Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/OCHPBUv03t2WsJgPP4dfbimBaZo.roa
File: OCHPBUv03t2WsJgPP4dfbimBaZo.roa (raw, json)
Hash identifier: SyKw9QjZ8p5JrvRRHddyaEeB5q4M4CkZxPJdLcaBIUI=
Subject key identifier: 38:21:CF:05:4B:F4:DE:DD:96:B0:98:0F:3F:87:5F:6E:29:81:69:9A
Certificate issuer: /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial: 77
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/OCHPBUv03t2WsJgPP4dfbimBaZo.roa
Signing time: Fri 31 Jan 2025 01:32:16 +0000
ROA not before: Fri 31 Jan 2025 01:32:16 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 32787
IP address blocks: 61.211.168.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 119 (0x77)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Validity
Not Before: Jan 31 01:32:16 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=3821CF054BF4DEDD96B0980F3F875F6E2981699A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:52:04:e1:80:a3:f2:a7:49:98:01:40:63:5c:
c1:86:c2:0d:c8:39:9f:a1:24:9c:65:4d:ce:29:01:
22:d7:b0:22:b7:89:1c:17:d5:e6:f8:54:c0:4e:f0:
c8:ff:a9:85:7c:17:ff:f0:cc:72:b7:40:78:ca:43:
df:5a:5f:73:ac:c6:23:11:a1:9e:9f:90:da:29:b9:
56:ea:2f:e9:ff:f2:f0:a9:97:cd:66:4c:ce:94:3e:
16:25:84:42:d5:fb:ca:41:64:22:59:f6:43:2b:b0:
95:69:ef:c9:01:a9:26:36:ba:9b:9b:0f:b5:3d:63:
66:dc:f5:bc:62:2d:b9:34:bf:b5:40:f5:de:5e:da:
05:fb:9c:f4:42:93:0a:e8:08:00:4f:86:91:0d:32:
90:56:21:81:c1:a6:52:80:ab:b7:22:02:6f:99:76:
0e:57:b0:29:c1:23:93:a8:5a:da:ff:5a:5a:57:ee:
0f:be:d7:31:f7:fc:e3:14:0a:35:4b:a2:ed:aa:9e:
c6:79:2f:b5:2d:fb:45:b5:a0:65:ff:03:91:ae:f9:
3d:44:c7:94:d8:7e:e6:c4:9c:37:65:d7:04:db:59:
85:34:11:6b:0f:3a:d8:43:ba:0e:2d:1a:fe:13:86:
03:0e:43:a3:15:0a:50:1f:8a:96:5f:6f:03:fa:dc:
2b:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:21:CF:05:4B:F4:DE:DD:96:B0:98:0F:3F:87:5F:6E:29:81:69:9A
X509v3 Authority Key Identifier:
keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/OCHPBUv03t2WsJgPP4dfbimBaZo.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.211.168.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:13:a0:82:c3:a8:d8:6a:19:bd:8c:76:7f:18:6c:19:dc:a5:
91:2d:89:19:a6:24:bf:40:f8:8c:74:0e:13:e1:b4:a0:3e:96:
a7:37:29:0f:4f:4e:04:01:43:2d:b9:2f:9f:2d:bc:23:b5:9c:
4e:d7:f4:2f:81:9b:f3:40:08:c8:85:ff:8f:5c:eb:a1:fe:b6:
b0:7d:fa:4e:e3:4f:89:cb:99:6d:d4:c6:07:ed:87:86:fe:4a:
ec:ac:00:43:51:26:99:07:38:4d:13:5b:0f:7a:f7:45:d1:f4:
32:e0:00:47:18:9d:ee:6e:7e:09:24:93:e3:e2:50:b4:90:e7:
19:c8:47:05:cd:47:52:65:17:25:32:55:7c:cd:2d:e2:3c:a6:
8f:66:57:92:04:cd:72:ec:09:7a:b3:f7:5f:19:0c:cc:97:2e:
e9:ee:d7:e4:83:67:8c:a7:be:3b:47:90:e9:e3:c8:2f:32:0d:
73:e1:f2:4d:51:81:76:2d:94:79:3b:1e:39:39:25:9b:f6:ce:
7e:7e:12:d5:fc:68:80:0a:b9:9b:60:17:69:20:6d:dc:f1:5a:
12:47:79:27:55:54:c4:1c:f7:25:bd:4f:f9:ff:21:2e:89:13:
59:a2:24:53:8b:26:2b:a1:69:85:5b:62:86:5e:73:30:4b:24:
71:ad:0e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:07 2025 by rpki-client