![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/sLXPgP1tQlp5_fx6ikB3QG-arAw.roa
File: sLXPgP1tQlp5_fx6ikB3QG-arAw.roa (raw, json)
Hash identifier: CMeoKIic9OCEdgB6ZIvdAS2p0jdHgbehiPRvR5dx6+c=
Subject key identifier: B0:B5:CF:80:FD:6D:42:5A:79:FD:FC:7A:8A:40:77:40:6F:9A:AC:0C
Certificate issuer: /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial: 33
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/sLXPgP1tQlp5_fx6ikB3QG-arAw.roa
Signing time: Tue 01 Mar 2022 08:34:00 +0000
ROA not before: Tue 01 Mar 2022 08:34:00 +0000
ROA not after: Wed 15 Feb 2023 01:30:03 +0000
asID: 9351
IP address blocks: 122.152.32.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 51 (0x33)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Validity
Not Before: Mar 1 08:34:00 2022 GMT
Not After : Feb 15 01:30:03 2023 GMT
Subject: CN=B0B5CF80FD6D425A79FDFC7A8A4077406F9AAC0C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:64:a9:97:fd:d0:4f:e7:32:49:c8:4f:47:f9:
0b:e9:e0:1a:0c:ad:da:91:b6:73:5d:7e:82:8f:3f:
c1:71:24:4e:c3:1d:c7:f6:30:9d:5b:b0:a8:d6:71:
49:df:9d:25:90:d2:7c:6b:b0:53:7d:d2:5d:8c:93:
fc:72:95:0c:55:e1:e8:23:f6:2f:dc:3e:91:20:64:
08:aa:99:97:a2:ae:36:61:b1:77:01:3e:4e:4d:55:
30:8f:0a:17:20:eb:7c:3a:ab:30:cc:76:d4:9c:55:
98:7a:88:86:16:1b:e0:8b:42:53:07:48:79:22:87:
b4:f6:aa:a6:34:a7:20:8f:bf:ec:15:1e:07:73:21:
ac:57:02:d7:f2:57:65:b9:b8:40:82:df:90:d1:30:
e0:f9:85:42:be:7e:4c:a4:34:06:ff:32:89:97:7b:
cf:59:47:5f:3d:ca:8f:6d:ab:d2:8d:a3:fe:98:bb:
cc:73:b6:fc:5b:9f:c4:af:26:13:bc:c7:7b:5f:f5:
94:f1:14:bb:d1:3c:40:1d:57:4b:ab:f1:54:f2:3f:
95:d0:16:e3:6b:42:6f:a0:bd:dc:02:76:fb:60:b1:
74:bf:45:8d:1c:e6:04:aa:1b:a9:cc:05:7d:6b:d7:
c5:42:5a:a9:2b:b2:ad:62:4b:bb:58:7e:d2:b8:ec:
d5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B5:CF:80:FD:6D:42:5A:79:FD:FC:7A:8A:40:77:40:6F:9A:AC:0C
X509v3 Authority Key Identifier:
keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/sLXPgP1tQlp5_fx6ikB3QG-arAw.roa
sbgp-ipAddrBlock: critical
IPv4:
122.152.32.0/20
Signature Algorithm: sha256WithRSAEncryption
64:d6:25:0e:33:8f:4d:a8:74:5c:dd:cb:2b:7c:37:f7:c5:e2:
af:38:91:79:59:84:32:2d:b2:f2:4a:b8:d7:2d:5a:45:50:5b:
4e:01:fa:fa:9f:6f:2d:6f:cb:ad:74:7c:c5:0f:4e:40:6d:d4:
da:4f:8d:c9:8b:c9:dc:44:82:5f:34:4b:3f:d9:4e:17:82:eb:
15:1a:cd:c6:90:6f:54:af:66:99:36:68:40:f2:44:a1:f4:48:
04:69:7f:17:a7:d2:3a:7c:8f:f7:6b:9f:6f:a0:02:21:a3:e7:
8c:e0:c1:09:1d:48:69:b8:f1:f2:8f:20:e8:3f:e1:0a:7f:6f:
b1:09:4d:f3:e2:57:87:7b:2e:44:06:d1:83:52:f9:85:1c:bf:
30:3b:d6:d3:bb:89:9f:20:c8:60:3b:9f:30:31:bb:51:71:24:
a0:aa:fd:f0:97:a4:1f:fe:5f:69:87:09:53:8c:41:f5:24:89:
c8:ac:f5:19:e1:5a:c6:f5:06:cf:07:c6:00:00:cc:99:8c:42:
2d:89:c4:1a:64:21:34:68:14:e9:02:a1:15:f3:ac:68:e3:84:
cf:f5:5c:87:a0:60:03:04:43:cb:84:e7:25:b2:00:92:7d:14:
bf:12:94:47:52:3d:8d:8d:be:95:25:0a:22:a5:57:34:04:d9:
74:f6:ff:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:23 2025 by rpki-client