![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1949/GZyTbW9FpOUaxM7165zXZ7O-KAE.roa
File: GZyTbW9FpOUaxM7165zXZ7O-KAE.roa (raw, json)
Hash identifier: 5mo7/QFX3VzkGpC6p82rEExshtFdrWwdXgQ1FudA//8=
Subject key identifier: 19:9C:93:6D:6F:45:A4:E5:1A:C4:CE:F5:EB:9C:D7:67:B3:BE:28:01
Certificate issuer: /CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
Certificate serial: 33
Authority key identifier: DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/GZyTbW9FpOUaxM7165zXZ7O-KAE.roa
Signing time: Thu 13 Apr 2023 09:54:13 +0000
ROA not before: Thu 13 Apr 2023 09:54:13 +0000
ROA not after: Thu 14 Mar 2024 01:30:02 +0000
asID: 2504
IP address blocks: 192.50.24.0/23 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DF98C5899E61FB775E1B767EB169536D57A07BAC
Validity
Not Before: Apr 13 09:54:13 2023 GMT
Not After : Mar 14 01:30:02 2024 GMT
Subject: CN=199C936D6F45A4E51AC4CEF5EB9CD767B3BE2801
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:9e:60:18:01:e2:39:35:83:99:44:93:24:3f:
ad:63:e6:e1:55:e8:a8:2d:56:98:d6:65:a7:ae:de:
89:9f:38:4e:4d:27:32:0e:b8:87:2c:eb:91:bd:b1:
4a:b6:f7:3e:94:f1:ef:c8:71:2d:64:5f:92:ae:0d:
87:58:60:04:87:02:5b:15:cb:bb:4d:71:ad:83:33:
51:09:3c:f8:58:07:b3:4b:bd:7a:a6:94:19:e9:18:
c2:17:69:78:ab:9a:aa:50:61:fc:67:6a:c0:fb:ef:
8a:c0:6c:48:43:95:1e:a7:38:2d:ad:f0:5a:f3:9b:
94:8d:90:2d:20:9a:36:3b:fd:9e:2d:4b:32:72:8e:
cb:de:35:5d:60:f6:48:9c:a9:2d:fd:77:25:8f:ea:
6a:05:cd:fc:83:99:43:39:8d:40:68:09:ff:1c:7a:
41:8c:a5:6c:98:47:a5:8b:e2:51:ab:9c:37:76:6c:
34:29:eb:15:f9:4a:b2:7c:83:a9:24:c2:12:0a:80:
53:b3:f4:50:eb:91:05:51:6f:75:42:59:c9:31:56:
41:2a:89:9a:bb:80:68:5f:0d:13:de:60:91:25:88:
b3:bb:9a:b6:5d:95:21:9c:1d:ab:4e:0d:80:17:83:
a2:b9:f5:6e:fb:6f:1e:02:57:74:ad:de:0f:55:2c:
df:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:9C:93:6D:6F:45:A4:E5:1A:C4:CE:F5:EB:9C:D7:67:B3:BE:28:01
X509v3 Authority Key Identifier:
keyid:DF:98:C5:89:9E:61:FB:77:5E:1B:76:7E:B1:69:53:6D:57:A0:7B:AC
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/35jFiZ5h-3deG3Z-sWlTbVege6w.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/35jFiZ5h-3deG3Z-sWlTbVege6w.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1949/GZyTbW9FpOUaxM7165zXZ7O-KAE.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
192.50.24.0/23
Signature Algorithm: sha256WithRSAEncryption
b0:0d:4c:33:65:3d:13:b8:3b:09:50:04:d3:3a:55:89:5a:f6:
56:94:39:08:d1:3f:0b:cd:54:50:8c:4b:76:52:6c:c8:ac:91:
ea:3a:6f:fc:8d:51:67:a8:48:f3:6c:90:70:91:c9:65:70:be:
0a:49:67:af:dc:d0:3d:35:66:72:b0:06:34:b6:3d:df:cc:99:
f5:12:a0:bc:2b:69:35:a4:3b:c8:7a:34:fc:87:d7:51:3d:54:
bc:ec:96:15:bd:97:55:10:fa:58:32:8b:29:29:ba:03:13:58:
86:c0:0e:7c:39:f6:1f:e3:52:61:d1:8c:3b:73:1e:a3:3d:89:
c1:85:d7:e5:08:1f:83:0c:83:fa:92:f4:96:4e:15:98:9a:f1:
a4:b3:2d:2a:ab:7f:19:b8:20:0a:a9:74:67:05:c8:f5:a2:c4:
07:6c:f1:32:18:87:cb:e1:d0:59:ec:c1:20:14:41:34:05:87:
5a:8c:8f:5c:18:48:a8:45:e6:73:55:3f:bb:14:73:e4:c6:8c:
54:ce:8d:84:0d:4f:19:3b:5c:43:56:14:97:df:a8:48:9b:7b:
df:29:38:11:c7:60:2e:1c:87:f2:95:af:ba:0c:13:1e:34:a7:
c5:09:65:b0:87:09:81:d3:be:51:e2:47:78:82:9f:2e:09:31:
46:b2:e3:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:05:05 2025 by rpki-client