj4-nGZejVun54.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.73.248.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:73:29:69:9a:cd:c7:8c:62:88:30:91:b2:01:1f:42:cf:93:
4d:99:e5:9b:d0:39:7d:95:c4:72:8d:9c:94:5f:8f:38:65:a2:
95:42:36:05:89:4a:7d:e0:58:45:8f:02:d8:fb:8d:1f:9a:1b:
94:da:47:cc:e3:90:10:59:e5:26:44:c1:43:71:b1:b9:9e:f9:
58:33:85:38:57:b1:f9:a0:4e:28:f8:74:64:c7:49:64:bd:32:
18:c2:d8:7e:50:f1:99:72:2c:d5:e4:e2:54:66:d9:0e:3d:cd:
95:97:56:cc:e5:b5:a7:3f:a4:22:11:ab:0c:24:19:96:93:c5:
70:f1:1a:59:fd:e4:97:02:dc:84:a7:a8:93:6c:9a:7e:31:ec:
9c:f3:c7:df:61:0b:db:1a:8e:71:82:09:24:18:bd:1d:3c:76:
e3:6c:1c:10:ee:69:f7:93:99:91:d5:e5:bb:3d:36:63:92:ba:
f7:76:23:47:bc:70:7d:eb:bd:0a:b3:8e:e0:71:0e:b1:74:31:
36:53:a0:aa:bf:38:87:6e:d5:6b:cf:7a:7b:a8:f1:4b:68:3a:
3e:ab:9a:68:12:66:93:b3:15:ed:9b:93:53:06:1e:59:03:a2:
6e:43:c5:fc:f3:d8:78:8e:51:f5:3d:10:55:89:60:1f:38:8d:
a7:32:4e:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:31:06 2025 by rpki-client