Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/w6TpWy7kireA9iNCyKRTqpZmPJA.roa
File: w6TpWy7kireA9iNCyKRTqpZmPJA.roa (raw, json)
Hash identifier: zXgCR6+2vDAbiXfx3jQ7P94IHhC7BLbD/rhEYe9q+1E=
Subject key identifier: C3:A4:E9:5B:2E:E4:8A:B7:80:F6:23:42:C8:A4:53:AA:96:66:3C:90
Certificate issuer: /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial: 55
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/w6TpWy7kireA9iNCyKRTqpZmPJA.roa
Signing time: Fri 01 Apr 2022 01:28:08 +0000
ROA not before: Fri 01 Apr 2022 01:28:08 +0000
ROA not after: Fri 31 Mar 2023 13:10:57 +0000
asID: 38631
IP address blocks: 43.223.0.0/16 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 85 (0x55)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Validity
Not Before: Apr 1 01:28:08 2022 GMT
Not After : Mar 31 13:10:57 2023 GMT
Subject: CN=C3A4E95B2EE48AB780F62342C8A453AA96663C90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f9:87:15:98:37:fc:32:dc:a6:f1:d6:14:db:
90:cf:17:0f:7a:34:6c:8f:c9:b2:59:4b:3a:92:bd:
e6:8a:79:52:69:d1:44:29:6d:93:43:ab:d6:15:03:
76:f4:f7:dc:5b:52:4f:ac:b5:da:bf:b4:fa:34:15:
8d:28:3c:79:3c:d4:7e:aa:70:2e:27:93:76:3a:31:
c7:47:3e:32:2d:84:11:25:39:64:78:b7:e4:0c:1e:
05:d7:16:46:11:39:de:16:26:05:f2:f1:ad:d3:cd:
92:76:72:cf:2e:8a:e4:87:e9:ba:86:f1:a3:80:ab:
c3:3e:1e:62:92:2d:d2:8f:1d:73:7f:a3:8c:a5:04:
42:16:86:ec:70:4a:17:0b:86:1f:fa:dd:b2:62:f0:
10:8c:df:d5:ba:fd:d8:c5:25:7e:6f:bc:b4:84:69:
62:df:05:dc:ba:ea:7b:57:65:fd:4e:ef:5b:af:04:
58:b1:39:7f:02:65:49:6b:c7:b7:c3:10:a9:40:e5:
d7:c1:f9:8c:b4:ee:fc:1d:76:85:5d:d4:19:91:de:
cd:f0:32:b3:d4:e0:33:6f:ee:1d:ac:7f:5c:2a:9e:
f0:52:94:a9:4c:1b:0f:08:21:08:d5:03:2e:02:ea:
2b:60:47:1d:91:86:3a:dc:17:aa:79:4b:8b:c5:ce:
d2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:A4:E9:5B:2E:E4:8A:B7:80:F6:23:42:C8:A4:53:AA:96:66:3C:90
X509v3 Authority Key Identifier:
keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/w6TpWy7kireA9iNCyKRTqpZmPJA.roa
sbgp-ipAddrBlock: critical
IPv4:
43.223.0.0/16
Signature Algorithm: sha256WithRSAEncryption
2a:0c:90:8a:13:39:4e:c2:2d:d5:32:ee:5f:1e:f4:fe:59:d0:
39:17:47:6c:cc:ca:14:2c:db:7c:66:6f:6d:9c:2a:e8:43:a1:
ea:10:8e:9e:f7:cc:03:c9:22:b0:22:9a:be:4f:a3:84:8b:91:
9c:47:b0:92:f8:5a:62:a7:0e:9d:e1:8c:69:77:cf:85:2b:3c:
1f:f0:39:de:10:34:38:2b:4d:62:cf:42:10:b3:d3:fa:f9:83:
81:1a:2b:3f:63:fd:b0:2e:ba:6a:1f:7a:49:d2:39:30:4b:fc:
96:d6:a8:60:81:b7:10:80:f8:85:5f:57:b9:d1:9d:d6:64:b5:
48:c4:84:1d:6f:e7:58:7b:1d:80:44:f9:77:c9:13:ab:2f:84:
6d:98:99:75:1b:dc:7c:9d:20:b9:87:08:bc:89:ba:43:f8:8c:
b1:e3:d4:f5:7d:d7:40:ef:72:13:13:a5:dd:eb:5a:e8:13:ba:
b9:c0:ae:20:93:30:73:1d:9d:df:a3:42:55:6c:af:9f:11:dc:
6d:15:43:8c:85:ca:fc:76:be:49:14:2e:34:34:29:36:0e:8a:
51:ac:52:e4:52:3b:db:71:d7:90:15:91:1b:cf:89:da:ea:a3:
a8:d8:a3:7d:bb:4e:e1:b2:0c:c9:24:72:39:af:0b:c9:15:25:
a6:de:58:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:10 2025 by rpki-client