Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/545/uzv9z0d0ouB2lQrd6YJL7hm1KIY.roa
File: uzv9z0d0ouB2lQrd6YJL7hm1KIY.roa (raw, json)
Hash identifier: UBfSDf+R9tbdI2YcLkhCOCrX3z2is2gsLub73XxDUbo=
Subject key identifier: BB:3B:FD:CF:47:74:A2:E0:76:95:0A:DD:E9:82:4B:EE:19:B5:28:86
Certificate issuer: /CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Certificate serial: 0549
Authority key identifier: BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/uzv9z0d0ouB2lQrd6YJL7hm1KIY.roa
Signing time: Fri 31 Jan 2025 01:36:07 +0000
ROA not before: Fri 31 Jan 2025 01:36:07 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 10010
IP address blocks: 42.125.245.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1353 (0x549)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BBDCD526B09E7897F71FE04858BE75C06EC4F13A
Validity
Not Before: Jan 31 01:36:07 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=BB3BFDCF4774A2E076950ADDE9824BEE19B52886
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2d:bd:0e:b8:67:07:5b:5a:d6:69:b8:f9:63:
25:dd:8f:00:96:a4:37:6f:71:4b:f6:58:21:2f:d4:
cb:82:38:c0:22:62:af:cd:b9:01:92:dd:3a:be:db:
46:26:cd:70:b0:f0:24:3b:71:3b:72:a5:83:e9:ee:
8b:f5:f1:88:bb:49:db:77:e9:f6:f7:7a:a5:0a:17:
33:7d:8e:6f:10:8b:cf:20:ea:d6:f8:4b:ae:e8:99:
06:c0:03:0e:ee:5d:9d:dd:86:bc:e9:fb:cd:67:e7:
47:f8:98:f6:e9:3f:93:1b:eb:07:17:01:46:67:98:
3e:6f:b2:37:31:b5:65:c1:cb:27:71:4f:71:a5:6f:
06:a1:13:a8:cb:77:4e:41:26:ab:83:e3:91:51:3d:
29:f1:2a:ae:42:21:6e:f9:37:5a:e7:d1:54:a7:14:
16:0c:88:35:4e:d7:4d:8c:29:5f:44:18:40:fe:94:
2c:d0:51:3c:43:7c:b1:3d:7d:7b:8b:9b:34:9f:36:
ad:be:0f:9b:c2:bd:53:0f:59:9a:5a:a0:c3:29:d9:
34:2a:54:e5:b3:76:e0:9a:36:44:35:80:f8:7c:55:
8c:53:41:d3:88:07:ba:a9:e3:f1:4f:f8:b5:fa:3d:
c4:d5:90:f4:6c:18:5b:6a:77:59:f4:eb:bd:ba:9a:
47:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:3B:FD:CF:47:74:A2:E0:76:95:0A:DD:E9:82:4B:EE:19:B5:28:86
X509v3 Authority Key Identifier:
keyid:BB:DC:D5:26:B0:9E:78:97:F7:1F:E0:48:58:BE:75:C0:6E:C4:F1:3A
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/u9zVJrCeeJf3H-BIWL51wG7E8To.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/u9zVJrCeeJf3H-BIWL51wG7E8To.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/545/uzv9z0d0ouB2lQrd6YJL7hm1KIY.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
42.125.245.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:8b:8e:34:22:a7:62:b8:d7:21:17:9c:fa:43:3e:69:47:2a:
de:9b:81:90:54:22:fe:22:f0:24:06:5b:8e:02:f5:e9:42:74:
10:7b:81:8d:d7:da:b1:39:db:29:39:6a:1d:9b:da:80:71:41:
12:b4:c7:c5:a8:e5:58:61:fd:af:82:2b:a6:44:93:48:b9:26:
72:b8:0d:74:8d:1b:30:41:cc:e9:49:d0:07:61:41:42:63:61:
39:58:d1:1a:5d:c2:16:f1:ad:04:d6:43:b8:8b:5b:b8:7f:00:
ac:9d:d4:74:e4:a4:d3:a0:05:0d:d1:74:b5:f7:7e:43:08:92:
cc:7d:0c:ea:67:1b:b4:6a:1a:ac:d2:c1:ea:f7:31:75:3c:5f:
7a:fc:ce:dc:ee:a0:4a:35:f2:04:fb:a9:2d:4c:60:4f:0b:5c:
b9:c5:d3:44:ca:c5:db:7e:d4:56:7c:be:41:bf:cc:78:c3:b9:
0f:c8:9e:53:3b:6e:b9:41:b3:cb:6e:6c:6c:0f:5f:91:08:72:
43:8d:71:10:ee:ff:3b:8f:8b:e5:c6:77:8f:ee:c4:ef:25:ae:
6a:cd:f1:51:7c:04:da:7b:b6:84:6f:77:c1:7a:30:ab:4f:4c:
5a:10:af:04:c5:cd:f9:47:be:46:5f:69:a1:58:04:5f:bd:74:
03:ce:2b:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:44:32 2025 by rpki-client