![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13347/r7VDX3y7xIQU0MSKm4LDphyHNu0.roa
File: r7VDX3y7xIQU0MSKm4LDphyHNu0.roa (raw, json)
Hash identifier: ev8Pv+twO0bmx8wNGdzLXtiGl7j0qqL6U1Edqy1k6AM=
Subject key identifier: AF:B5:43:5F:7C:BB:C4:84:14:D0:C4:8A:9B:82:C3:A6:1C:87:36:ED
Certificate issuer: /CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Certificate serial: EA
Authority key identifier: C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/r7VDX3y7xIQU0MSKm4LDphyHNu0.roa
Signing time: Fri 01 Sep 2023 01:33:07 +0000
ROA not before: Fri 01 Sep 2023 01:33:07 +0000
ROA not after: Wed 14 Aug 2024 01:30:02 +0000
asID: 2516
IP address blocks: 210.141.247.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 234 (0xea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C761A3A9FAE87F8F069D682471CBE1C935FBE321
Validity
Not Before: Sep 1 01:33:07 2023 GMT
Not After : Aug 14 01:30:02 2024 GMT
Subject: CN=AFB5435F7CBBC48414D0C48A9B82C3A61C8736ED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4d:a6:b5:34:9f:27:54:2a:38:1d:e6:30:b4:
49:a7:5e:58:3a:b8:cb:7f:bb:70:2e:d7:b5:57:a0:
42:75:4e:a9:ab:e4:4c:8b:1d:1f:b0:21:53:d9:a2:
33:73:f0:ce:11:0e:10:aa:1d:2b:a2:b0:a7:c5:e9:
c5:39:c5:a8:a4:0d:ec:e9:2a:99:45:56:d8:5b:a3:
d6:ad:3a:a1:46:71:34:8b:46:73:9f:ed:e6:40:db:
79:e4:29:82:06:73:47:72:61:3f:80:e9:20:51:9a:
9e:ec:1a:b2:b3:9f:a4:cf:0c:a4:d1:d9:c1:8e:46:
91:8e:1b:8b:e5:2f:bd:dc:8e:6d:93:44:76:2d:90:
ec:ef:5e:b1:0d:9b:99:45:f0:da:cf:fc:a5:47:dc:
bf:56:41:8b:a9:38:cd:97:6f:bb:d1:db:32:d2:52:
54:bf:57:86:81:85:a4:a5:86:c9:37:e2:55:59:28:
de:d7:98:a8:40:7a:61:5e:d7:d6:17:bc:fb:12:7a:
cd:19:3d:6e:45:52:33:62:54:86:2a:06:0e:69:ae:
27:98:8a:71:46:6f:3b:86:99:ba:d7:d5:2f:b2:5c:
09:27:dd:cc:2d:1a:2e:a1:3d:a4:d8:2b:0f:ce:78:
e8:76:9b:35:3a:47:a1:65:5e:43:49:09:0a:dc:1e:
37:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:B5:43:5F:7C:BB:C4:84:14:D0:C4:8A:9B:82:C3:A6:1C:87:36:ED
X509v3 Authority Key Identifier:
keyid:C7:61:A3:A9:FA:E8:7F:8F:06:9D:68:24:71:CB:E1:C9:35:FB:E3:21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/x2Gjqfrof48GnWgkccvhyTX74yE.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/x2Gjqfrof48GnWgkccvhyTX74yE.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13347/r7VDX3y7xIQU0MSKm4LDphyHNu0.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
210.141.247.0/24
Signature Algorithm: sha256WithRSAEncryption
d0:28:d5:04:18:62:59:22:93:80:72:9a:99:bb:df:7e:06:a1:
8f:52:bc:a6:43:00:74:7a:a3:c6:d2:0e:92:0e:82:8b:04:ad:
2c:d3:f4:59:a3:a1:8e:a2:ce:eb:08:5c:99:ab:84:0f:a1:2f:
f3:fa:78:cf:aa:aa:aa:f9:7f:4d:75:6c:ec:c6:d5:20:89:47:
5d:e5:ee:65:1b:3c:13:3c:99:75:70:57:7a:e3:3e:e4:9e:b4:
5a:37:27:60:62:79:25:79:5f:db:33:02:1c:df:36:70:1b:0a:
f7:ca:20:7b:8b:e4:a6:57:9b:ba:bc:12:75:1a:08:4e:53:3b:
19:ff:8a:0c:0b:b8:5a:73:fd:20:c5:34:1d:89:c7:d1:5f:b2:
31:31:1b:be:87:28:e4:e4:47:e9:22:24:6f:5b:f4:cb:d4:b4:
5c:a7:28:2c:6c:be:f6:46:31:b2:77:64:87:b1:d8:13:fc:4a:
32:f7:e8:bb:6b:cd:7a:73:c1:ed:be:a9:e5:90:8b:12:ce:80:
8d:63:e1:f7:82:28:3d:87:f7:42:ab:b6:2d:12:92:09:28:c8:
20:ee:75:d3:af:05:6b:86:90:f1:f9:18:28:21:47:9e:c6:71:
67:a5:96:a1:69:39:d6:76:f5:9e:21:ac:69:24:93:01:e5:87:
d2:e8:f8:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:57 2025 by rpki-client