Route Origin Authorization
$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/5/3136352e3134302e3134322e302f32342d3234203d3e2037323537.roa
File: 3136352e3134302e3134322e302f32342d3234203d3e2037323537.roa (raw, json)
Hash identifier: F5RTktxQxD+sFl9Cvn7840kwpsDCWdUgvoX9yngUqwU=
Subject key identifier: BF:60:96:25:2D:85:87:71:B6:C0:8D:B5:03:A8:7F:39:99:5C:75:16
Certificate issuer: /CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
Certificate serial: 34817D20A0B44572CC672163DBC71C89B902A35F
Authority key identifier: E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
Subject info access: rsync://oto.wakuwaku.ne.jp/pki/ha/5/3136352e3134302e3134322e302f32342d3234203d3e2037323537.roa
Signing time: Tue 28 Jan 2025 06:56:35 +0000
ROA not before: Tue 28 Jan 2025 06:51:35 +0000
ROA not after: Tue 27 Jan 2026 06:56:35 +0000
asID: 7257
IP address blocks: 165.140.142.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
34:81:7d:20:a0:b4:45:72:cc:67:21:63:db:c7:1c:89:b9:02:a3:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5
Validity
Not Before: Jan 28 06:51:35 2025 GMT
Not After : Jan 27 06:56:35 2026 GMT
Subject: CN=BF6096252D858771B6C08DB503A87F39995C7516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:93:48:cb:8a:0f:0e:22:ec:bc:c6:5d:17:
66:39:b9:a8:bd:d5:80:07:e4:72:cb:c4:97:22:63:
62:24:11:68:c0:cd:6e:3c:44:fb:9a:b1:5c:d0:0b:
fa:cc:2f:1d:d4:95:5f:c5:a4:db:2f:e3:7e:c7:83:
cc:dc:df:7b:5e:6d:08:e1:11:86:a1:7b:d8:81:be:
5d:74:c9:46:ce:d9:e6:13:62:2b:cf:24:5e:f7:2d:
87:cd:74:b9:81:5a:31:70:f9:c3:8c:86:c1:fd:8e:
34:7f:24:bd:d2:07:30:91:22:a0:21:50:0d:da:de:
24:66:4b:d3:d8:d9:63:2b:25:eb:67:bb:8c:d0:83:
70:5c:ff:3d:e6:84:f7:27:d5:0f:04:52:73:33:7e:
02:07:bb:54:53:45:b6:ff:01:91:1a:4b:bc:9c:6e:
9d:24:d6:87:37:25:22:31:e6:a9:58:ce:ba:2c:02:
fb:2c:90:cc:f6:2b:99:43:da:b5:a9:ba:55:68:3f:
c2:3d:b7:bd:8c:9f:0d:cb:11:be:6e:f4:9c:16:a0:
a3:cd:5e:ff:80:c4:d4:6c:d0:88:e1:69:03:9b:53:
33:22:a2:e9:6f:ee:0c:73:56:eb:39:6d:70:52:ce:
7f:d7:fd:38:9a:d2:62:71:49:96:70:98:22:43:05:
0c:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:60:96:25:2D:85:87:71:B6:C0:8D:B5:03:A8:7F:39:99:5C:75:16
X509v3 Authority Key Identifier:
keyid:E3:53:D7:6C:A2:1A:C9:7D:67:BF:2C:91:83:7C:4F:17:89:24:42:72
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/E353D76CA21AC97D67BF2C91837C4F1789244272.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f1ab8d45-a1ae-408a-9e45-b04fdd663f37/6506a66ed09347e4c3e71ddc8212ada3c8a3c6d93ad336afd5.cer
Subject Information Access:
Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/5/3136352e3134302e3134322e302f32342d3234203d3e2037323537.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.140.142.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:01:ae:5a:0f:6f:7c:04:87:13:f2:95:89:a2:88:5e:66:81:
a1:a7:49:16:9a:2e:a3:db:c5:d9:24:f4:95:ef:7c:2b:31:fe:
8d:87:49:6e:6f:47:30:4b:27:c5:c3:f7:73:13:94:f1:8a:05:
0b:be:66:1b:a0:3a:4f:16:b4:48:e9:3d:3e:35:15:2c:13:81:
3e:ea:27:96:6b:49:30:4f:17:92:87:cf:6e:4e:6c:dd:a7:f4:
c6:1d:bb:9b:19:e8:6d:54:83:64:a7:6f:1f:66:9a:f4:1e:cc:
f2:23:84:b6:ed:78:f1:fa:12:ab:bd:4b:a9:9a:a4:50:2e:b2:
66:27:f2:ee:59:54:fc:57:c2:c0:38:2c:01:ae:59:c4:a2:a7:
b2:57:23:dd:0c:ba:4d:76:e0:25:48:38:1d:e2:23:c9:fa:92:
fd:40:66:52:02:34:ed:43:78:f1:08:82:49:bc:dc:1a:0b:8a:
f5:1e:7c:5c:47:cc:f9:e1:9e:0e:24:7a:58:42:ab:d4:09:43:
94:50:db:9d:12:7e:ee:39:6a:b7:62:30:95:68:5c:f9:4f:aa:
0c:2c:7e:1c:3b:08:0b:88:2a:12:70:51:a2:1d:05:56:1e:4e:
1c:fc:00:2c:d4:8e:48:f7:46:c1:75:a4:dc:24:dd:30:64:1b:
78:d8:38:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 03:22:44 2025 by rpki-client