Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/3/32332e3133382e3233322e302f32342d3234203d3e20393435.roa
File:                     32332e3133382e3233322e302f32342d3234203d3e20393435.roa (raw, json)
Hash identifier:          a3UvPnumH/23ap/aavjJYcKTa80fJ2xZNaZSY2ZoaI8=
Subject key identifier:   9C:3C:CE:08:30:BB:36:60:79:A0:BF:EA:D9:CB:CE:F2:29:DB:4F:E7
Certificate issuer:       /CN=7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500
Certificate serial:       07B85EFC905E487B5F5DD43CFC4624B9DF1BF936
Authority key identifier: 9B:6B:FA:A0:8E:CB:D2:49:F7:D9:74:6F:19:56:E2:94:4C:81:24:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/3/32332e3133382e3233322e302f32342d3234203d3e20393435.roa
Signing time:             Wed 09 Oct 2024 00:37:13 +0000
ROA not before:           Wed 09 Oct 2024 00:32:13 +0000
ROA not after:            Wed 08 Oct 2025 00:37:13 +0000
asID:                     945
IP address blocks:        23.138.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/3/9B6BFAA08ECBD249F7D9746F1956E2944C812494.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/3/9B6BFAA08ECBD249F7D9746F1956E2944C812494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 16:25:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:b8:5e:fc:90:5e:48:7b:5f:5d:d4:3c:fc:46:24:b9:df:1b:f9:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500
        Validity
            Not Before: Oct  9 00:32:13 2024 GMT
            Not After : Oct  8 00:37:13 2025 GMT
        Subject: CN=9C3CCE0830BB366079A0BFEAD9CBCEF229DB4FE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e8:a9:84:ab:36:e6:5a:f1:be:f0:68:77:c4:
                    19:5e:62:71:59:3c:fa:ba:7c:a9:6c:77:60:03:7e:
                    ee:79:e9:cf:07:94:ef:ec:a8:53:19:9e:ae:af:01:
                    9d:0d:22:61:28:9d:fc:c5:a7:35:0b:37:8e:82:ea:
                    5b:49:14:0a:66:d5:ae:28:e2:3c:6b:d6:2e:4b:30:
                    2d:57:8a:44:ce:81:85:ce:21:77:ad:0e:82:0c:47:
                    4a:c3:80:63:1a:22:15:be:dc:c1:fd:73:e0:0b:da:
                    12:da:7b:bf:d8:7a:d0:f0:78:a4:84:c9:bd:9f:24:
                    0a:f1:bc:0d:b5:d7:a3:01:e8:fd:26:1c:e4:6f:22:
                    35:e4:40:08:45:e4:56:09:98:30:de:d3:e7:95:44:
                    bc:f3:d0:60:d4:ae:61:5d:76:5b:36:11:a8:ad:ad:
                    ae:ce:2d:71:ed:24:36:48:2d:80:2c:73:46:72:7f:
                    64:78:14:60:fa:59:1d:71:c7:2e:5b:5a:6d:be:5f:
                    c8:f4:08:9a:9f:4b:dc:4e:58:9b:37:74:ab:60:c5:
                    9c:a4:d2:27:68:e3:58:88:2d:ec:1b:ca:7a:90:e5:
                    50:b5:dc:62:dc:71:63:9c:78:e5:95:f1:2a:55:19:
                    df:d5:fe:ae:1f:89:1b:61:f5:9e:4e:d5:46:4f:6a:
                    0f:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3C:CE:08:30:BB:36:60:79:A0:BF:EA:D9:CB:CE:F2:29:DB:4F:E7
            X509v3 Authority Key Identifier:
                keyid:9B:6B:FA:A0:8E:CB:D2:49:F7:D9:74:6F:19:56:E2:94:4C:81:24:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/3/9B6BFAA08ECBD249F7D9746F1956E2944C812494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/3/32332e3133382e3233322e302f32342d3234203d3e20393435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.138.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:fa:a3:d8:be:64:9c:c8:a8:02:79:27:f9:f6:be:46:aa:fd:
         b4:bb:24:f4:e3:03:a9:b5:7c:0a:da:83:77:51:dc:9c:08:01:
         eb:e6:64:60:c7:07:d0:fc:40:82:cb:d8:01:27:7d:5e:6e:d3:
         d0:a2:5c:c8:92:dc:e1:b0:5a:c9:f9:f8:f4:f4:86:15:e7:c9:
         d4:e6:17:69:9a:dd:a5:73:56:72:00:94:de:6c:f0:9a:40:c9:
         94:c9:81:42:45:52:bd:b9:f1:41:41:eb:c9:1c:b4:2c:66:dc:
         99:6c:ba:f3:48:4b:3d:a8:75:9e:c6:d3:61:94:3c:a4:7b:ad:
         5a:67:86:9d:da:83:ef:97:33:fd:59:16:83:00:44:9d:9f:4a:
         97:10:cf:d6:bc:3a:f3:fd:5e:07:5d:df:db:69:a3:b7:92:a1:
         f0:ae:1e:6e:23:69:be:2a:46:d5:72:91:27:fa:25:e0:45:d9:
         2d:09:a0:5a:90:26:5f:b4:c0:88:fd:30:60:de:70:e4:2e:0d:
         a1:c6:e4:37:b6:c4:4b:90:a7:fa:ea:10:ea:fa:22:74:26:ef:
         4c:94:c6:e8:e8:d1:d5:a6:05:92:09:c1:6a:ef:6c:e9:c4:2b:
         4c:d1:cc:dc:7f:65:7c:c3:de:3a:57:fe:e9:4f:07:1a:2f:84:
         9f:20:69:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 13:37:44 2024 by rpki-client on console-ams.rpki-client.org