Route Origin Authorization

$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/ha/3/323630323a3233343a3a2f33322d3438203d3e2031303132.roa
File:                     323630323a3233343a3a2f33322d3438203d3e2031303132.roa (raw, json)
Hash identifier:          mz4Xoc7jj8cMOOKGWIqU6G2LLWRDddbCFyawLiCE8ks=
Subject key identifier:   67:F4:1C:CF:2C:75:88:AF:FF:50:BB:E3:FC:15:C5:C7:76:46:F7:0A
Certificate issuer:       /CN=7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500
Certificate serial:       09D5C496FC16EC077869A4140139BC87CDEA300A
Authority key identifier: 9B:6B:FA:A0:8E:CB:D2:49:F7:D9:74:6F:19:56:E2:94:4C:81:24:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer
Subject info access:      rsync://oto.wakuwaku.ne.jp/pki/ha/3/323630323a3233343a3a2f33322d3438203d3e2031303132.roa
Signing time:             Tue 22 Oct 2024 22:41:06 +0000
ROA not before:           Tue 22 Oct 2024 22:36:06 +0000
ROA not after:            Tue 21 Oct 2025 22:41:06 +0000
asID:                     1012
IP address blocks:        2602:234::/32 maxlen: 48

Validation:               OK
Signature path:           rsync://oto.wakuwaku.ne.jp/pki/ha/3/9B6BFAA08ECBD249F7D9746F1956E2944C812494.crl
                          rsync://oto.wakuwaku.ne.jp/pki/ha/3/9B6BFAA08ECBD249F7D9746F1956E2944C812494.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/d2104327-08ab-4cfc-81ef-76caf90ecd70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Oct 2024 03:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d5:c4:96:fc:16:ec:07:78:69:a4:14:01:39:bc:87:cd:ea:30:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500
        Validity
            Not Before: Oct 22 22:36:06 2024 GMT
            Not After : Oct 21 22:41:06 2025 GMT
        Subject: CN=67F41CCF2C7588AFFF50BBE3FC15C5C77646F70A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bc:2e:65:c7:26:e4:21:57:41:81:75:31:b6:
                    87:1e:3a:a9:eb:12:6f:46:7a:61:16:d6:c4:06:ed:
                    87:57:b3:e3:9b:41:b4:25:37:e4:fd:1f:62:a3:c8:
                    b3:18:00:54:66:7e:08:6b:95:fc:bd:5b:d1:26:22:
                    59:46:bb:47:19:91:bc:a5:51:d3:3f:8a:75:ff:f8:
                    2d:3c:53:c4:0b:4b:e6:2e:e2:51:f4:c9:e8:c7:68:
                    ab:2e:b2:92:45:2b:7c:10:a6:c1:b7:0e:55:78:8d:
                    63:f0:35:a2:e2:36:49:60:79:48:b2:72:ea:1a:2f:
                    a2:ad:94:6a:af:59:27:b4:6d:8b:87:13:cf:0c:ee:
                    01:e2:07:80:c2:ca:91:41:18:b3:1d:00:a1:5d:b1:
                    4d:8d:ed:62:86:bf:fd:92:d8:e0:85:d3:eb:bc:29:
                    76:56:9b:ac:4a:78:2a:31:92:d2:e4:ae:73:65:d5:
                    0e:0f:3d:de:97:80:8b:25:b5:75:a7:36:d2:01:96:
                    d3:98:a7:b0:75:59:72:17:75:3a:c7:e8:ac:52:e7:
                    2e:6b:01:6b:42:25:0e:b6:53:d5:72:5b:25:22:2d:
                    7d:46:d8:ce:e1:26:89:9e:08:49:08:17:0e:75:cc:
                    1f:e6:10:89:70:e7:7d:ee:8e:ca:84:f2:e8:fc:d5:
                    43:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F4:1C:CF:2C:75:88:AF:FF:50:BB:E3:FC:15:C5:C7:76:46:F7:0A
            X509v3 Authority Key Identifier:
                keyid:9B:6B:FA:A0:8E:CB:D2:49:F7:D9:74:6F:19:56:E2:94:4C:81:24:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://oto.wakuwaku.ne.jp/pki/ha/3/9B6BFAA08ECBD249F7D9746F1956E2944C812494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2104327-08ab-4cfc-81ef-76caf90ecd70/7e6381cf350b65b2b7c5b09a2df18f924f9315cd5a5a4e4500.cer

            Subject Information Access:
                Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/ha/3/323630323a3233343a3a2f33322d3438203d3e2031303132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2602:234::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:98:bb:4f:7d:5c:aa:5f:26:9d:27:01:0f:2d:3a:45:19:db:
         38:6c:90:7e:a6:39:00:bc:08:a4:c8:92:7c:ad:53:d0:fc:84:
         71:db:40:18:f0:a3:fc:87:3b:ac:1c:bb:5d:08:7c:d6:68:3e:
         70:49:fe:68:9c:3d:03:d9:66:72:14:9d:ca:51:11:79:cf:39:
         b5:15:26:68:86:9a:6d:ae:6d:d3:a6:5f:4a:fd:e2:1a:69:89:
         28:07:2d:c0:84:ac:c1:d5:f6:57:18:58:57:06:fe:d5:ac:5c:
         b4:4c:dd:50:53:8d:c4:cb:57:f5:99:07:7e:99:8a:fd:27:77:
         e3:a0:07:d4:ff:30:ea:a3:cf:47:36:04:92:53:38:5e:10:50:
         a3:40:7f:b0:1a:4c:55:15:ef:17:a9:3b:5f:29:a8:27:3e:2f:
         d1:40:b0:00:3e:92:6b:c2:69:7a:c7:62:76:14:52:4d:b0:8b:
         48:3e:4a:a8:fc:4e:67:fe:6b:a5:05:a6:94:80:c2:f4:37:ff:
         a5:be:e6:3b:b1:60:45:17:e6:43:b7:33:be:9a:bf:5e:d5:48:
         57:99:c2:53:63:9c:6c:b3:53:02:33:f1:ef:23:44:4d:d1:36:
         69:72:7f:ea:9a:1c:88:5e:1d:92:61:85:3a:b4:23:3c:9c:4e:
         ae:78:e1:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 23 02:11:03 2024 by rpki-client on console-ams.rpki-client.org