Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/y7ga1FdBvN8zGdBtTC71kYgRKnY.roa
File: y7ga1FdBvN8zGdBtTC71kYgRKnY.roa (raw, json)
Hash identifier: lJtJsJad7pbPeGV9zl9I/isHcW86ftlDLVuLF/1wNqg=
Subject key identifier: CB:B8:1A:D4:57:41:BC:DF:33:19:D0:6D:4C:2E:F5:91:88:11:2A:76
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0860
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y7ga1FdBvN8zGdBtTC71kYgRKnY.roa
Signing time: Tue 30 Apr 2024 02:16:34 +0000
ROA not before: Tue 30 Apr 2024 02:16:34 +0000
ROA not after: Tue 15 Apr 2025 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.130.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 2144 (0x860)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Apr 30 02:16:34 2024 GMT
Not After : Apr 15 01:30:02 2025 GMT
Subject: CN=CBB81AD45741BCDF3319D06D4C2EF59188112A76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2b:b7:8c:43:1f:4a:cb:0a:f0:d5:bd:a6:af:
dc:21:7a:b4:80:ca:12:f2:bb:44:89:e3:f9:bf:5d:
01:2b:c2:e8:71:3a:79:60:85:3d:8f:e5:50:eb:2f:
2e:c8:b7:fb:68:fe:d9:ed:3c:45:79:18:74:a8:1c:
c3:70:44:c7:f3:e5:ec:de:77:13:9b:7d:f9:ac:54:
8b:d5:de:f1:6f:da:7e:cc:ad:31:ed:4f:ca:27:3e:
b3:c2:bd:33:7a:c4:89:98:7c:07:6d:a2:a4:27:f9:
ec:ed:e6:8e:54:18:00:a2:56:77:3e:b0:ce:c7:3a:
f9:5b:5e:d8:97:79:6a:9c:c4:74:7c:b8:dd:68:6d:
83:b1:df:f8:db:88:9f:29:5f:6b:26:66:b0:8c:80:
93:53:08:2f:e0:8c:31:17:fd:bf:71:2d:75:af:ed:
1f:a9:5c:6b:50:13:c3:ee:16:f5:95:f5:7c:26:64:
20:55:7a:60:ef:10:c0:cc:1e:06:5b:11:e1:c8:cb:
2e:d8:73:87:2c:d4:f0:eb:ee:0e:3c:bc:73:79:65:
81:14:da:8d:94:ba:d0:f4:4b:a0:84:88:5c:18:65:
e0:37:9c:9e:bf:0b:bb:aa:91:c6:25:c3:a3:58:18:
94:ba:24:0f:16:ef:fe:ad:c0:7d:b7:e4:39:2f:cd:
3e:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B8:1A:D4:57:41:BC:DF:33:19:D0:6D:4C:2E:F5:91:88:11:2A:76
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/y7ga1FdBvN8zGdBtTC71kYgRKnY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.102.130.0/23
Signature Algorithm: sha256WithRSAEncryption
49:23:06:e4:08:3f:a9:a5:ea:43:7d:c6:e9:00:45:b8:d7:9d:
5c:dd:64:7d:6c:14:11:6b:68:5c:cc:87:e7:4a:b0:86:08:72:
6a:d7:d5:8d:c5:bf:c4:c9:66:d8:a5:4e:ff:9d:6c:39:60:a5:
71:c2:1e:67:4d:d5:08:f2:e7:78:f7:ea:31:dc:1f:1a:9f:8e:
30:31:35:7a:d2:2a:95:48:52:3a:05:ad:e1:90:16:a3:1d:71:
8c:6e:4f:1c:ff:aa:ef:56:3e:a9:d8:25:2e:13:12:8d:42:5c:
25:81:60:ef:04:49:fa:38:06:ea:6e:e1:26:c5:f8:cb:1a:74:
2b:27:d1:c4:f4:b4:44:2b:e5:62:61:12:85:5d:2b:ed:11:87:
92:1b:30:9a:da:13:fc:1b:2a:f4:ce:45:d5:31:8e:7c:dc:71:
08:61:d7:79:3e:1a:53:90:25:a7:5a:c9:99:98:49:9d:9e:3a:
06:20:48:73:f8:4c:94:5a:ab:ad:1b:00:89:ab:c8:7e:75:d0:
54:a7:d7:94:81:46:ea:4f:1f:7b:8d:26:a1:2b:52:c8:4b:ac:
ca:42:37:bf:60:96:8b:46:11:f0:89:9e:94:fa:07:d6:d2:85:
22:eb:35:7e:cb:f3:81:55:c2:a6:6e:16:7e:51:ac:4d:8d:4f:
b2:83:ca:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:19 2025 by rpki-client