Route Origin Authorization
$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a363030303a3a2f34342d3438203d3e20323133343831.roa
File: 323630313a316430383a363030303a3a2f34342d3438203d3e20323133343831.roa (raw, json)
Hash identifier: NzGt/M8K0vH1bUbGjNmRuvO+33/4nDlusjyySu1Mj9o=
Subject key identifier: C5:C2:C7:90:EA:69:99:5C:41:5E:25:B6:28:6C:9F:6C:7D:A3:20:2D
Certificate issuer: /CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Certificate serial: 4630D429C50304B49B100CA9B736ED0C4B6B7CAD
Authority key identifier: 87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject info access: rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a363030303a3a2f34342d3438203d3e20323133343831.roa
Signing time: Mon 03 Feb 2025 15:15:47 +0000
ROA not before: Mon 03 Feb 2025 15:10:47 +0000
ROA not after: Mon 02 Feb 2026 15:15:47 +0000
asID: 213481
IP address blocks: 2601:1d08:6000::/44 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:30:d4:29:c5:03:04:b4:9b:10:0c:a9:b7:36:ed:0c:4b:6b:7c:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af
Validity
Not Before: Feb 3 15:10:47 2025 GMT
Not After : Feb 2 15:15:47 2026 GMT
Subject: CN=C5C2C790EA69995C415E25B6286C9F6C7DA3202D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7e:92:73:8b:cc:67:9d:8c:48:aa:2c:f2:ed:
36:3e:ff:08:7a:e3:a2:69:db:71:07:ff:63:c9:00:
9a:65:82:9f:9e:38:24:12:4a:04:56:13:0e:85:0b:
df:cc:1f:81:b9:cd:80:c8:00:cd:90:c9:19:ea:3d:
92:1c:45:cf:e9:b0:b3:df:75:16:dc:53:2b:12:52:
bd:bf:c1:29:59:ea:c8:31:56:4a:02:b9:3f:16:f6:
12:e6:be:e9:7e:13:09:50:b8:cf:75:3f:df:cd:f8:
83:88:c1:0c:93:99:24:32:30:75:b9:c2:6f:ea:ed:
bd:50:67:f0:5a:fb:a9:d3:40:4a:18:ab:0a:04:c1:
bd:7e:e4:8f:18:13:16:1a:ed:e9:2f:c3:60:f1:06:
92:24:ed:28:5c:1e:02:19:6b:cf:c7:f6:2f:3e:3c:
82:6b:f1:e0:03:6a:b6:b7:11:d5:80:49:26:1b:bd:
25:05:10:e9:6c:b8:fb:a4:2d:a4:9f:ab:c1:a4:eb:
c6:8d:33:3f:d4:35:2f:a0:74:19:93:b2:25:63:f6:
66:17:79:1a:10:24:91:4d:a1:9c:2a:8a:71:8c:8c:
c2:cc:92:fc:f2:78:89:b9:7e:66:4d:72:84:ea:d4:
8c:76:83:d7:f2:02:d6:d6:53:44:06:bd:d8:62:da:
cf:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:C2:C7:90:EA:69:99:5C:41:5E:25:B6:28:6C:9F:6C:7D:A3:20:2D
X509v3 Authority Key Identifier:
keyid:87:AA:4E:5D:70:EB:C0:68:95:E7:FA:24:4E:80:AE:B3:79:1C:B3:3F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/87AA4E5D70EBC06895E7FA244E80AEB3791CB33F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/c9ab27a6-7622-48ec-9e33-152bab2b4a2b/cf2c48300f4cd7fa38c9e7128b8d20efed9d868249b25e23af.cer
Subject Information Access:
Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/0/323630313a316430383a363030303a3a2f34342d3438203d3e20323133343831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2601:1d08:6000::/44
Signature Algorithm: sha256WithRSAEncryption
b6:ea:66:ad:2e:5d:d0:9b:8c:1b:c1:58:7e:1e:7f:d0:1a:bb:
3a:ac:b8:75:fd:43:43:8a:a8:fd:c5:0d:e7:7d:d7:e3:34:bc:
c9:31:86:a5:67:d0:1b:23:e9:11:2d:27:01:ac:0b:01:cf:5b:
c5:28:e0:12:65:39:67:4c:f5:6a:36:0b:3c:88:f7:ec:4d:a5:
40:5b:ad:05:31:98:13:88:3c:b2:66:df:7f:ad:5c:23:6b:6f:
7f:6b:26:e6:43:04:e3:c1:78:bd:ff:73:5e:91:76:30:b7:e1:
fd:b6:43:67:e2:4b:ac:a9:22:06:ca:f4:a8:cd:cf:74:a4:d3:
b7:55:e5:11:16:a5:4d:be:7b:d5:38:dd:2d:bd:ad:6b:9f:d5:
20:3c:2c:82:22:8e:fb:c4:e0:c2:38:f9:97:b2:5f:66:25:10:
9c:1a:18:5e:5c:d2:28:ba:42:13:87:eb:b0:d5:c1:03:af:34:
23:7a:b8:40:cd:c2:1e:ca:8e:e3:80:0c:cb:db:29:00:6d:82:
a8:62:56:b7:4f:d7:da:4f:3c:6b:a3:da:5b:49:e4:54:9c:c1:
d4:78:9c:3a:bf:08:01:74:a2:56:c4:14:85:ef:4a:cb:ad:5e:
ea:a6:70:7e:aa:41:3d:de:b2:23:1d:24:6b:c2:03:06:e5:b8:
76:35:d6:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:35:08 2025 by rpki-client