Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/yWj8lWAurXxNylcbu0Q3Wrw7noE.roa
File: yWj8lWAurXxNylcbu0Q3Wrw7noE.roa (raw, json)
Hash identifier: Atf7BTA80Q2n/oTMHedgylmt6/vWjGRcjsVTACsusU8=
Subject key identifier: C9:68:FC:95:60:2E:AD:7C:4D:CA:57:1B:BB:44:37:5A:BC:3B:9E:81
Certificate issuer: /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial: 2E
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/yWj8lWAurXxNylcbu0Q3Wrw7noE.roa
Signing time: Sun 30 Jun 2024 01:32:29 +0000
ROA not before: Sun 30 Jun 2024 01:32:29 +0000
ROA not after: Tue 24 Jun 2025 10:46:45 +0000
asID: 9615
IP address blocks: 153.125.0.0/17 maxlen: 32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 46 (0x2e)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Validity
Not Before: Jun 30 01:32:29 2024 GMT
Not After : Jun 24 10:46:45 2025 GMT
Subject: CN=C968FC95602EAD7C4DCA571BBB44375ABC3B9E81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:81:6d:89:1e:d1:55:8b:b8:93:c0:43:75:1d:
dd:d6:44:77:35:d0:bd:e1:c2:7e:44:e5:06:ca:2e:
fd:b9:a3:57:00:6a:e1:b8:1a:c5:1a:92:a7:71:b8:
ee:7d:31:64:c4:c4:39:b9:16:99:af:7a:6a:97:2f:
a2:db:3b:96:54:81:8a:07:bd:4e:c5:5d:6c:a8:8b:
fb:45:01:6b:df:b8:4d:d6:24:f1:8f:8a:a8:4b:14:
a4:11:51:2c:68:90:4b:1b:02:21:8c:a8:e1:8b:b3:
9b:a3:5a:43:3b:59:5a:87:cb:84:90:30:fb:b6:5b:
eb:4b:d5:84:70:46:03:99:fc:61:39:f4:b9:c5:7c:
94:81:87:e7:75:73:6d:1c:c2:32:c0:28:bb:31:ce:
f7:6e:78:3c:a9:17:d2:d3:b4:87:a4:1e:40:9c:7d:
27:b2:74:4a:1e:94:e6:37:6f:af:2a:0a:4e:57:76:
6f:aa:b4:04:e5:f2:6e:29:41:26:1d:da:2a:4f:b7:
e5:96:ea:0a:1a:a2:ef:34:0c:91:a0:ea:25:d3:93:
e3:19:75:ec:0e:d5:c8:e5:79:d8:95:c1:49:31:72:
40:a1:03:6f:3b:53:ce:ad:a8:b0:fb:34:d3:7e:4d:
86:61:51:e6:05:f0:1a:6b:d0:12:d4:da:8f:f1:44:
27:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:68:FC:95:60:2E:AD:7C:4D:CA:57:1B:BB:44:37:5A:BC:3B:9E:81
X509v3 Authority Key Identifier:
keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/yWj8lWAurXxNylcbu0Q3Wrw7noE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.125.0.0/17
Signature Algorithm: sha256WithRSAEncryption
06:72:d2:a8:77:42:26:e4:fe:d4:c2:7a:42:3a:e5:b8:07:42:
22:71:5b:7a:27:22:74:d5:09:41:d1:0a:19:fb:5d:7e:57:5a:
65:1c:50:2b:21:d1:10:57:89:e0:e8:07:a5:bb:21:d0:80:9f:
99:05:5c:43:84:5f:b1:2a:e9:51:a5:be:27:a8:e5:07:fa:1d:
ff:cd:be:06:5c:26:9a:2c:09:20:42:c4:01:e1:b8:b5:5d:63:
c6:73:97:37:3f:ed:47:59:17:02:16:39:63:23:f4:35:30:29:
d1:c2:a5:14:14:5f:ee:6d:20:aa:49:96:05:af:86:e0:2f:6c:
d3:f1:07:20:26:f9:59:f7:c7:10:72:ff:44:86:ab:38:99:81:
a0:41:d1:1d:f1:91:7c:a1:c7:12:b9:35:54:63:84:98:cb:ec:
08:95:6f:b1:27:87:bd:89:0a:01:77:92:a7:ad:50:db:ba:43:
fa:0c:1a:69:84:2e:b2:6e:ef:80:fc:59:1a:3e:2e:1b:fb:a7:
d6:33:3d:9b:e6:e1:b9:10:71:31:31:8f:b0:96:0a:89:ad:03:
a2:c6:03:d3:02:bc:64:de:d7:c9:5b:a7:70:72:5a:39:f8:e3:
3b:e9:03:b2:f6:5b:41:50:ea:73:3b:04:63:53:14:42:d6:96:
f5:a2:d4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:47:51 2025 by rpki-client