Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/834/bso1WIdW4aijXO-OGd3MfMycUQM.roa
File: bso1WIdW4aijXO-OGd3MfMycUQM.roa (raw, json)
Hash identifier: yNgbW2m5YTdQev5xUVtZZ9wOccsvVfoQsrma71FQmEY=
Subject key identifier: 6E:CA:35:58:87:56:E1:A8:A3:5C:EF:8E:19:DD:CC:7C:CC:9C:51:03
Certificate issuer: /CN=DFBEE141DC34E893640343A7F312A702EF91A698
Certificate serial: 14
Authority key identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/bso1WIdW4aijXO-OGd3MfMycUQM.roa
Signing time: Thu 30 Jan 2025 03:30:17 +0000
ROA not before: Thu 30 Jan 2025 03:30:17 +0000
ROA not after: Thu 15 Jan 2026 01:30:03 +0000
asID: 23630
IP address blocks: 210.134.192.0/20 maxlen: 20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 20 (0x14)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DFBEE141DC34E893640343A7F312A702EF91A698
Validity
Not Before: Jan 30 03:30:17 2025 GMT
Not After : Jan 15 01:30:03 2026 GMT
Subject: CN=6ECA35588756E1A8A35CEF8E19DDCC7CCC9C5103
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:d7:e9:b1:80:e6:4f:5c:b4:29:8f:77:a5:f6:
43:9e:d6:7c:97:9f:b2:32:88:85:5a:69:88:cb:2e:
65:85:69:75:60:20:ac:46:3c:b9:ca:f4:ff:eb:02:
d8:a3:1c:42:10:a7:18:0d:fa:0c:85:37:28:cc:29:
1f:7d:34:f6:8b:72:07:c0:e1:26:4f:ea:ee:2a:9b:
98:19:34:6e:53:c4:9d:b0:d8:87:f2:f5:9b:eb:1f:
7c:44:9c:d4:c1:71:4c:31:cb:0c:09:32:1b:06:25:
53:a3:7c:27:25:26:2c:df:3f:01:c5:bd:d9:d6:f8:
59:99:0a:24:80:f8:8d:3e:73:6f:1f:45:ff:92:38:
23:e5:30:39:82:d3:97:ba:18:1f:83:45:b7:f5:f7:
47:48:e0:be:fc:e4:ce:ce:35:80:27:83:ec:f7:24:
17:38:e8:c4:79:df:16:07:67:74:f0:ad:a8:05:43:
4f:97:6b:3a:34:af:da:12:a0:e1:af:ed:81:51:8b:
4d:99:c9:e8:f5:be:1a:bf:22:d6:9c:95:0d:28:69:
85:7a:e7:47:78:50:05:c1:64:df:a0:38:01:23:ed:
f2:34:66:47:02:db:7b:7f:89:01:21:7e:d8:85:de:
c3:f0:c4:27:6f:34:6c:4d:bb:07:f4:07:0d:13:c5:
23:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:CA:35:58:87:56:E1:A8:A3:5C:EF:8E:19:DD:CC:7C:CC:9C:51:03
X509v3 Authority Key Identifier:
keyid:DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/bso1WIdW4aijXO-OGd3MfMycUQM.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.134.192.0/20
Signature Algorithm: sha256WithRSAEncryption
9d:02:45:d0:07:7a:db:05:36:63:6f:c0:7c:e6:eb:00:16:0f:
25:aa:60:5a:ba:dd:4d:04:ed:05:66:6d:fc:76:8d:de:c5:47:
c4:bb:d8:04:92:8f:2c:07:17:41:57:89:0e:5c:a8:50:12:3f:
c0:cf:47:27:bb:16:43:eb:ac:e5:8e:45:f4:bf:7a:78:9a:3d:
c6:a0:fb:6d:79:bf:6e:9a:0e:d9:1b:0d:aa:5b:98:61:ac:87:
8a:07:4b:eb:33:bc:24:e1:a3:5f:69:25:26:72:30:95:8a:2a:
c3:58:08:06:71:5b:eb:3e:7e:94:9a:8e:bc:66:0f:bb:9e:3c:
33:ae:ae:69:4b:36:da:54:00:4b:aa:5f:dd:74:42:b5:28:d1:
f7:e1:8e:6b:c0:70:47:30:88:bc:4c:35:4c:05:b1:5c:27:ea:
1b:f7:f0:6e:55:70:2d:20:28:09:30:3b:d6:ae:e6:05:fe:4b:
a7:3e:20:4b:d4:9a:cf:93:73:73:a6:0c:7e:f5:9d:4f:2b:81:
5d:9c:c6:2d:14:bd:5a:fb:0a:ce:a1:d6:d3:a7:e1:4a:99:33:
7d:21:f4:81:f5:49:84:c5:a4:69:eb:19:eb:6b:1a:4e:0f:ef:
71:30:f0:4d:cd:dd:2f:9b:fb:6e:66:34:46:f0:a9:52:45:05:
54:9e:89:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:01:23 2025 by rpki-client