Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/1yyiCs1CUem2dM5OOQpalKQM880.roa
File: 1yyiCs1CUem2dM5OOQpalKQM880.roa (raw, json)
Hash identifier: ziw/EHMAcE39kjIcPAFi7B0f+ywHDTXf2XRIYWqIpqI=
Subject key identifier: D7:2C:A2:0A:CD:42:51:E9:B6:74:CE:4E:39:0A:5A:94:A4:0C:F3:CD
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0226
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1yyiCs1CUem2dM5OOQpalKQM880.roa
Signing time: Fri 31 May 2024 01:33:06 +0000
ROA not before: Fri 31 May 2024 01:33:06 +0000
ROA not after: Thu 15 May 2025 01:30:03 +0000
asID: 10013
IP address blocks: 36.54.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 550 (0x226)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: May 31 01:33:06 2024 GMT
Not After : May 15 01:30:03 2025 GMT
Subject: CN=D72CA20ACD4251E9B674CE4E390A5A94A40CF3CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:34:29:36:9e:61:15:d5:b7:62:02:a7:ce:8c:
6e:b9:49:96:11:5d:ea:d6:52:44:24:ee:29:0f:27:
c7:4a:ba:bf:d3:f8:23:01:ee:23:28:61:00:f6:d9:
d5:57:9b:e4:df:c2:44:d0:65:fb:e0:d6:f6:2a:76:
83:1e:93:c4:d3:3e:02:8c:6e:79:78:72:96:08:b7:
9e:13:de:d0:a6:7a:e8:6e:9d:97:b6:3b:f8:91:fc:
75:be:b0:63:03:f7:8e:3d:9a:0d:16:32:ec:89:ef:
12:e0:86:19:51:a0:94:18:b7:5d:a1:81:90:33:e7:
f4:fc:19:3a:23:84:ad:b3:81:31:24:fc:58:02:22:
1b:8e:56:02:39:60:64:68:6b:65:0f:b0:b7:5d:32:
a7:e1:86:93:57:fd:a7:81:cd:4f:de:a6:c5:3f:98:
2a:cb:5e:9d:4a:2a:34:14:e6:0b:20:99:8b:f9:2c:
8e:81:f4:64:36:3d:11:00:4a:74:9c:ec:a6:09:61:
78:0c:a9:b1:87:40:28:ae:c4:83:b8:98:9e:2e:c2:
ae:18:c6:60:e3:fd:8f:79:df:58:05:ac:9b:29:a7:
53:cc:4f:5d:09:e8:8e:99:31:04:11:d6:42:c1:ac:
ee:a6:1f:97:39:96:03:e6:33:49:ad:9d:bb:b9:a3:
ef:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:2C:A2:0A:CD:42:51:E9:B6:74:CE:4E:39:0A:5A:94:A4:0C:F3:CD
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/1yyiCs1CUem2dM5OOQpalKQM880.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
36.54.128.0/17
Signature Algorithm: sha256WithRSAEncryption
52:1f:33:c5:cd:67:f6:13:bc:23:ae:21:22:df:f9:e0:b6:4f:
8a:24:e8:fc:02:fb:98:81:da:1c:32:20:54:5e:5e:5a:17:0c:
28:65:e1:9c:b2:3e:5c:5b:ac:0f:c2:c5:e8:39:6f:76:8d:06:
dd:26:a8:48:44:34:d0:56:28:eb:ec:a3:0b:1c:f1:47:fe:1b:
45:d5:88:48:7f:24:b0:d8:f6:10:d9:b7:dc:9a:dc:66:93:2e:
a6:2c:24:13:01:96:44:f0:06:1b:d2:89:ef:c1:6b:b5:c8:31:
32:af:0f:1a:ce:7e:d0:b8:44:28:78:91:85:2c:06:ca:4c:c2:
0b:be:75:6f:5f:7c:ce:b7:a6:0f:24:df:a1:16:98:e7:ca:ec:
19:7a:a0:29:4f:65:63:33:34:06:42:ae:1c:00:1d:16:63:55:
cc:5b:b3:7f:c1:35:00:0c:1d:92:fd:6b:02:64:3d:7c:7c:8e:
fe:ea:b1:61:3a:87:9e:f7:e2:fa:7f:9f:b9:a4:f5:e3:4a:d7:
86:0c:ea:63:57:f7:dd:88:26:d7:5d:60:78:10:2f:c4:99:6f:
75:e7:cf:9d:31:f6:69:3e:36:55:c6:48:36:7a:4a:6a:fa:3b:
83:75:36:7c:17:1f:ab:8b:92:a3:49:3d:1f:80:d2:07:37:a1:
ea:97:6d:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:53 2025 by rpki-client