![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/m3aoUAp8zt40iFUEfiHm3u9-x1g.roa
File: m3aoUAp8zt40iFUEfiHm3u9-x1g.roa (raw, json)
Hash identifier: 8MmwK+sDQNn7yWPFUCWamyA51x2QglAHTzbxaNkRDYM=
Subject key identifier: 9B:76:A8:50:0A:7C:CE:DE:34:88:55:04:7E:21:E6:DE:EF:7E:C7:58
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: 7D
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/m3aoUAp8zt40iFUEfiHm3u9-x1g.roa
Signing time: Tue 18 Oct 2022 02:20:19 +0000
ROA not before: Tue 18 Oct 2022 02:20:19 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 2516
IP address blocks: 211.10.160.0/23 maxlen: 23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 125 (0x7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Oct 18 02:20:19 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=9B76A8500A7CCEDE348855047E21E6DEEF7EC758
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:ed:1a:16:5e:66:0f:34:e4:f7:08:35:e9:
5d:e2:a1:f8:18:c0:a8:76:ab:7a:57:f5:a9:7d:02:
5f:db:29:bc:ee:3e:ec:cd:97:41:44:5b:e9:c8:63:
5f:b1:0f:40:bf:ba:14:ca:8e:21:30:44:76:92:6b:
2b:d1:1b:5d:8e:96:6b:82:41:fc:5a:4f:a4:da:a1:
dc:f6:0a:75:db:73:95:1c:1f:96:14:6c:ce:bd:e8:
fd:5f:ec:9f:b0:b9:b5:48:1f:e4:80:fb:4a:34:c6:
79:69:62:6a:09:f4:e3:b1:14:ec:4f:0f:4d:ad:f1:
43:81:93:f2:e3:31:f3:17:d5:6c:2f:c9:b5:22:ce:
3b:73:39:c9:f5:48:b6:97:dc:d1:b4:32:f1:eb:79:
cb:2b:3a:5b:23:60:fe:8a:98:5e:37:a3:da:64:c5:
1b:cd:27:39:69:23:67:fe:01:44:cf:db:41:5c:f8:
23:9d:72:42:c3:78:8e:09:b2:49:7f:66:55:d9:7a:
75:f2:36:86:68:dd:74:e9:74:e0:42:7c:eb:2d:b3:
28:43:b5:5f:6f:0a:07:92:cd:6f:90:7d:79:9f:69:
12:8b:7a:83:87:6e:79:1f:d4:0f:ca:1e:aa:e8:eb:
97:8f:f2:cb:65:08:58:87:80:6c:b9:07:4c:ea:62:
e9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:76:A8:50:0A:7C:CE:DE:34:88:55:04:7E:21:E6:DE:EF:7E:C7:58
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/m3aoUAp8zt40iFUEfiHm3u9-x1g.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
211.10.160.0/23
Signature Algorithm: sha256WithRSAEncryption
98:13:52:48:4d:98:4a:0d:dc:31:16:04:f5:48:aa:0f:f1:4f:
e4:5d:73:b7:7b:ec:05:62:3a:a9:60:7c:4f:a8:ce:2d:ba:1c:
08:ed:c1:1b:bb:cd:68:95:08:8c:ac:3d:18:bf:4f:ac:d7:a3:
39:a6:a7:84:69:2c:42:c2:75:de:de:66:fe:8d:b1:88:3d:9b:
94:c1:c0:8a:9e:a0:18:e0:2a:bf:12:09:91:b7:80:c5:85:cf:
16:56:70:4c:48:73:09:32:e7:7e:8f:b4:17:b5:c2:3a:e3:9f:
77:f3:86:e4:3b:27:ef:30:3f:b2:3c:ee:99:03:24:29:61:b0:
d8:9e:7f:cf:0e:0a:d5:38:d1:cd:dc:55:40:a9:29:98:05:f4:
0e:79:bb:50:01:58:e7:3a:d5:cc:db:a8:8d:c3:36:28:ea:3e:
91:76:42:4b:f3:26:29:c0:53:9e:bb:e5:45:1c:39:03:c6:3b:
b0:de:26:80:9e:60:34:cf:95:11:cf:b8:e3:11:4c:d7:8e:4b:
10:40:fe:74:e3:8d:11:33:49:2e:98:1e:1e:77:57:61:1b:ee:
9c:df:df:71:df:00:1c:e5:68:2f:f4:82:7c:a5:b4:53:05:c7:
2b:46:0c:30:42:6d:c3:06:0d:b0:a4:8e:1d:56:80:f6:20:4b:
0f:01:49:59
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:25 2025 by rpki-client