Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/N0pmCkiKmIOK4ImbAk_sGqgjKbk.roa
File: N0pmCkiKmIOK4ImbAk_sGqgjKbk.roa (raw, json)
Hash identifier: CzQFOOoX2NzTbqgNW1jTB0dpGuKF+VMT1sckfUM6DBw=
Subject key identifier: 37:4A:66:0A:48:8A:98:83:8A:E0:89:9B:02:4F:EC:1A:A8:23:29:B9
Certificate issuer: /CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Certificate serial: 82
Authority key identifier: 1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/N0pmCkiKmIOK4ImbAk_sGqgjKbk.roa
Signing time: Sat 31 Aug 2024 01:37:24 +0000
ROA not before: Sat 31 Aug 2024 01:37:24 +0000
ROA not after: Fri 15 Aug 2025 01:30:02 +0000
asID: 4685
IP address blocks: 220.157.128.0/17 maxlen: 17
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 130 (0x82)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BE3AB0F8DB265ABB2287E75151E7F5A93B2C736
Validity
Not Before: Aug 31 01:37:24 2024 GMT
Not After : Aug 15 01:30:02 2025 GMT
Subject: CN=374A660A488A98838AE0899B024FEC1AA82329B9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6b:5a:f6:ca:0c:da:5b:af:1c:ec:50:fc:aa:
01:19:a3:af:e7:f5:2e:ca:c2:91:41:67:08:e0:ba:
4c:de:11:75:64:1b:c1:32:c8:85:47:3c:01:5a:7f:
fb:1a:d1:4c:33:38:8c:ca:aa:04:0b:e1:08:4b:50:
13:d5:a0:8d:fb:56:90:65:61:81:6b:07:be:56:dd:
95:9b:0c:bf:be:c8:bf:c6:77:41:d8:53:f2:61:98:
5e:ed:92:d2:ca:ed:92:ea:e0:c6:ab:e4:c3:12:c8:
70:2d:ee:2a:d7:98:0e:2f:82:ab:bc:1b:f5:ba:d0:
21:05:22:92:73:cc:81:78:8b:69:00:d9:27:bc:43:
d8:63:16:0f:65:1b:2a:16:ca:de:c3:06:d4:dc:2d:
f5:61:71:e5:3d:c5:cf:e6:28:88:ab:54:e3:a1:d0:
03:d8:36:4d:45:f8:34:85:94:13:9d:0d:f7:88:0a:
06:86:c7:e6:3b:e5:ae:a4:f6:0c:d7:23:57:3a:71:
17:44:6e:95:0e:ea:a2:49:b1:21:34:53:d2:e0:c7:
18:78:2d:c1:d4:24:97:c3:11:9e:4c:27:46:72:29:
4d:14:a5:33:e7:0d:11:92:f9:39:96:6d:4d:ce:73:
81:9e:f3:76:65:ca:c4:29:a4:cb:00:8c:76:be:5d:
79:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:4A:66:0A:48:8A:98:83:8A:E0:89:9B:02:4F:EC:1A:A8:23:29:B9
X509v3 Authority Key Identifier:
keyid:1B:E3:AB:0F:8D:B2:65:AB:B2:28:7E:75:15:1E:7F:5A:93:B2:C7:36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/G-OrD42yZauyKH51FR5_WpOyxzY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/G-OrD42yZauyKH51FR5_WpOyxzY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/N0pmCkiKmIOK4ImbAk_sGqgjKbk.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.157.128.0/17
Signature Algorithm: sha256WithRSAEncryption
26:74:26:b5:04:de:f2:03:9d:82:cd:ea:0f:32:22:d0:af:5b:
e5:6d:1b:e1:88:d4:6a:dd:f4:5e:bd:32:fb:78:f1:b9:01:24:
a3:95:ec:6f:7d:65:f3:12:ed:40:e8:75:d3:86:d3:fe:1c:9d:
0d:69:61:c3:2f:c5:c0:7d:53:3b:6c:ee:0e:c6:cc:cb:d5:fb:
65:eb:12:d8:ca:82:b5:92:98:21:d3:dc:77:b9:31:d0:2b:d3:
1f:d6:ed:41:38:29:8e:cb:9a:6e:35:cd:b1:74:47:47:db:e1:
05:1a:27:be:af:b7:03:fd:72:e1:8d:12:92:83:27:66:2f:61:
11:8c:f1:d5:35:b6:0f:68:4f:4e:02:0e:96:e3:a4:d0:8c:2b:
4a:9d:8f:82:6e:40:a9:8a:a5:b3:91:da:3d:1a:5b:03:1a:1a:
19:75:78:c4:67:6f:4c:82:91:06:d2:a1:f3:83:c3:cb:69:d4:
54:3a:93:1a:b4:e3:6e:ef:3b:27:a9:04:40:66:e0:96:9b:4b:
70:59:27:9a:ab:92:13:8c:c6:41:0a:9d:19:cf:88:5b:0e:54:
3e:68:27:b7:0d:8c:c1:72:9a:7a:8b:a9:72:16:f4:e6:63:2a:
4e:4f:76:5b:d9:75:af:ad:e7:c5:d1:11:61:4c:cc:f6:47:74:
53:c3:46:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:34 2025 by rpki-client