Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/VEHEhtiKd84Oi8AcqWr4FE4uf5c.roa
File: VEHEhtiKd84Oi8AcqWr4FE4uf5c.roa (raw, json)
Hash identifier: f1Wbjb7ISkaKp+9o4IBM2l7r5qxmxH09q4H0SiM5Hbg=
Subject key identifier: 54:41:C4:86:D8:8A:77:CE:0E:8B:C0:1C:A9:6A:F8:14:4E:2E:7F:97
Certificate issuer: /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial: 78
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/VEHEhtiKd84Oi8AcqWr4FE4uf5c.roa
Signing time: Thu 20 Jan 2022 07:13:06 +0000
ROA not before: Thu 20 Jan 2022 07:13:06 +0000
ROA not after: Sun 15 Jan 2023 01:30:03 +0000
asID: 59099
IP address blocks: 210.231.216.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 120 (0x78)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Validity
Not Before: Jan 20 07:13:06 2022 GMT
Not After : Jan 15 01:30:03 2023 GMT
Subject: CN=5441C486D88A77CE0E8BC01CA96AF8144E2E7F97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:c4:b3:0e:b8:bd:82:9e:3c:5c:b6:61:66:d3:
5e:fe:76:cc:6f:1a:a9:bf:10:cc:e6:ff:6a:77:0b:
5a:0d:34:3f:ec:15:fd:db:0b:31:a6:4e:b7:a0:3d:
05:dc:62:00:2b:82:82:88:83:6d:6a:28:95:7d:b1:
11:ec:e7:e5:04:43:48:ab:98:93:86:6b:fe:98:f2:
c9:3e:6c:66:b0:53:6c:57:6a:e8:ee:08:7a:36:05:
a0:de:a5:ef:a2:07:75:94:b2:50:32:6d:1f:30:1c:
f9:45:10:2d:56:4a:a0:42:3b:69:6d:ed:d6:fd:de:
60:df:f1:e5:bf:4d:8a:9a:d9:4e:49:69:56:f4:83:
d6:ec:f3:96:09:b9:56:86:b9:c0:0f:01:72:94:4b:
d6:32:1c:f1:1f:e3:60:77:5c:20:ab:be:a2:57:90:
65:05:24:68:61:e6:34:8a:aa:8a:dc:41:ba:67:15:
21:9a:6b:a0:91:19:86:5a:bb:1e:9b:f1:68:64:e5:
ba:f8:d3:04:ba:f8:1a:81:6e:3c:3e:85:a0:a0:c9:
50:0b:01:87:8e:1d:c1:50:0f:1e:46:e6:e3:7e:68:
ff:4b:e7:2b:90:76:4e:d5:cd:d9:9d:f5:9a:8b:5a:
38:fd:9c:6a:af:a8:e1:5e:fc:c3:1a:68:42:d0:03:
e1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:41:C4:86:D8:8A:77:CE:0E:8B:C0:1C:A9:6A:F8:14:4E:2E:7F:97
X509v3 Authority Key Identifier:
keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/VEHEhtiKd84Oi8AcqWr4FE4uf5c.roa
sbgp-ipAddrBlock: critical
IPv4:
210.231.216.0/22
Signature Algorithm: sha256WithRSAEncryption
8d:d5:28:93:8c:a9:40:6a:d3:6c:80:5e:a3:6e:10:35:db:4c:
a9:9b:e8:dc:a1:2a:05:f3:b0:1a:74:e7:cb:86:cd:86:1d:f9:
40:a6:1d:f1:2a:be:51:d6:4e:9c:2e:c4:eb:ac:48:a9:6c:fc:
8c:94:b1:b6:97:c4:d0:56:4f:bd:9a:de:b6:a1:d7:4e:9b:49:
53:48:93:ee:5f:71:a5:4d:cd:e6:bf:12:c3:c4:e6:35:fa:6e:
d9:17:01:0b:4b:91:a9:3f:7d:6c:04:a9:2a:d9:63:2e:46:44:
e1:19:10:16:51:11:84:bf:41:da:b3:94:3e:d7:e4:ee:f2:e3:
cf:cc:b7:1d:8a:f6:7c:17:57:6f:8c:ee:d9:f0:d2:d8:3d:05:
4b:61:55:8a:73:52:e9:66:fc:b0:91:06:df:ab:93:03:7e:ca:
3b:1c:ae:d9:cd:9b:b2:ee:d0:da:b0:9e:2b:03:27:5c:e0:3e:
93:26:75:a5:81:c2:9b:29:72:c2:73:aa:71:70:de:92:a2:1e:
9e:81:5e:84:3c:17:af:5e:f4:44:eb:94:ca:95:ae:a6:ef:77:
29:4c:de:87:80:05:19:12:52:6b:24:8f:4d:ed:85:fe:86:2e:
42:8f:89:a2:70:d1:f3:99:28:0c:64:94:22:59:05:b2:7f:17:
b4:56:dc:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:39:57 2025 by rpki-client