Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/loyi-LrzLq3NwzuvmkwVvaDoKXI.roa
File: loyi-LrzLq3NwzuvmkwVvaDoKXI.roa (raw, json)
Hash identifier: kukWXdc6sGMMS7aDn6UC9ct/pIauh778aKSlOvHp9wQ=
Subject key identifier: 96:8C:A2:F8:BA:F3:2E:AD:CD:C3:3B:AF:9A:4C:15:BD:A0:E8:29:72
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0122
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/loyi-LrzLq3NwzuvmkwVvaDoKXI.roa
Signing time: Fri 01 Sep 2023 01:30:28 +0000
ROA not before: Fri 01 Sep 2023 01:30:28 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 9824
IP address blocks: 111.125.144.0/21 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 290 (0x122)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Sep 1 01:30:28 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=968CA2F8BAF32EADCDC33BAF9A4C15BDA0E82972
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:82:44:9f:de:38:a1:7c:bc:dd:3e:ce:2a:69:
7a:49:f0:99:44:04:f4:5b:5b:b4:b3:51:f8:54:7b:
1a:ed:7f:de:2f:27:86:49:87:85:16:e8:7a:cb:56:
cf:3a:6c:3c:92:5a:d2:c8:38:ca:83:e2:2a:04:d6:
e8:8b:22:55:ec:35:c7:82:a5:86:36:c9:d1:af:09:
54:0a:39:3f:66:ab:67:10:87:95:5b:c4:88:2d:a4:
37:d5:2e:68:84:26:b5:f1:39:24:e0:96:1c:05:a5:
8f:58:d7:6c:ca:fd:a4:c6:b4:13:e0:02:da:9e:7a:
6f:0e:7c:11:64:fb:59:65:08:f6:94:f6:dd:73:d2:
8e:78:04:fc:87:d8:fa:eb:89:13:d4:85:2b:d1:e5:
00:a3:c4:70:ad:b6:32:97:52:c6:40:30:b3:ca:0d:
1a:6c:28:b9:40:da:8d:95:21:90:74:24:c1:b4:df:
09:c6:9f:bd:34:a9:76:a9:c9:47:c7:8f:a9:d3:62:
64:74:66:f6:4e:3c:b8:b0:1d:57:b2:cc:75:fc:28:
f4:73:e2:a7:1e:bc:a7:66:03:2f:c1:88:14:3c:a2:
8a:ff:23:f5:b5:fc:5f:05:c4:84:d2:55:e5:51:fa:
02:36:a2:9e:dd:c4:01:c6:97:d7:d4:69:72:f1:77:
57:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:8C:A2:F8:BA:F3:2E:AD:CD:C3:3B:AF:9A:4C:15:BD:A0:E8:29:72
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/loyi-LrzLq3NwzuvmkwVvaDoKXI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
111.125.144.0/21
Signature Algorithm: sha256WithRSAEncryption
a5:cf:fb:94:46:9e:18:c4:9a:1f:11:75:54:f2:e9:43:ae:ee:
a4:f0:f6:0b:20:9c:ec:45:2c:4c:3c:95:c8:6c:5f:7c:17:ee:
e7:5d:71:31:f2:3f:a2:1f:09:d8:dd:ac:d3:ce:d2:41:3b:98:
89:14:d0:0b:43:8c:32:a8:9d:57:5a:9b:33:9d:ab:3f:9b:ca:
40:78:82:28:0c:15:e4:2e:dd:6c:b1:1d:36:36:01:bf:df:84:
b8:c3:19:25:9e:e4:6f:39:d4:f2:37:bc:f3:bf:cb:40:f2:d0:
6e:a2:ff:aa:53:db:07:3e:28:73:6f:68:8a:97:c7:53:41:08:
0b:1a:9f:dd:3f:e1:67:21:40:35:b3:62:1e:9b:d7:f2:53:bc:
68:ee:ea:93:87:e7:d5:c5:5e:9d:1f:b3:99:0c:52:cb:48:7a:
94:1b:7b:41:f2:e9:73:ba:93:63:73:7c:6f:5f:73:a4:12:e7:
72:18:9b:fb:37:ca:53:cf:c7:49:3e:ba:a4:e5:e5:12:09:8d:
3f:76:28:12:12:55:3e:13:ef:16:9f:6b:ca:92:ba:3e:1e:5f:
2f:53:08:b3:67:45:46:64:c0:dc:fd:3a:a6:9d:7b:57:65:50:
15:6c:7d:20:53:2e:1d:2f:2d:41:91:42:18:bf:81:1c:f4:a3:
ac:48:23:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:12:02 2025 by rpki-client