Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/BcMTJj0i_b8wi6rbUZoRhvhs7bs.roa
File: BcMTJj0i_b8wi6rbUZoRhvhs7bs.roa (raw, json)
Hash identifier: wkp8jCWMGS/oET4RWCnYrWZiq8mVa0AwpzDk2vd50Nk=
Subject key identifier: 05:C3:13:26:3D:22:FD:BF:30:8B:AA:DB:51:9A:11:86:F8:6C:ED:BB
Certificate issuer: /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial: 8D
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BcMTJj0i_b8wi6rbUZoRhvhs7bs.roa
Signing time: Thu 31 Oct 2024 01:30:49 +0000
ROA not before: Thu 31 Oct 2024 01:30:49 +0000
ROA not after: Wed 15 Oct 2025 01:30:02 +0000
asID: 2527
IP address blocks: 207.65.128.0/17 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 141 (0x8d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Validity
Not Before: Oct 31 01:30:49 2024 GMT
Not After : Oct 15 01:30:02 2025 GMT
Subject: CN=05C313263D22FDBF308BAADB519A1186F86CEDBB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:13:f3:b6:19:6b:82:7d:36:15:a3:32:7a:21:
3a:ff:10:b5:b6:47:70:a3:c1:ec:3d:f1:98:21:81:
b4:f5:18:16:97:1a:47:4a:a5:15:ce:fb:8a:9f:79:
a3:ac:75:cf:9e:d7:c2:38:23:2e:18:7c:7c:70:82:
31:1d:7e:ba:02:17:07:8c:21:e6:ba:bd:f9:29:cb:
5f:5f:6a:a4:61:65:66:08:4b:81:f4:59:e5:83:c6:
c2:4e:27:8f:d8:c0:7e:66:24:e5:7a:d2:d0:10:e2:
56:11:9e:e1:f3:cf:1e:34:01:42:74:79:8e:58:88:
a0:4d:e2:a2:d5:55:c3:1e:d3:e4:c9:e0:f8:16:ea:
76:2d:53:0f:a8:b3:53:57:d1:e8:72:1c:40:e0:6a:
03:3b:67:04:17:95:9b:88:63:99:65:7c:31:8f:81:
8d:16:98:2e:98:c4:7c:5d:27:02:78:84:d2:26:08:
80:28:53:cd:e1:ae:13:f5:5f:6f:2f:05:5f:c2:f8:
15:56:22:b3:75:d5:52:97:a0:e6:79:5d:63:f2:89:
c4:30:45:f9:9a:65:f5:bc:bb:c2:9b:1d:f8:43:63:
ea:5a:af:b3:21:39:da:7d:80:33:fa:71:05:57:5d:
45:99:bc:ba:44:fb:17:57:06:52:9e:a9:ff:f5:44:
5b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:C3:13:26:3D:22:FD:BF:30:8B:AA:DB:51:9A:11:86:F8:6C:ED:BB
X509v3 Authority Key Identifier:
keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BcMTJj0i_b8wi6rbUZoRhvhs7bs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
207.65.128.0/17
Signature Algorithm: sha256WithRSAEncryption
01:57:9a:71:19:38:6b:c5:d9:7a:59:30:d1:84:2c:18:6c:9b:
ee:c3:8d:5b:fc:eb:bb:26:1e:b3:63:86:56:1d:f9:1f:4e:b2:
46:c7:53:36:fc:0c:67:f7:50:06:66:c4:6f:da:c1:5f:f5:be:
89:c8:66:4f:4f:19:02:c4:91:90:2b:62:9a:27:9b:f2:9e:fd:
e1:b1:b1:3b:8a:11:25:0b:de:cf:a8:eb:46:8f:9b:a9:d1:c9:
40:f4:d7:00:ff:d8:31:d6:75:be:8e:71:f7:c7:ad:45:76:ab:
20:40:5a:39:b2:02:ae:26:88:1e:f5:0f:1f:40:1c:27:85:79:
6b:82:a0:f7:d2:4b:4e:1d:b9:50:60:f2:c1:1a:0e:8e:47:fa:
3b:5a:14:21:22:27:33:e9:e1:fe:83:2a:49:c1:94:5f:ef:95:
bd:19:3b:dc:01:58:09:5e:7e:4c:4f:49:96:dd:d9:3b:7c:ef:
2d:80:ac:28:68:eb:0b:41:f0:b5:cb:a4:dc:06:1f:f0:7b:a6:
56:39:d3:4d:95:e4:be:d0:97:27:e1:eb:5b:98:be:e6:dc:99:
fd:1f:cc:84:8c:9d:02:29:03:64:98:61:3f:2d:fb:35:2d:2c:
71:90:8d:24:a8:6a:0c:f7:cd:8d:7b:36:bf:e1:04:6f:74:12:
3d:11:c1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 15:11:44 2025 by rpki-client