Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/rYi3vjseffOe0TzZHckjkVjeIjc.roa
File: rYi3vjseffOe0TzZHckjkVjeIjc.roa (raw, json)
Hash identifier: I0FfjPDI+jFmBW6jlT8Z586KcSR3I4ThIblASoTdq7k=
Subject key identifier: AD:88:B7:BE:3B:1E:7D:F3:9E:D1:3C:D9:1D:C9:23:91:58:DE:22:37
Certificate issuer: /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial: E3
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/rYi3vjseffOe0TzZHckjkVjeIjc.roa
Signing time: Sun 01 Oct 2023 01:28:55 +0000
ROA not before: Sun 01 Oct 2023 01:28:55 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 8220
IP address blocks: 27.110.20.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 227 (0xe3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Validity
Not Before: Oct 1 01:28:55 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=AD88B7BE3B1E7DF39ED13CD91DC9239158DE2237
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:13:f6:6b:9f:2e:8c:b6:bc:bc:f6:a6:7c:2d:
da:bd:df:10:cd:06:ff:e8:ae:26:ee:92:7d:83:19:
0b:e3:0a:09:cb:d2:ec:ee:88:46:46:c3:4b:61:3a:
5b:74:85:9b:c3:45:9a:99:d4:e2:e8:f0:93:6b:ca:
d2:1a:9e:16:8e:80:11:7c:b5:3c:a0:6d:3b:31:8d:
06:b2:6f:24:b2:9d:58:a0:91:8f:11:05:b9:fd:b5:
c3:1c:f2:3f:b1:8c:11:43:12:25:dc:f9:74:10:66:
9c:b3:59:34:78:6c:93:0c:b0:ee:95:9b:f7:f8:84:
b8:34:3d:ad:e7:03:0d:49:0a:e7:4d:96:f4:bd:33:
47:82:89:03:2f:d4:81:0d:e1:55:af:83:e6:48:a4:
4d:02:e9:30:a2:a5:7c:d5:41:1e:71:e8:bf:34:fe:
8b:3f:83:a4:8f:08:36:c6:09:56:e6:53:3a:4c:8f:
82:19:2e:b7:3d:4a:7a:75:e2:87:80:ab:71:95:c4:
e2:ce:c1:95:06:d5:7d:4b:f6:f9:27:9a:d7:05:3c:
be:d6:14:4d:85:4f:93:3c:4a:99:05:64:b3:fb:09:
99:8c:6c:b9:4f:58:88:14:e5:66:9a:ff:31:0d:f3:
bb:dc:bb:15:e1:d5:3e:1b:64:47:a5:80:1c:ea:c4:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:88:B7:BE:3B:1E:7D:F3:9E:D1:3C:D9:1D:C9:23:91:58:DE:22:37
X509v3 Authority Key Identifier:
keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/rYi3vjseffOe0TzZHckjkVjeIjc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
27.110.20.0/23
Signature Algorithm: sha256WithRSAEncryption
23:65:e7:0d:b5:26:5b:3a:ed:6e:40:d6:5b:8c:9f:17:16:7a:
90:a7:8f:37:db:d3:f0:6e:34:a9:07:f8:20:31:40:49:e3:fb:
44:8c:19:db:6c:28:e1:7f:44:86:d5:4f:80:17:26:a8:7b:e6:
38:3a:75:7d:5f:f0:97:6d:98:b3:36:a6:1d:67:0a:de:d5:89:
84:60:4e:5c:e0:8d:a0:19:28:5e:58:a2:66:47:e4:98:22:ee:
3c:4f:4d:d2:60:c3:6c:87:77:61:02:ce:12:4e:d3:28:8a:b7:
ed:6f:95:8c:25:05:26:30:eb:13:8c:26:e9:97:06:82:29:b9:
86:e4:f8:45:20:d0:e8:06:2f:e4:e1:53:7f:13:d0:36:f8:1c:
fa:d9:4c:cc:6d:44:95:de:45:fa:86:84:cb:1b:75:2c:54:bf:
10:d3:16:c4:9b:c7:d8:d1:5a:72:2b:11:a8:5b:e7:97:f5:db:
c1:d3:81:94:7b:9e:04:f4:c1:d0:a8:00:a1:6d:12:02:c0:fb:
18:61:3d:98:05:3c:11:2c:10:bf:ba:11:f9:1c:38:da:5a:98:
3e:a3:78:80:91:c2:8e:92:7d:44:08:03:8b:88:fd:0b:1b:a5:
20:95:57:38:d0:9b:98:6f:e8:87:75:b1:19:f3:fa:e5:7c:bb:
ff:05:e2:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:46 2025 by rpki-client