Route Origin Authorization
$ rpki-client -vvf oto.wakuwaku.ne.jp/pki/sky/0/326131343a333030303a3a2f32392d3438203d3e20323136313338.roa
File: 326131343a333030303a3a2f32392d3438203d3e20323136313338.roa (raw, json)
Hash identifier: IV+nzBjIZakizMpE9kOYfqHXeVdDqRqQsrK5jkeEidE=
Subject key identifier: DC:ED:DE:D1:00:7A:E9:17:B4:4F:07:28:35:DE:14:A8:24:C1:42:4F
Certificate issuer: /CN=3c5e8714bceceecfabc6860f9374d524d17d7aca
Certificate serial: 64734842271B43F06374BF8D41E57483EBF13F6E
Authority key identifier: 3C:5E:87:14:BC:EC:EE:CF:AB:C6:86:0F:93:74:D5:24:D1:7D:7A:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PF6HFLzs7s-rxoYPk3TVJNF9eso.cer
Subject info access: rsync://oto.wakuwaku.ne.jp/pki/sky/0/326131343a333030303a3a2f32392d3438203d3e20323136313338.roa
Signing time: Mon 25 Nov 2024 21:32:13 +0000
ROA not before: Mon 25 Nov 2024 21:27:13 +0000
ROA not after: Mon 24 Nov 2025 21:32:13 +0000
asID: 216138
IP address blocks: 2a14:3000::/29 maxlen: 48
Validation: OK
Signature path: rsync://oto.wakuwaku.ne.jp/pki/sky/0/3C5E8714BCECEECFABC6860F9374D524D17D7ACA.crl
rsync://oto.wakuwaku.ne.jp/pki/sky/0/3C5E8714BCECEECFABC6860F9374D524D17D7ACA.mft
rsync://rpki.ripe.net/repository/DEFAULT/PF6HFLzs7s-rxoYPk3TVJNF9eso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 17:28:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
64:73:48:42:27:1b:43:f0:63:74:bf:8d:41:e5:74:83:eb:f1:3f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c5e8714bceceecfabc6860f9374d524d17d7aca
Validity
Not Before: Nov 25 21:27:13 2024 GMT
Not After : Nov 24 21:32:13 2025 GMT
Subject: CN=DCEDDED1007AE917B44F072835DE14A824C1424F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:60:37:f7:57:fc:ea:43:17:16:0d:ae:21:3b:
28:f8:d1:ca:92:4f:77:78:9a:89:5f:8d:8e:2c:01:
e9:4e:ad:4a:b8:5f:bd:30:eb:a0:1d:5c:b1:b4:25:
9a:48:23:71:cf:d8:79:50:ea:2b:00:91:76:b8:a1:
3d:38:90:96:1e:59:9d:44:9f:0a:e1:01:4f:13:00:
63:56:28:cb:82:58:e7:7b:a7:44:52:64:f0:8c:9c:
81:55:53:e6:5f:ee:4b:91:bf:ef:60:4d:eb:10:8a:
ba:b6:1f:8c:cb:d1:46:9a:13:7f:e5:50:36:ad:f6:
42:b0:ad:7f:7c:65:f0:09:e6:00:bc:70:ef:44:2a:
92:5e:38:f6:40:62:60:05:71:94:e1:b0:71:13:c7:
8b:b5:39:44:d0:e4:ce:3d:90:6d:71:06:46:92:06:
8e:0c:36:c8:87:a5:eb:84:b0:ae:05:fb:43:e3:80:
95:da:38:24:69:13:88:d5:03:4d:40:0c:ed:90:8c:
51:5a:06:8e:2e:30:fb:0b:a1:e7:65:96:80:b3:3c:
26:ed:fa:16:27:d3:bb:7c:23:be:8a:40:2f:20:4c:
7a:13:34:27:63:dc:1a:71:4b:27:51:eb:8d:32:59:
64:2a:f5:69:fa:72:08:6f:b3:64:df:4b:55:61:eb:
d8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:ED:DE:D1:00:7A:E9:17:B4:4F:07:28:35:DE:14:A8:24:C1:42:4F
X509v3 Authority Key Identifier:
keyid:3C:5E:87:14:BC:EC:EE:CF:AB:C6:86:0F:93:74:D5:24:D1:7D:7A:CA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://oto.wakuwaku.ne.jp/pki/sky/0/3C5E8714BCECEECFABC6860F9374D524D17D7ACA.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PF6HFLzs7s-rxoYPk3TVJNF9eso.cer
Subject Information Access:
Signed Object - URI:rsync://oto.wakuwaku.ne.jp/pki/sky/0/326131343a333030303a3a2f32392d3438203d3e20323136313338.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:3000::/29
Signature Algorithm: sha256WithRSAEncryption
19:ee:58:00:a0:a2:ad:a8:e5:c9:0e:ae:72:d6:17:5b:02:8e:
8e:6c:d7:f2:6c:b9:a5:28:80:8c:fa:fe:3c:18:e6:b9:46:47:
cb:08:35:1d:71:56:d7:e8:3c:2b:e8:2b:13:b9:c2:5d:db:35:
fd:45:5a:33:22:94:7d:b0:fe:ae:cf:70:4f:26:48:5b:4d:4f:
43:91:a9:91:bc:dd:16:77:b9:a1:9b:47:dc:ea:a0:ab:87:9a:
dc:b0:4f:e5:d9:cc:98:00:46:1c:ab:a6:b1:32:26:5e:a9:33:
88:b1:8f:67:72:d6:37:16:70:4b:30:43:0a:43:84:c1:6e:77:
8f:47:26:f7:c4:06:bc:db:68:5b:40:9e:65:d0:77:64:d6:ed:
de:d4:9e:44:3a:93:9c:55:e3:cc:67:d3:c5:c5:55:92:97:d6:
bf:3d:82:0d:74:a7:70:45:28:1b:8a:f4:d2:62:77:7b:88:10:
87:4d:52:05:4a:94:9f:0c:56:f5:c3:cc:35:12:a2:fb:f6:25:
14:25:94:7d:0f:80:dd:5d:93:44:fc:8e:49:10:17:15:3b:89:
50:29:f5:49:a1:1f:51:cf:04:9a:c0:a2:e2:e6:ca:09:c4:05:
f7:14:c6:17:52:b5:6c:bb:45:9b:13:29:cb:9f:53:73:fc:f4:
a2:cc:11:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:54 2025 by rpki-client