![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/QSoz5Rx02x_vzqqOPymubFkPHpI.roa
File: QSoz5Rx02x_vzqqOPymubFkPHpI.roa (raw, json)
Hash identifier: LemdJzkU9tq8QS+txSA9sFOKvNd6hgKmEq3hzzdXLEc=
Subject key identifier: 41:2A:33:E5:1C:74:DB:1F:EF:CE:AA:8E:3F:29:AE:6C:59:0F:1E:92
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: DB
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/QSoz5Rx02x_vzqqOPymubFkPHpI.roa
Signing time: Fri 01 Sep 2023 01:30:56 +0000
ROA not before: Fri 01 Sep 2023 01:30:56 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2516
IP address blocks: 202.161.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 219 (0xdb)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Sep 1 01:30:56 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=412A33E51C74DB1FEFCEAA8E3F29AE6C590F1E92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:de:82:24:87:0c:63:6f:cf:a3:18:97:27:
52:87:8b:25:45:fc:37:76:e9:bb:93:cd:bb:fc:27:
76:2e:c1:c1:ce:fc:bd:51:07:9f:74:a2:9a:9c:bd:
4b:66:48:73:4d:b9:15:a5:18:64:89:30:96:9e:6a:
ce:5c:fd:a6:8a:30:6d:1f:f6:0b:45:2a:11:2d:00:
3b:64:44:fa:02:18:d7:cc:96:a3:1e:6a:cb:ad:d5:
92:d7:eb:66:f9:e3:f3:45:75:16:11:7d:a2:b6:ff:
e0:e7:01:d3:31:d7:48:c8:72:58:6c:a5:16:bd:05:
5f:a7:87:68:c7:98:5b:61:99:74:54:be:df:22:ef:
cc:59:1e:63:85:2d:d9:64:d6:21:9d:66:3f:38:b4:
fa:c1:4a:e1:0f:c9:fa:3f:77:5a:ca:12:cd:d2:ca:
57:29:f6:bf:09:b0:2f:0b:87:62:90:fa:9b:15:9e:
66:1e:51:45:8d:5c:96:d6:bd:e2:78:d2:3f:ae:d2:
cb:4f:01:fc:cb:a2:46:69:9f:b0:b6:3c:87:d6:c0:
dc:99:6a:6a:b7:4c:0e:4c:9b:cc:91:ac:2e:cd:b9:
3a:b5:90:1d:3e:f3:bc:a2:82:f5:23:02:92:e3:9c:
8b:0d:cc:b4:f3:ae:90:dc:e0:a6:a8:6f:7d:14:e9:
6b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2A:33:E5:1C:74:DB:1F:EF:CE:AA:8E:3F:29:AE:6C:59:0F:1E:92
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/QSoz5Rx02x_vzqqOPymubFkPHpI.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
202.161.192.0/18
Signature Algorithm: sha256WithRSAEncryption
61:f6:df:1e:b4:ad:e0:e7:84:e5:86:b1:4a:3f:88:e1:81:a1:
e9:ac:e5:ac:c9:e0:81:e5:5b:3b:69:c8:7f:ba:34:21:ef:db:
fa:5e:b9:af:1d:d3:57:8e:cb:9d:c6:a8:ca:5e:0b:ef:49:9f:
5d:07:0f:64:37:97:c8:67:3a:84:35:5f:98:41:ba:58:e6:cd:
11:df:4d:06:90:bb:4c:bc:8b:c8:88:98:20:b2:ba:25:ae:1c:
37:24:92:96:f9:44:76:02:24:f6:90:aa:2c:f4:f8:8d:15:ef:
98:81:ae:5b:01:8c:da:5f:f7:ea:54:87:e4:17:a6:ae:74:55:
d6:91:9a:8b:11:03:a4:e1:05:db:21:7b:07:28:d3:fa:ce:99:
67:ed:a1:b9:07:e9:5e:ae:1b:3a:6f:0b:cd:d8:ea:35:aa:81:
24:4c:9e:a1:fd:28:7a:4b:ed:23:8b:0b:d4:95:b2:ff:ef:db:
fe:e9:f8:9d:f0:b4:0a:8b:74:15:58:39:7c:eb:2d:1d:9e:9c:
27:d2:dc:d1:c5:33:3a:44:7d:76:26:df:57:24:88:84:de:16:
12:01:d4:2c:cf:3b:a8:44:17:6f:72:4a:5d:30:47:a3:20:cc:
b9:5f:1b:c3:c4:96:f0:34:05:6b:d1:64:50:bf:29:1c:78:97:
28:c2:95:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:54 2025 by rpki-client