Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/izTfBoQZ4_0adAB0jOfOXD5plN4.roa
File: izTfBoQZ4_0adAB0jOfOXD5plN4.roa (raw, json)
Hash identifier: luC3YX/EMbngL2milWkORz4VW5WGg71WRmXJEXzjHzM=
Subject key identifier: 8B:34:DF:06:84:19:E3:FD:1A:74:00:74:8C:E7:CE:5C:3E:69:94:DE
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0599
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/izTfBoQZ4_0adAB0jOfOXD5plN4.roa
Signing time: Fri 31 Jan 2025 01:42:12 +0000
ROA not before: Fri 31 Jan 2025 01:42:12 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 220.148.180.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1433 (0x599)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:42:12 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=8B34DF068419E3FD1A7400748CE7CE5C3E6994DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:ec:dd:8b:c9:2d:9d:58:f7:fb:02:63:d4:33:
f8:3f:13:49:d3:cb:41:ef:44:e5:cf:0f:aa:12:ac:
6d:f8:3c:37:8b:b5:86:1b:96:ee:7f:0d:ae:aa:23:
62:9a:68:04:8f:22:8a:52:f5:e1:1b:61:85:e7:f1:
3a:91:5e:92:2b:37:d9:b0:8b:80:c5:38:38:ab:46:
b4:48:c3:d0:78:ef:d6:42:54:97:00:4b:f4:4b:8e:
a7:89:e4:3e:6f:4d:3b:74:11:a2:7a:eb:7e:77:94:
95:ad:a2:dd:30:2f:d2:e2:ba:53:6f:d5:a3:c6:20:
be:03:6a:fe:07:45:4b:2c:63:3f:fc:08:bf:59:dc:
0e:23:e4:05:1f:11:32:43:8d:12:ec:ce:26:6f:3e:
fb:cd:df:b6:2c:a7:47:06:fb:b4:48:79:b5:ba:bf:
ff:94:5c:63:43:56:49:75:f8:0d:94:b6:c8:7a:cb:
03:80:c9:36:a1:bf:d2:96:11:59:f3:4b:04:05:b4:
73:36:a4:5e:81:2c:cb:28:33:52:f3:43:79:b6:b5:
9e:2e:1c:22:c4:51:ac:44:28:3d:65:d9:d8:ab:5c:
45:c3:6c:a0:73:b0:c2:82:6c:46:27:26:97:b2:ea:
6b:8b:4d:fc:98:dd:ae:2c:ef:65:65:f5:07:a2:5c:
88:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:34:DF:06:84:19:E3:FD:1A:74:00:74:8C:E7:CE:5C:3E:69:94:DE
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/izTfBoQZ4_0adAB0jOfOXD5plN4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
220.148.180.0/22
Signature Algorithm: sha256WithRSAEncryption
88:df:7e:f8:c2:0a:a2:f7:28:18:f2:01:99:87:f3:2f:e8:15:
90:ef:c1:0e:a8:e5:44:a1:fd:9b:34:3c:7b:67:91:95:32:26:
72:30:95:31:f3:e2:d7:0c:55:22:41:74:be:2a:8f:27:17:6c:
57:54:16:67:5a:d8:7e:0b:ce:7b:4b:ec:1f:44:c6:36:89:66:
49:30:26:c2:de:1c:af:0f:8a:a5:0d:ca:e7:50:8e:b1:db:cb:
87:27:29:97:41:25:ca:0e:9b:11:72:28:31:50:9d:ca:69:43:
a6:aa:df:5a:93:ca:0b:60:83:6c:ab:b8:21:74:c1:85:16:c0:
c2:0c:82:39:c7:7e:23:d4:0d:5a:80:6a:1e:d3:8d:e9:73:51:
2a:30:87:df:df:af:26:87:87:89:ca:7d:d7:d2:05:85:7b:8f:
73:26:2d:83:52:01:f7:f2:c1:64:62:69:17:82:90:2f:bd:c7:
a9:31:e6:e3:76:d2:5f:7f:88:31:1f:0a:2e:21:83:d7:a9:03:
ad:e3:d0:95:84:10:50:41:0b:f6:87:ed:18:1c:ed:ec:cd:0c:
55:8b:01:49:54:03:0d:12:bf:f2:87:bc:b9:23:5f:c0:15:59:
59:fd:19:6a:24:82:bd:03:25:5c:5d:3b:ef:b1:50:b3:e4:65:
ba:6b:9b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:52 2025 by rpki-client