Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/xeKhtRpPHxBesS-YW7zcLY3iYUA.roa
File: xeKhtRpPHxBesS-YW7zcLY3iYUA.roa (raw, json)
Hash identifier: vTcn5JT5n6K2j5AqGNzjh1/eCKqedvT2dH35o5c/o34=
Subject key identifier: C5:E2:A1:B5:1A:4F:1F:10:5E:B1:2F:98:5B:BC:DC:2D:8D:E2:61:40
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 079C
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xeKhtRpPHxBesS-YW7zcLY3iYUA.roa
Signing time: Tue 30 Apr 2024 02:06:27 +0000
ROA not before: Tue 30 Apr 2024 02:06:27 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.96.10.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1948 (0x79c)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:06:27 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=C5E2A1B51A4F1F105EB12F985BBCDC2D8DE26140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:73:70:44:f7:8a:26:56:96:d3:d0:18:45:ed:
d2:3d:80:4a:eb:41:60:c9:07:3b:53:6e:bd:de:8c:
7e:8b:10:fc:f3:d3:57:a0:d5:be:b7:d5:0f:20:49:
1a:a5:82:ce:e2:9a:ee:8a:d3:01:19:bf:ff:30:1e:
b3:17:df:3e:90:3f:52:d0:34:4f:de:c6:04:78:ef:
94:27:af:0d:16:9e:4a:2d:9a:9e:d3:1c:bf:fd:b4:
62:15:14:b1:78:49:37:c5:5f:e6:bc:8a:a7:a5:5e:
21:7c:a5:3f:6d:ab:a0:58:ee:45:80:77:35:d5:bc:
95:a3:b9:3e:d6:73:53:a3:d6:14:2c:57:8f:fa:2d:
92:37:37:cf:d5:9c:59:83:b9:d7:f0:44:8c:71:af:
b7:a4:26:6c:e8:c2:3e:59:da:c9:87:46:e3:12:4b:
0a:8b:a7:7d:86:c7:b8:73:b6:7d:54:3b:a4:cb:7a:
01:dc:46:a3:e1:ec:9f:88:f4:ea:bc:3a:6c:c3:5e:
dc:e0:b7:6a:8c:72:48:f4:52:11:d5:6a:fa:72:66:
ff:34:48:ea:9c:00:c8:95:1c:aa:d9:9c:c4:cf:b9:
f3:a9:6e:54:8a:fc:a9:30:fd:07:22:fb:95:7d:b4:
1b:3c:f1:7d:cb:eb:59:95:71:86:ae:6f:30:61:71:
de:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:E2:A1:B5:1A:4F:1F:10:5E:B1:2F:98:5B:BC:DC:2D:8D:E2:61:40
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/xeKhtRpPHxBesS-YW7zcLY3iYUA.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.96.10.0/23
Signature Algorithm: sha256WithRSAEncryption
60:1d:dd:4a:75:27:0d:0f:ec:a2:48:85:95:4c:c2:95:ae:2b:
cc:b6:66:93:cd:6d:c8:4b:79:75:37:52:40:9b:b5:2d:a7:e2:
8d:01:77:e9:d1:dc:88:14:90:c8:0f:39:f5:66:7c:9c:e0:7f:
ac:be:5f:a3:56:07:d9:0c:8e:dd:89:45:6f:1a:a0:32:85:ec:
97:26:da:6b:9c:14:be:6d:6a:6e:55:38:3b:dd:ea:b0:23:4c:
9a:b8:95:fd:03:55:36:cb:6d:62:50:c2:c4:22:74:7d:3f:04:
b5:64:fd:73:99:b7:85:60:ba:18:de:5f:66:7d:7c:45:2b:5f:
89:84:04:1b:8a:cb:66:9d:b0:6d:b0:de:3b:56:16:6e:81:43:
f7:8b:be:33:e3:33:8b:11:12:6d:22:07:a4:ee:d9:92:0b:dc:
aa:df:5e:fb:6e:9c:92:3a:a4:01:b3:06:ff:a3:4e:ef:b1:43:
c9:88:e7:e2:71:0e:75:ef:d3:12:00:22:c1:5e:94:93:f2:88:
ce:76:05:14:fc:5b:ca:5e:88:02:d9:e3:de:7b:db:85:b9:43:
b8:e5:14:9c:bd:1a:42:a2:18:8c:58:50:05:34:8e:79:c6:2e:
7b:70:ba:31:c6:e0:f5:bb:62:f6:23:6b:8a:d6:1d:0e:0b:58:
7a:67:b2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:46:02 2025 by rpki-client