Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/FKtvVlASZd0A3gkoDDFhTFGcsY8.roa
File: FKtvVlASZd0A3gkoDDFhTFGcsY8.roa (raw, json)
Hash identifier: Rrh1Jp84uBeFLSMGZglmdW+q4BaKJImEFkNS3BN51UQ=
Subject key identifier: 14:AB:6F:56:50:12:65:DD:00:DE:09:28:0C:31:61:4C:51:9C:B1:8F
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 0109
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/FKtvVlASZd0A3gkoDDFhTFGcsY8.roa
Signing time: Thu 29 Aug 2024 00:35:51 +0000
ROA not before: Thu 29 Aug 2024 00:35:51 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 9607
IP address blocks: 218.231.240.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 265 (0x109)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Aug 29 00:35:51 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=14AB6F56501265DD00DE09280C31614C519CB18F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:1b:50:14:d8:1d:d8:31:a9:5d:1b:7c:c6:5f:
51:4e:04:c3:cf:6b:b1:af:4f:36:f8:bc:17:8e:92:
ae:88:f9:9d:fc:57:8f:87:27:7e:2a:aa:83:2d:78:
ec:0e:94:03:53:4f:57:21:7b:15:a2:85:9b:6a:80:
c4:c4:d4:2c:84:81:e9:2d:3d:10:a2:b5:a4:28:f3:
10:da:ba:e8:dd:71:f4:7c:8d:e5:c1:8d:57:78:da:
46:8d:0b:a0:80:75:51:6b:a8:85:e9:1f:63:3a:a3:
5a:1e:c3:94:58:6a:63:cd:67:78:09:a7:3c:e1:b0:
6c:2a:d1:80:95:9c:67:42:1a:5a:b1:ac:5a:42:21:
1e:84:34:2b:81:c5:1b:05:4f:42:95:7b:74:f7:e0:
7e:24:eb:20:77:83:db:42:ba:32:23:9c:8a:95:cd:
de:21:ea:82:3f:0c:02:6b:b4:bb:91:74:d5:be:17:
0c:c1:85:db:8e:e0:92:57:86:a5:05:89:72:57:b2:
41:96:ad:4b:db:db:1d:c0:4d:df:60:8d:98:3c:80:
08:5a:9d:16:3d:b9:f7:70:29:15:d3:b8:7c:ae:25:
da:28:f1:2a:b0:a7:05:2c:3e:7d:a4:1b:f5:72:a7:
96:8c:7a:28:ff:d9:e4:0f:14:cb:25:67:f7:a5:8d:
9b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:AB:6F:56:50:12:65:DD:00:DE:09:28:0C:31:61:4C:51:9C:B1:8F
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/FKtvVlASZd0A3gkoDDFhTFGcsY8.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.231.240.0/22
Signature Algorithm: sha256WithRSAEncryption
a7:c8:8e:42:aa:f6:58:09:0e:9c:f3:c5:14:0c:b9:b4:ba:06:
f7:2b:67:c1:fb:5f:0a:8d:ed:6c:07:6f:17:55:33:ca:85:54:
57:e0:b9:de:9c:bf:30:b1:68:59:b4:63:f2:b8:e9:d4:f3:c3:
79:36:54:02:2f:8e:36:cd:59:f7:78:2d:79:2f:47:96:e2:7b:
c2:90:00:f6:d2:52:0e:3e:5c:89:11:d2:f3:7e:f0:4b:43:71:
92:18:16:0f:67:7c:4a:fa:91:cc:95:21:15:a1:68:2e:e3:3f:
f6:4d:bd:96:db:77:cb:1d:50:2c:3f:8f:c3:ed:0d:f3:50:a9:
ed:da:60:04:69:58:58:1e:50:7e:1e:84:fc:b2:ad:f0:f5:8e:
ce:fe:80:6a:69:21:7f:97:1e:a9:7e:53:0b:b0:8a:66:70:50:
e8:1d:93:b3:b6:07:6a:a8:93:70:37:e8:57:f4:b3:b8:54:10:
0c:d4:ba:25:b4:d1:41:7b:b2:41:8d:45:0f:a9:a1:be:03:fb:
8a:63:df:e9:68:9c:d4:de:89:9d:3e:71:54:fc:fb:83:d6:62:
a6:f2:d6:44:bc:6b:fc:bd:5e:16:65:3a:a7:62:42:38:aa:79:
78:d5:d8:29:b4:9d:f4:f1:63:65:91:3f:9f:8c:5e:0e:50:37:
89:ed:57:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:45:44 2025 by rpki-client