Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/rJxKmO44CmHQeAcy8RQII0MooxM.roa
File: rJxKmO44CmHQeAcy8RQII0MooxM.roa (raw, json)
Hash identifier: clgIyXMDVc1KTGWsNJu7DH8yoKWGCeOmc1bVZm1PP9Y=
Subject key identifier: AC:9C:4A:98:EE:38:0A:61:D0:78:07:32:F1:14:08:23:43:28:A3:13
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 09E5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rJxKmO44CmHQeAcy8RQII0MooxM.roa
Signing time: Sun 30 Jun 2024 01:42:20 +0000
ROA not before: Sun 30 Jun 2024 01:42:20 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9605
IP address blocks: 220.159.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2533 (0x9e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 30 01:42:20 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=AC9C4A98EE380A61D0780732F11408234328A313
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:de:d0:66:a3:b5:c1:ef:0e:0a:09:71:e1:72:
e8:70:67:61:ff:60:c9:53:74:0c:fc:9c:1b:c6:92:
b1:48:cb:b5:6f:18:94:ba:52:ee:c3:d7:e7:1b:70:
52:ef:ba:a3:28:b3:59:4a:93:9e:06:4f:a6:f5:fe:
a4:27:a6:25:38:a6:ec:76:2b:6c:f9:64:e4:48:d4:
c0:4f:4a:06:cc:c5:59:72:6f:5d:dc:56:fc:64:21:
25:d0:2b:04:70:01:84:52:93:0d:54:3f:4e:dc:40:
f7:81:28:70:36:96:47:71:ea:3d:f6:7f:c6:c5:f3:
41:d4:4e:b7:1b:82:b8:c0:63:a0:dc:2b:e4:ac:9b:
27:4d:e3:53:f2:da:2e:c9:31:5c:ef:a0:d2:3b:6b:
3e:19:61:aa:8d:a8:35:15:2d:37:44:e0:46:35:fb:
90:d6:d5:26:54:87:e4:f1:7c:b6:c9:06:3b:af:d7:
b4:59:76:f9:9c:5a:7b:21:32:8e:83:e4:94:38:6b:
24:60:53:53:35:cd:24:e4:09:dc:31:64:4f:d2:03:
ba:58:b5:a2:73:c9:22:c0:5e:e8:17:f6:e5:41:6e:
28:9f:b4:7d:59:a6:be:81:d0:9a:a6:a2:1e:d8:d2:
be:9a:a6:18:12:de:de:85:82:87:bb:7c:2f:ed:8b:
cb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:4A:98:EE:38:0A:61:D0:78:07:32:F1:14:08:23:43:28:A3:13
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/rJxKmO44CmHQeAcy8RQII0MooxM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.159.216.0/22
Signature Algorithm: sha256WithRSAEncryption
be:7a:08:c3:ac:73:2f:24:22:14:a2:98:ab:61:61:9b:3c:78:
72:96:85:8f:b0:e7:ea:9b:7b:ba:73:0a:ec:6e:03:a2:71:da:
76:ee:fd:a2:cf:ef:e3:94:e6:0e:86:08:6b:ca:17:84:0f:15:
37:a2:a0:f2:56:d6:e9:b3:df:6f:61:d7:34:36:a6:a2:ba:0f:
52:c0:06:a2:d5:7c:1d:eb:40:23:15:5c:91:df:d3:2c:23:e9:
69:27:63:ce:63:fc:5f:1f:46:13:78:50:58:bf:4b:d2:c9:1b:
ec:a8:2c:aa:9a:24:f3:87:45:3f:0c:83:14:d1:87:49:6a:02:
68:fa:18:d8:a2:82:be:e5:c1:8d:81:a0:20:f7:26:a8:e3:38:
c0:90:4e:84:37:d9:47:42:77:54:21:31:0b:46:94:36:18:12:
1e:d8:70:e1:de:96:61:b7:80:36:b8:2f:02:91:94:6f:de:87:
f5:9d:37:b3:6d:17:c4:e5:2c:f1:fe:54:e2:03:ef:d8:38:f4:
21:9c:b5:02:1e:69:be:9d:3b:56:af:4a:aa:d3:db:74:cb:ef:
ad:c4:c0:18:fd:1e:fd:9d:70:e5:13:90:d0:f3:5b:a7:15:eb:
75:50:de:3f:64:d5:eb:04:73:93:98:5e:65:7d:08:4f:ef:33:
de:90:da:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:33 2025 by rpki-client