Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/ceN5Nk1GChL4hKwuZnsBX2L-dPs.roa
File: ceN5Nk1GChL4hKwuZnsBX2L-dPs.roa (raw, json)
Hash identifier: Ek2v2t87j4Ztu00VW4lWyfrBDzFfav8I9eGXwPolyCU=
Subject key identifier: 71:E3:79:36:4D:46:0A:12:F8:84:AC:2E:66:7B:01:5F:62:FE:74:FB
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: BD
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ceN5Nk1GChL4hKwuZnsBX2L-dPs.roa
Signing time: Tue 26 Jul 2022 05:11:10 +0000
ROA not before: Tue 26 Jul 2022 05:11:10 +0000
ROA not after: Fri 21 Jul 2023 04:07:13 +0000
asID: 10013
IP address blocks: 153.120.220.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 189 (0xbd)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 26 05:11:10 2022 GMT
Not After : Jul 21 04:07:13 2023 GMT
Subject: CN=71E379364D460A12F884AC2E667B015F62FE74FB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:0a:08:e3:15:ea:8b:91:91:83:cd:98:b8:e5:
c4:63:fb:dd:75:bb:df:f9:2d:70:5e:5d:6c:e9:cd:
df:d2:af:32:17:f1:b1:5d:ef:27:b2:31:64:bd:2b:
04:99:46:89:58:43:60:8c:0f:8b:be:88:ff:bb:61:
a5:4b:99:f7:79:85:82:86:51:d6:c8:58:15:9d:53:
61:d9:f1:20:ba:31:69:42:df:2c:bd:f0:af:31:c8:
37:cf:44:20:40:02:50:bd:f7:b8:23:96:5d:04:77:
9a:8e:cf:d7:63:2b:39:50:00:3b:24:07:46:a0:7a:
09:c8:77:d8:93:08:d4:3f:20:d5:5f:41:c8:94:91:
c1:ed:61:14:01:0d:a8:81:59:33:2f:6a:4b:c5:7f:
ff:f4:1a:2e:9e:09:75:32:53:eb:22:29:c7:ad:62:
2d:18:1f:e7:0d:03:52:8e:22:69:e5:e0:32:32:e7:
11:20:25:da:5a:67:6e:e3:8d:e8:0b:5b:fd:49:04:
e6:bb:54:1b:42:38:8a:1e:a5:7f:ab:58:17:63:fc:
b6:c0:e1:00:77:a1:25:48:b1:a9:85:83:22:01:20:
68:64:60:ea:d1:c7:7e:68:9e:eb:99:bb:43:95:da:
2e:30:f1:2a:ba:31:d8:b3:08:f9:09:11:8b:d9:4b:
95:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:E3:79:36:4D:46:0A:12:F8:84:AC:2E:66:7B:01:5F:62:FE:74:FB
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/ceN5Nk1GChL4hKwuZnsBX2L-dPs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
153.120.220.0/23
Signature Algorithm: sha256WithRSAEncryption
1c:92:0a:3c:62:54:ff:42:32:8d:b2:a6:03:a6:0c:4f:b8:a4:
92:77:bb:5f:63:be:bf:48:56:92:8a:55:b6:08:09:d8:ba:42:
b0:99:39:4d:f4:ac:e1:81:e4:a5:16:35:5b:db:3c:1d:51:91:
10:07:de:08:bb:38:6b:10:2c:ca:c3:67:f6:15:54:95:52:7e:
85:13:dc:fb:63:51:06:55:69:a2:b2:d4:7a:89:20:c2:48:de:
1f:d4:02:f7:58:12:dc:27:b5:29:20:14:45:46:96:77:69:06:
37:5c:73:95:72:57:46:36:ca:db:3c:5e:87:85:f5:9e:a5:ec:
79:00:86:db:83:8f:25:7c:09:c8:08:4a:fe:e8:49:aa:cb:c1:
68:51:3c:94:1a:c6:e3:cb:79:e4:cc:77:7c:0d:ae:82:0f:90:
13:de:80:d0:43:eb:19:21:ef:44:ad:b8:cb:82:93:42:0f:a2:
d0:12:5c:84:f7:98:a7:1d:3a:a3:f7:36:a0:71:c1:db:aa:91:
29:56:6e:e3:df:33:af:88:58:1c:01:47:6b:9c:36:47:b9:cd:
4b:97:93:0b:2a:2d:97:d8:52:f7:22:f7:35:ea:43:f0:cf:1c:
90:d5:ec:b9:e6:15:7f:53:0b:74:56:02:3a:35:96:dc:b8:33:
e2:c4:fe:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:05 2025 by rpki-client