Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/syGc8cYFNyscRUxxXmmJzfwaP6Y.roa
File: syGc8cYFNyscRUxxXmmJzfwaP6Y.roa (raw, json)
Hash identifier: GxE6ofPkd57ZE47/VCtczFHE85RxaHpGPnD+743s8DI=
Subject key identifier: B3:21:9C:F1:C6:05:37:2B:1C:45:4C:71:5E:69:89:CD:FC:1A:3F:A6
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 6E
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/syGc8cYFNyscRUxxXmmJzfwaP6Y.roa
Signing time: Mon 27 Mar 2023 16:06:43 +0000
ROA not before: Mon 27 Mar 2023 16:06:43 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 9605
IP address blocks: 1.72.0.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 110 (0x6e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Mar 27 16:06:43 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=B3219CF1C605372B1C454C715E6989CDFC1A3FA6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:da:f1:dd:a8:a4:bd:16:48:e9:2d:46:02:67:
ea:1b:c6:d0:59:77:74:d6:82:e0:de:8d:3d:af:b8:
68:8e:9a:93:5a:5c:55:ed:97:96:d8:b8:01:5e:1e:
37:a2:4b:df:85:e6:f4:02:7d:a8:94:f6:98:db:64:
9e:b2:fb:ff:b6:5c:30:35:5e:28:86:da:cd:1f:4b:
0e:e4:c1:8a:d6:95:be:f8:e1:3c:c3:ef:ab:06:4b:
6a:a3:e6:de:e2:01:0d:0c:e3:bc:7f:44:f3:bd:d7:
e1:83:a6:39:ad:f9:eb:d3:3f:d2:6b:a0:97:ba:d9:
13:76:f3:8a:6d:87:81:ae:5f:9a:f4:5b:a6:72:77:
5c:9f:da:9c:b3:51:67:77:02:fe:27:a5:38:72:27:
73:41:c7:72:1e:cf:25:34:24:ad:5a:0a:4e:9c:11:
4c:bb:cb:fa:6f:c1:cc:42:88:94:83:cb:6b:6a:fe:
d5:a0:a2:ce:c3:35:6a:94:c3:1d:0a:af:1d:72:b0:
53:ad:bf:a1:69:16:0b:9c:5d:98:e1:c9:46:ba:2d:
c7:0f:01:fb:82:41:47:37:8e:b0:03:c7:09:d2:2a:
05:f1:25:75:b3:9e:cb:6b:2e:c1:3c:73:bf:a6:e5:
69:5c:be:6e:22:14:2d:6f:9b:8b:f9:41:75:87:dc:
53:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:21:9C:F1:C6:05:37:2B:1C:45:4C:71:5E:69:89:CD:FC:1A:3F:A6
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/syGc8cYFNyscRUxxXmmJzfwaP6Y.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.72.0.0/23
Signature Algorithm: sha256WithRSAEncryption
45:08:93:b0:24:1a:a6:39:ed:96:e9:4e:5e:38:bf:4b:ad:18:
33:80:14:85:81:8e:1c:bc:74:6d:ab:fd:4a:00:2b:65:50:cf:
b8:9f:0a:69:d2:b3:e6:18:87:4f:52:29:1a:52:bb:04:91:09:
25:90:c9:bd:c2:87:3a:d3:f6:9a:9a:bd:e2:9d:19:51:b1:89:
4e:a0:c5:ad:b5:29:99:b5:da:04:df:eb:3c:3a:6c:e3:f4:7d:
12:76:ff:91:9b:00:00:01:78:2e:f5:d5:19:03:84:0f:89:13:
24:98:50:a4:5e:ac:35:57:ca:d0:1e:93:92:f7:ef:9f:71:50:
17:7d:c0:e9:03:4b:08:48:c9:1a:45:97:91:5b:c5:15:50:1f:
64:d2:13:cd:d2:18:d4:f3:a4:28:63:cd:58:b3:9c:e0:95:6b:
f9:65:fd:38:86:20:82:5a:8d:6b:03:58:51:ac:5c:99:a0:b8:
21:94:08:6e:29:f8:e9:a4:fc:c5:26:89:2a:42:be:ac:12:c7:
af:3b:73:dd:4c:d7:d7:00:e5:fc:96:67:ca:97:2c:50:5b:3d:
c2:ad:cf:78:c2:8e:fc:d0:1f:d9:2e:ec:89:26:55:33:2d:c4:
6d:93:fa:95:e8:01:23:52:95:ef:24:38:cd:1b:3a:06:30:8e:
f3:40:2d:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:56 2025 by rpki-client