Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/803/aab0BHjCDFNCNJhz2eeuzoqKWAI.roa
File: aab0BHjCDFNCNJhz2eeuzoqKWAI.roa (raw, json)
Hash identifier: lxGuo2KJ1+JzE/r97cVQNFuDVHcpKN6qUTrnT+I/0vY=
Subject key identifier: 69:A6:F4:04:78:C2:0C:53:42:34:98:73:D9:E7:AE:CE:8A:8A:58:02
Certificate issuer: /CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
Certificate serial: 03
Authority key identifier: 6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/aab0BHjCDFNCNJhz2eeuzoqKWAI.roa
Signing time: Mon 21 Oct 2024 06:51:19 +0000
ROA not before: Mon 21 Oct 2024 06:51:19 +0000
ROA not after: Tue 21 Oct 2025 01:29:24 +0000
asID: 18281
IP address blocks: 133.88.32.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 3 (0x3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
Validity
Not Before: Oct 21 06:51:19 2024 GMT
Not After : Oct 21 01:29:24 2025 GMT
Subject: CN=69A6F40478C20C5342349873D9E7AECE8A8A5802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:5b:34:30:65:27:9c:a0:6b:7c:b7:3d:36:95:
90:a8:a9:0d:39:90:71:ec:08:cc:c0:86:85:9b:63:
f4:13:d8:02:c5:ae:7a:46:01:3e:f8:46:57:58:6b:
95:cb:62:d1:a3:27:92:46:eb:36:e6:46:36:90:40:
cc:92:9f:c5:5c:ae:a1:c3:5c:90:37:23:5e:be:06:
71:28:73:0c:25:2a:e2:64:f8:59:b7:e3:78:df:49:
e4:34:9f:26:1d:d0:d1:e1:71:ae:e5:7f:e7:12:6b:
81:4e:f0:51:8c:7f:aa:ef:18:b2:96:d7:61:48:c6:
e1:de:c3:69:1c:f7:87:0b:2e:72:eb:2d:bb:8d:35:
b1:0a:c1:8e:3a:1a:8b:f0:58:16:95:28:ee:73:31:
f4:67:ad:f2:cb:d2:2b:cf:92:66:c0:31:6f:d7:8e:
54:ff:e0:51:3f:5b:2d:4d:84:cf:1b:00:08:c5:4f:
4d:69:bb:a9:ba:a3:ed:cf:b9:c2:10:3d:32:06:08:
8a:52:4b:35:a6:4f:c9:fa:60:76:2d:87:a1:0d:1a:
eb:e7:8e:a3:6c:5b:d1:22:e4:75:e7:ca:0b:81:39:
cc:c9:53:95:56:34:ef:f2:02:b9:08:4c:c8:09:0c:
09:ad:8c:0e:53:dc:9e:d7:05:3c:83:66:72:4a:e4:
3c:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:A6:F4:04:78:C2:0C:53:42:34:98:73:D9:E7:AE:CE:8A:8A:58:02
X509v3 Authority Key Identifier:
keyid:6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/aab0BHjCDFNCNJhz2eeuzoqKWAI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.88.32.0/20
Signature Algorithm: sha256WithRSAEncryption
4a:e2:27:6e:47:61:78:5a:a6:a0:b8:45:3f:2f:8e:cf:e5:d9:
22:ed:95:62:13:d8:f0:6f:99:2a:92:ca:82:54:73:26:22:19:
e0:9a:ac:3b:36:29:e8:d5:aa:ed:22:f5:4f:10:b5:4a:23:6f:
d0:17:cd:f8:e0:c3:8d:9a:9d:c2:69:a8:4a:d8:85:d8:74:24:
bb:27:e9:41:a4:e4:8a:d6:81:62:78:06:ac:c7:bc:9e:6f:5f:
cd:46:0f:d3:73:9e:4f:85:df:22:af:94:87:29:ac:f2:10:0c:
c4:c0:0d:de:17:d8:01:49:89:12:f1:ee:4e:5b:05:77:3d:41:
50:f1:16:8f:a4:c0:4d:4d:8a:7a:d6:f0:54:e1:1c:d0:11:d4:
78:a9:bd:21:43:29:b4:64:dd:f4:1a:d8:43:ff:08:fa:84:8e:
ae:8c:b8:72:9d:e9:e5:60:d6:db:ce:91:64:1d:17:00:ba:bf:
14:47:56:ad:d5:f0:e5:9f:b2:c5:bb:91:61:cf:cc:c5:e3:f1:
7c:57:21:2c:e3:e5:23:33:8b:c6:56:61:85:1a:6e:58:df:e9:
31:b5:94:ea:45:40:bd:fd:b4:8a:45:6b:c6:a5:4b:4c:07:a0:
18:db:3a:26:a2:12:07:e5:95:00:47:15:18:ca:44:b2:91:21:
19:6b:57:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:19:36 2025 by rpki-client