Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/fiflPg80kRZqdVJswtti5BGAfDA.roa
File: fiflPg80kRZqdVJswtti5BGAfDA.roa (raw, json)
Hash identifier: TnS56Wcs2b1IPzl/nvJBItnurH+/atevpMk2QUO6oPg=
Subject key identifier: 7E:27:E5:3E:0F:34:91:16:6A:75:52:6C:C2:DB:62:E4:11:80:7C:30
Certificate issuer: /CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
Certificate serial: 28
Authority key identifier: E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/fiflPg80kRZqdVJswtti5BGAfDA.roa
Signing time: Sat 01 Jan 2022 01:31:12 +0000
ROA not before: Sat 01 Jan 2022 01:31:12 +0000
ROA not after: Thu 15 Dec 2022 01:30:02 +0000
asID: 9371
IP address blocks: 160.27.0.0/16 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 40 (0x28)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=E2A0B0049F1A3D123DCACA5CEB5B4E5E9EC794D7
Validity
Not Before: Jan 1 01:31:12 2022 GMT
Not After : Dec 15 01:30:02 2022 GMT
Subject: CN=7E27E53E0F3491166A75526CC2DB62E411807C30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:95:9a:f5:4d:5f:7a:64:f1:61:05:a5:ed:16:
77:49:b6:12:b0:06:59:4a:ff:cd:c1:7a:0c:a8:4b:
4c:1e:ee:b1:95:91:64:0b:cd:30:00:ae:9c:3a:7d:
5b:84:c3:d9:56:75:42:12:b3:42:24:c5:9e:7e:64:
99:21:fd:b4:0c:6e:ee:6d:2b:11:70:be:c5:8d:2a:
93:5f:3a:67:c6:49:f6:25:ca:14:db:3a:a2:7d:f5:
9c:eb:ad:7b:82:f4:35:23:fc:77:7b:d9:ca:fa:48:
15:84:f7:bb:f3:03:ff:3d:c7:e7:6d:f8:aa:b6:f7:
b0:43:73:b0:f4:44:11:c1:30:68:8d:05:66:c6:8f:
83:52:d7:bc:70:a5:8a:4a:d6:90:6a:19:9e:7a:02:
7e:a0:35:c7:8d:ca:00:d0:47:7b:43:19:dd:54:c0:
5c:b9:7d:99:61:27:40:11:d0:af:9b:c5:c0:a3:4d:
e7:e2:a1:bc:8e:1e:e7:99:cf:5d:e3:b2:1a:db:88:
73:eb:cc:b9:30:e3:4e:b7:da:ef:23:7b:0f:d7:70:
e7:a5:13:ab:8d:f5:d5:55:4d:0b:42:c2:a1:a1:a1:
90:ae:4d:e6:bb:c8:87:4e:d1:02:93:c8:cd:95:e5:
a4:b1:17:de:e7:16:bd:1b:73:2e:10:19:30:bf:61:
ee:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:27:E5:3E:0F:34:91:16:6A:75:52:6C:C2:DB:62:E4:11:80:7C:30
X509v3 Authority Key Identifier:
keyid:E2:A0:B0:04:9F:1A:3D:12:3D:CA:CA:5C:EB:5B:4E:5E:9E:C7:94:D7
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/4qCwBJ8aPRI9yspc61tOXp7HlNc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4qCwBJ8aPRI9yspc61tOXp7HlNc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/fiflPg80kRZqdVJswtti5BGAfDA.roa
sbgp-ipAddrBlock: critical
IPv4:
160.27.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b9:b9:27:e1:bc:2d:c6:0b:30:24:63:bd:24:55:63:e9:e1:16:
f1:3b:3d:8a:58:cd:83:b1:52:f4:18:88:ff:09:b9:9d:f9:a3:
bd:e4:c0:54:26:89:1b:00:c6:91:c4:1f:11:94:ec:41:38:0d:
3a:3f:c7:fc:3b:11:06:e3:3a:7b:33:dc:70:62:bf:2a:1b:ec:
f2:1e:2c:e9:d4:65:6d:b6:54:fa:8f:9a:43:6b:af:86:7f:ca:
75:d8:09:7f:dc:00:1a:27:74:c3:86:af:5b:0b:a3:3e:27:d7:
ef:b2:0d:20:02:63:a8:9f:6b:01:62:78:fa:07:48:20:01:ee:
03:7f:6f:66:ff:8b:66:23:a0:a3:73:bd:fd:4a:94:39:d1:6b:
60:41:44:52:fb:89:7e:60:d8:e3:40:a9:b4:a9:c1:01:4a:2d:
3b:82:2b:af:0e:60:2b:ec:24:bc:9f:99:7f:f7:ec:e2:90:eb:
fa:ee:2e:8e:00:82:53:fd:73:8a:0e:5b:c0:14:a8:07:11:f9:
e1:bb:ba:d3:ab:ee:a9:04:99:b1:db:05:bb:52:53:98:32:31:
2b:fa:9c:1f:1d:bc:3b:f1:e7:15:d8:dd:d7:32:e5:b7:51:61:
fb:e0:32:d8:da:d1:33:4a:83:d7:2f:10:a9:6d:56:ae:3a:68:
47:e4:75:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:48 2025 by rpki-client