Route Origin Authorization
$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/2/32332e3134392e3135322e302f32342d3234203d3e203632343839.roa
File: 32332e3134392e3135322e302f32342d3234203d3e203632343839.roa (raw, json)
Hash identifier: FiysISggJJKr3/Tijhwt7hwKGlU9SCDIv/2kxCTTwOk=
Subject key identifier: 1D:D8:6D:49:03:97:8B:4F:0A:CA:8E:89:2A:C2:1C:C3:87:D9:9A:B2
Certificate issuer: /CN=62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff
Certificate serial: 409F6AB44D13D254A9DFAA4CB5A188ABB5517297
Authority key identifier: 3A:50:25:3B:A3:B3:EF:71:13:81:A9:0C:B5:6A:6B:4B:4E:E5:DF:44
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff.cer
Subject info access: rsync://oto.wakuwaku.ne.jp/pki/ha/2/32332e3134392e3135322e302f32342d3234203d3e203632343839.roa
Signing time: Sun 29 Dec 2024 22:28:35 +0000
ROA not before: Sun 29 Dec 2024 22:23:35 +0000
ROA not after: Sun 28 Dec 2025 22:28:35 +0000
asID: 62489
IP address blocks: 23.149.152.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:9f:6a:b4:4d:13:d2:54:a9:df:aa:4c:b5:a1:88:ab:b5:51:72:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff
Validity
Not Before: Dec 29 22:23:35 2024 GMT
Not After : Dec 28 22:28:35 2025 GMT
Subject: CN=1DD86D4903978B4F0ACA8E892AC21CC387D99AB2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:64:09:bb:59:89:e7:3d:dd:77:ea:ed:ac:5c:
4e:73:bf:89:4b:c3:e7:30:81:b6:c6:c5:0d:14:6b:
4a:85:00:40:1e:a5:2d:9d:b8:5a:36:20:62:47:06:
bc:cf:21:3f:ab:7a:c0:dc:6f:1d:b6:28:de:9e:94:
0f:e5:da:ae:f8:96:42:93:ca:72:c6:d5:47:a6:4e:
f7:1b:c3:82:49:cb:e2:f9:3a:2e:26:c0:60:4e:c9:
49:db:9b:29:f0:c1:d3:64:e0:b6:bb:9f:ee:ce:09:
c1:a3:8d:d0:43:f8:aa:05:b3:6a:9f:d8:9f:f0:9d:
d8:0a:b4:33:f6:9a:f1:df:d7:cd:e5:e8:44:d7:8d:
6e:ff:fe:45:9e:8d:f2:7d:07:9f:da:be:5d:98:1c:
0d:c6:ce:bb:10:2b:0d:bb:3c:9c:dd:0e:bb:7f:f3:
ff:9d:6e:c0:d4:a7:bf:3c:8a:be:d5:ef:00:84:45:
a6:30:18:d9:36:7e:02:c7:a2:72:7f:17:2c:b5:bf:
50:11:b5:c0:1f:28:95:e0:0f:9a:65:ab:17:a4:c1:
ee:e6:56:a1:80:8d:bc:de:2e:ae:56:cd:46:e1:63:
5a:59:27:3d:58:2a:da:b0:16:c8:ea:d3:9e:55:bd:
39:04:38:a7:b0:f9:07:dd:36:4a:66:64:0a:e7:e4:
47:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:6D:49:03:97:8B:4F:0A:CA:8E:89:2A:C2:1C:C3:87:D9:9A:B2
X509v3 Authority Key Identifier:
keyid:3A:50:25:3B:A3:B3:EF:71:13:81:A9:0C:B5:6A:6B:4B:4E:E5:DF:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://oto.wakuwaku.ne.jp/pki/ha/2/3A50253BA3B3EF711381A90CB56A6B4B4EE5DF44.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7a054d1e-8326-42a7-b1ad-02b30287b483/62f3d0af16f92092d299a3268a1f14feb1201d711c49b1edff.cer
Subject Information Access:
Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/2/32332e3134392e3135322e302f32342d3234203d3e203632343839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.149.152.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:7e:c8:b5:40:69:f8:01:20:77:77:c3:65:38:f6:62:e2:61:
78:e6:71:ec:a2:fe:b8:7a:8e:a3:6b:6b:91:00:43:fb:c4:79:
23:da:cf:05:c3:f4:40:29:94:6f:ef:96:eb:53:d0:ca:64:e0:
34:1b:de:71:ac:79:25:5b:17:a0:20:16:33:fd:2f:6e:b9:63:
c6:5e:7f:a3:08:0f:bd:fc:ed:3f:2e:1c:52:c0:67:f2:b3:fd:
58:26:b2:cf:9e:4f:5e:71:8c:6a:1f:fc:0d:2b:e0:ba:a0:5b:
76:ad:6d:12:34:24:86:3e:15:62:4e:38:f6:2f:95:45:a4:d9:
8d:66:db:00:af:5f:29:6b:b2:51:5b:3f:be:8d:74:e4:03:ea:
be:a9:a2:5d:1c:48:d6:c4:e3:10:9c:a2:3d:64:84:72:84:85:
8f:d2:62:1e:95:64:55:8e:ad:b6:04:64:85:46:f4:99:94:53:
cf:4a:5d:72:4b:f4:0c:f7:a5:9d:1e:78:1a:d5:c9:33:a4:60:
e1:6c:e5:ff:5a:69:ba:b3:3f:d1:6b:ca:ff:13:37:76:20:b9:
2f:f1:9c:dd:a2:d5:7f:5c:31:ab:8b:61:e2:68:eb:92:99:9c:
df:e2:d1:46:b1:90:99:aa:a2:d2:eb:f2:27:14:40:26:01:60:
80:dd:b3:f4
-----BEGIN CERTIFICATE-----
MIIFZDCCBEygAwIBAgIUQJ9qtE0T0lSp36pMtaGIq7VRcpcwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjJmM2QwYWYxNmY5MjA5MmQyOTlhMzI2OGExZjE0ZmVi
MTIwMWQ3MTFjNDliMWVkZmYwHhcNMjQxMjI5MjIyMzM1WhcNMjUxMjI4MjIyODM1
WjAzMTEwLwYDVQQDEygxREQ4NkQ0OTAzOTc4QjRGMEFDQThFODkyQUMyMUNDMzg3
RDk5QUIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzWQJu1mJ5z3d
d+rtrFxOc7+JS8PnMIG2xsUNFGtKhQBAHqUtnbhaNiBiRwa8zyE/q3rA3G8dtije
npQP5dqu+JZCk8pyxtVHpk73G8OCScvi+TouJsBgTslJ25sp8MHTZOC2u5/uzgnB
o43QQ/iqBbNqn9if8J3YCrQz9prx39fN5ehE141u//5Fno3yfQef2r5dmBwNxs67
ECsNuzyc3Q67f/P/nW7A1Ke/PIq+1e8AhEWmMBjZNn4Cx6Jyfxcstb9QEbXAHyiV
4A+aZasXpMHu5lahgI283i6uVs1G4WNaWSc9WCrasBbI6tOeVb05BDinsPkH3TZK
ZmQK5+RHfwIDAQABo4ICZDCCAmAwHQYDVR0OBBYEFB3YbUkDl4tPCsqOiSrCHMOH
2ZqyMB8GA1UdIwQYMBaAFDpQJTujs+9xE4GpDLVqa0tO5d9EMA4GA1UdDwEB/wQE
AwIHgDBhBgNVHR8EWjBYMFagVKBShlByc3luYzovL290by53YWt1d2FrdS5uZS5q
cC9wa2kvaGEvMi8zQTUwMjUzQkEzQjNFRjcxMTM4MUE5MENCNTZBNkI0QjRFRTVE
RjQ0LmNybDCB8wYIKwYBBQUHAQEEgeYwgeMwgeAGCCsGAQUFBzAChoHTcnN5bmM6
Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRhLzVlNGEyM2Vh
LWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05NjcyLTRjZDkt
YWNjZS0xMzcyMjdlOTcxYWMvN2EwNTRkMWUtODMyNi00MmE3LWIxYWQtMDJiMzAy
ODdiNDgzLzYyZjNkMGFmMTZmOTIwOTJkMjk5YTMyNjhhMWYxNGZlYjEyMDFkNzEx
YzQ5YjFlZGZmLmNlcjB6BggrBgEFBQcBCwRuMGwwagYIKwYBBQUHMAuGXnJzeW5j
Oi8vb3RvLndha3V3YWt1Lm5lLmpwL3BraS9oYS8yLzMyMzMyZTMxMzQzOTJlMzEz
NTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzYzMjM0MzgzOS5yb2EwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ABeVmDANBgkqhkiG9w0BAQsFAAOCAQEAjX7ItUBp+AEgd3fDZTj2YuJheOZx7KL+
uHqOo2trkQBD+8R5I9rPBcP0QCmUb++W61PQymTgNBvecax5JVsXoCAWM/0vbrlj
xl5/owgPvfztPy4cUsBn8rP9WCayz55PXnGMah/8DSvguqBbdq1tEjQkhj4VYk44
9i+VRaTZjWbbAK9fKWuyUVs/vo105APqvqmiXRxI1sTjEJyiPWSEcoSFj9JiHpVk
VY6ttgRkhUb0mZRTz0pdckv0DPelnR54GtXJM6Rg4Wzl/1ppurM/0WvK/xM3diC5
L/Gc3aLVf1wxq4th4mjrkpmc3+LRRrGQmaqi0uvyJxRAJgFggN2z9A==
-----END CERTIFICATE-----
Generated at Fri Apr 18 18:44:22 2025 by rpki-client