Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/zjaPvja9_VZrfpG8_XopvhT_XlM.roa
File: zjaPvja9_VZrfpG8_XopvhT_XlM.roa (raw, json)
Hash identifier: CL2PyrvBYTc5bws2v6/S3K/O8OiVtbTvevo/dXILaw8=
Subject key identifier: CE:36:8F:BE:36:BD:FD:56:6B:7E:91:BC:FD:7A:29:BE:14:FF:5E:53
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 0301
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zjaPvja9_VZrfpG8_XopvhT_XlM.roa
Signing time: Thu 17 Oct 2024 01:41:01 +0000
ROA not before: Thu 17 Oct 2024 01:41:01 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 10013
IP address blocks: 111.234.240.0/22 maxlen: 22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 769 (0x301)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Oct 17 01:41:01 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=CE368FBE36BDFD566B7E91BCFD7A29BE14FF5E53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ff:52:0f:3e:a9:ac:e6:db:e6:be:7f:94:be:
7b:75:69:ce:28:b6:5c:6b:30:e9:e5:fb:2d:41:e5:
9d:fc:3f:e9:55:9d:1e:d4:42:f7:c1:4e:00:d3:dd:
ae:7b:bd:00:5c:0a:86:ba:e4:cf:76:46:55:c4:76:
02:4e:a4:1f:20:a4:b5:62:b4:10:9e:39:5d:73:50:
64:25:1c:c4:f4:46:93:af:be:76:7c:21:fb:f8:09:
cf:e8:44:a2:8a:04:ba:e8:8e:94:62:9f:9b:36:27:
61:d2:a4:3c:81:00:87:45:f3:21:ce:db:ad:c2:c3:
62:06:08:8a:28:27:fe:2c:95:19:d8:d9:13:d9:f2:
71:ab:12:bf:68:63:75:bf:25:85:9a:26:bf:8b:93:
32:83:5b:2a:f4:3e:04:28:97:9b:a6:2f:c8:6f:cf:
44:af:32:cc:08:5c:47:b9:c1:ed:9e:85:6a:a2:dc:
e5:9e:d6:50:e6:a8:50:16:b5:75:d3:9f:bc:b5:b9:
8b:3a:3c:b9:62:8f:d9:8e:bf:24:5b:1a:6f:31:13:
80:33:a4:0b:b2:11:48:15:a7:ce:e4:ed:14:52:0b:
5d:d7:e3:2d:17:cf:4d:e3:e3:4b:4e:18:b0:43:4e:
cf:e9:d6:81:89:38:2d:04:71:ed:ea:be:ed:63:5b:
eb:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:36:8F:BE:36:BD:FD:56:6B:7E:91:BC:FD:7A:29:BE:14:FF:5E:53
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/zjaPvja9_VZrfpG8_XopvhT_XlM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.234.240.0/22
Signature Algorithm: sha256WithRSAEncryption
52:d8:78:2c:04:1f:70:7c:8f:ef:39:b1:53:de:13:0f:82:b4:
d0:36:4e:e1:bd:65:0b:d7:e0:ae:b4:63:9d:7d:30:ca:93:32:
e5:aa:6f:03:d1:5c:ea:94:b7:86:de:d4:86:33:75:6e:94:39:
fe:19:7a:8f:87:82:8d:ca:e6:b4:10:72:fe:11:0c:a9:88:f2:
4d:33:2b:15:70:89:7b:6b:ec:8c:5b:e6:d3:51:da:9f:ca:12:
bc:19:3d:3a:c5:a5:59:93:c7:88:d7:31:55:25:31:2c:19:fd:
db:41:43:46:8f:06:4d:34:8d:22:25:88:2d:97:a3:cb:df:d8:
0b:0f:17:73:b9:ab:12:dc:9a:5c:f4:a5:14:2e:3b:b7:68:65:
34:d2:d1:91:1d:3a:0a:3c:04:c9:7c:d4:ea:13:57:06:7a:79:
d5:fa:a8:a2:a4:12:49:6d:7c:de:ac:6b:2e:79:f7:55:da:b5:
c9:93:0e:1d:ea:47:ba:3f:1d:9a:78:a4:16:2a:2d:ec:98:18:
99:2b:41:ed:32:7a:14:ed:69:40:b0:3e:5c:1d:71:f4:a3:0c:
a5:bc:f2:a0:fd:ee:0d:a5:f3:c2:89:a1:ef:cc:c7:e8:e9:ee:
4a:65:a1:5a:7e:4e:1e:99:65:f9:a4:73:c9:6a:88:00:9b:4f:
5f:ba:7e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:43:57 2025 by rpki-client