![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ms8l-i0pXsrJVfXPpPLcTki4uCg.roa
File: ms8l-i0pXsrJVfXPpPLcTki4uCg.roa (raw, json)
Hash identifier: KgSDQRdQMQDVzHzUdiWVIccGX5uyO2qfwNA88BiNwDs=
Subject key identifier: 9A:CF:25:FA:2D:29:5E:CA:C9:55:F5:CF:A4:F2:DC:4E:48:B8:B8:28
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: EE
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ms8l-i0pXsrJVfXPpPLcTki4uCg.roa
Signing time: Fri 01 Sep 2023 01:33:09 +0000
ROA not before: Fri 01 Sep 2023 01:33:09 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2516
IP address blocks: 210.235.192.0/18 maxlen: 18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 238 (0xee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Sep 1 01:33:09 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=9ACF25FA2D295ECAC955F5CFA4F2DC4E48B8B828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:18:d8:05:33:cd:86:86:1a:a9:c0:93:7a:5f:
0d:52:71:63:e8:22:0b:1f:4f:25:2e:ea:05:43:78:
4f:90:41:3b:fa:0b:8d:84:fc:c8:53:b8:1d:d3:5f:
35:41:16:f1:db:cb:b2:d7:96:98:8c:21:0c:ee:fa:
c1:e9:eb:59:33:64:94:4b:de:ff:9a:13:0f:e5:33:
32:86:37:dd:97:16:d1:5c:a2:da:d1:f7:30:03:52:
67:57:f3:15:20:8d:4a:f7:e9:c7:20:44:b5:fd:6f:
2d:d0:34:30:4e:cf:5b:cb:7e:84:8c:88:0e:2d:16:
86:e2:ea:ab:e6:38:3d:4f:f2:08:4e:df:83:68:e3:
2f:89:47:bf:e2:7b:07:13:b3:74:79:da:57:b4:13:
80:ab:6e:07:a1:c6:d7:c6:eb:11:11:d7:2a:dc:48:
2e:55:26:f0:cd:92:5d:7b:c6:93:4e:1f:02:a5:9b:
60:66:ca:3a:f9:20:fb:21:fa:f5:5e:e3:ce:13:26:
a1:e2:ac:ab:4b:a1:17:95:a1:a3:4c:e8:1c:80:68:
c9:bc:25:93:bf:b3:0c:d8:b9:35:9c:b4:76:52:9b:
ad:75:2c:5f:44:70:c1:3f:22:70:c2:93:d1:af:58:
6d:f0:c3:1b:b7:64:fe:dd:59:31:94:19:ba:eb:37:
6d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CF:25:FA:2D:29:5E:CA:C9:55:F5:CF:A4:F2:DC:4E:48:B8:B8:28
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/ms8l-i0pXsrJVfXPpPLcTki4uCg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.235.192.0/18
Signature Algorithm: sha256WithRSAEncryption
27:46:da:b0:f9:4d:f3:87:01:5a:72:56:6f:82:a7:18:2e:ff:
e9:a7:45:c8:41:c4:8a:bd:3a:16:49:a2:31:4b:f5:86:cc:4b:
de:cc:ea:8f:8d:77:ef:89:20:e5:83:e0:4a:35:ce:c6:f5:ee:
97:30:86:ad:a3:22:08:8c:31:ba:64:23:c2:81:5e:2d:d8:e0:
8c:86:f0:8b:7c:61:70:fb:de:2f:74:6b:0c:37:92:dc:34:a8:
94:b6:e4:60:4e:3d:ce:8c:59:80:cf:be:f2:ab:0a:36:fe:96:
20:ec:8c:60:4d:2a:cb:66:63:8a:0f:ac:98:cf:3d:5f:f3:c2:
e2:94:b2:49:36:9c:69:cd:c2:80:14:74:35:51:eb:c0:b6:6d:
18:06:50:0d:52:45:a3:75:5f:b6:a2:c0:6b:e9:23:2b:e7:55:
1f:7f:7d:57:db:e5:27:28:14:d5:c6:0c:0d:da:95:ab:77:d5:
ab:4f:32:84:31:43:1a:2f:4d:f8:9d:70:fd:26:f9:bb:12:fa:
b1:12:20:0e:4a:ba:57:64:8c:3f:1c:65:68:37:ab:a9:91:58:
67:96:95:af:92:18:f5:ff:02:1d:ce:26:61:44:85:aa:af:89:
32:ce:18:36:58:e8:22:ed:5f:d6:04:83:76:9d:e4:36:66:ed:
76:fc:53:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:49 2025 by rpki-client