![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/CzeWKXvBWBqlN5dIYf7KrkIZHeI.roa
File: CzeWKXvBWBqlN5dIYf7KrkIZHeI.roa (raw, json)
Hash identifier: DrxlhEN7WqJjSuby1mzI5KIurfPiaGTQpHRSAsXkbGk=
Subject key identifier: 0B:37:96:29:7B:C1:58:1A:A5:37:97:48:61:FE:CA:AE:42:19:1D:E2
Certificate issuer: /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial: 12
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/CzeWKXvBWBqlN5dIYf7KrkIZHeI.roa
Signing time: Wed 18 Aug 2021 07:54:18 +0000
ROA not before: Wed 18 Aug 2021 07:54:18 +0000
ROA not after: Mon 15 Aug 2022 01:30:03 +0000
asID: 24295
IP address blocks: 122.200.32.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 18 (0x12)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Validity
Not Before: Aug 18 07:54:18 2021 GMT
Not After : Aug 15 01:30:03 2022 GMT
Subject: CN=0B3796297BC1581AA537974861FECAAE42191DE2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:0d:ce:29:9c:32:c5:6b:be:5d:84:40:e9:10:
40:1f:ce:76:3c:75:74:8c:41:96:9e:09:5d:fd:89:
b0:fb:50:41:ff:6b:a2:06:77:bc:6a:cc:3f:ef:da:
fd:f4:fb:06:c5:31:98:4f:ad:fd:4d:21:99:00:07:
1e:55:7d:71:98:17:1a:17:11:75:d6:97:af:1d:a5:
32:a8:8b:33:74:04:71:a9:b7:7e:28:67:7a:c8:24:
a7:28:d8:31:81:1e:c9:2b:b3:b0:ec:ef:29:4a:d0:
c8:a7:54:aa:53:0d:53:cf:ce:f2:62:57:44:14:79:
d3:98:9b:1e:f2:a0:1c:12:12:f4:e8:9c:35:78:83:
61:bc:12:30:80:a9:39:6d:ec:2d:52:47:13:7b:6e:
28:50:ae:02:87:85:c0:fa:d9:ff:31:87:27:0e:d7:
56:e3:9e:3d:f5:27:a5:b3:b6:f3:bf:d7:b4:2f:75:
01:69:c3:88:93:a9:a9:64:f8:bf:f0:7b:22:0e:01:
bc:0e:81:c2:d0:78:21:5d:35:60:f4:a1:68:dc:0d:
1a:58:af:02:ab:d0:f4:e2:b5:e5:ed:da:3f:34:0c:
9e:f4:20:df:b9:10:da:80:4a:e7:dd:71:af:46:18:
93:88:1a:05:68:68:f1:6c:8b:02:4e:ce:74:12:45:
df:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:37:96:29:7B:C1:58:1A:A5:37:97:48:61:FE:CA:AE:42:19:1D:E2
X509v3 Authority Key Identifier:
keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/CzeWKXvBWBqlN5dIYf7KrkIZHeI.roa
sbgp-ipAddrBlock: critical
IPv4:
122.200.32.0/22
Signature Algorithm: sha256WithRSAEncryption
33:6e:05:a0:7f:9b:84:93:26:ab:48:2a:6c:9c:1b:08:3f:36:
41:d6:9c:2b:e4:6e:4a:47:50:00:e5:8d:22:ec:f8:16:06:68:
54:7a:05:52:75:2e:38:2a:a7:e7:a7:2e:ce:b1:f8:4a:6a:d0:
6c:07:de:b3:69:5a:75:7d:5f:38:54:cc:47:c0:b6:f8:47:60:
c0:89:83:43:45:48:1e:8c:ef:ae:c0:8a:d3:b2:07:13:81:76:
8e:48:60:80:6f:05:b3:31:90:5c:ac:06:fd:59:fa:2d:da:9f:
96:4c:c3:21:12:2d:26:d4:09:25:07:58:88:c9:14:f8:f6:de:
eb:ad:3f:25:1c:61:72:dc:71:04:fd:06:c9:4e:12:51:46:18:
20:dd:9b:39:e4:45:58:d6:fc:40:9e:3c:11:9e:5a:8d:ae:51:
9c:19:73:37:24:d6:f9:50:d3:65:19:8d:04:13:27:0e:f2:36:
f3:55:a1:a1:36:0d:53:ac:41:d5:61:79:5f:df:71:1e:ea:a7:
07:e3:22:15:e7:60:de:5a:10:68:39:97:1a:8b:c6:8d:51:96:
8e:34:3f:8b:7e:5c:be:9a:89:42:38:ca:eb:e9:90:0a:cd:fa:
a0:54:35:ab:6b:21:73:22:55:e1:99:fe:e0:42:b1:87:e3:47:
b2:cd:21:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:18 2025 by rpki-client