![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30260/paZRiaju0f86j-CdaBgaq6qtjB4.roa
File: paZRiaju0f86j-CdaBgaq6qtjB4.roa (raw, json)
Hash identifier: 8Amrujqlqt7mXfYUVXG9HUdnjA1vbd58bCQkBuKPQqs=
Subject key identifier: A5:A6:51:89:A8:EE:D1:FF:3A:8F:E0:9D:68:18:1A:AB:AA:AD:8C:1E
Certificate issuer: /CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
Certificate serial: 25
Authority key identifier: 97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/paZRiaju0f86j-CdaBgaq6qtjB4.roa
Signing time: Thu 01 Dec 2022 01:28:50 +0000
ROA not before: Thu 01 Dec 2022 01:28:50 +0000
ROA not after: Wed 15 Nov 2023 01:30:02 +0000
asID: 7514
IP address blocks: 2001:2f0::/32 maxlen: 128
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 37 (0x25)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97F2B4B8FE25A0C0C7F4D6FD4FA1BA7CAE612A12
Validity
Not Before: Dec 1 01:28:50 2022 GMT
Not After : Nov 15 01:30:02 2023 GMT
Subject: CN=A5A65189A8EED1FF3A8FE09D68181AABAAAD8C1E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:4e:0f:d6:7a:06:84:f1:4d:0b:ae:ce:3c:48:
31:12:a6:d2:59:9a:24:45:fb:2c:33:e2:02:61:08:
c9:59:f3:51:17:56:18:d5:76:fe:7b:b4:de:8c:5e:
d3:fa:87:7b:d5:e2:64:58:10:27:df:eb:5c:ff:c5:
4b:f4:3e:6a:27:5b:2e:a1:11:6f:16:c2:15:67:85:
7c:f5:65:68:cb:78:62:3d:0e:12:3f:bf:9b:fd:72:
75:61:ab:32:65:6d:a5:f3:e2:64:69:d2:27:6d:19:
49:39:12:cc:30:41:59:06:21:2e:d8:4a:88:84:a9:
07:11:4d:b1:fe:22:00:6c:3c:59:71:d2:ad:5f:70:
22:09:8c:a2:c7:1f:35:e7:ba:8a:36:de:de:4c:2f:
f8:a8:bd:11:e7:69:ed:29:db:a7:a2:b6:01:30:9c:
62:56:32:66:24:32:92:54:0f:fd:cf:da:69:27:3b:
5d:fa:04:28:ee:4e:ea:c6:65:68:b6:21:44:95:01:
af:72:c2:d1:1f:ce:43:9a:cb:95:53:01:ba:c9:a2:
6e:a3:41:4b:7f:c0:71:0d:ab:30:24:fb:65:ce:b0:
82:01:d3:34:68:e5:be:85:84:45:7d:52:07:0d:7a:
f4:1d:cd:8d:c3:ce:7a:ab:e4:8f:6c:b7:e4:c9:18:
40:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A6:51:89:A8:EE:D1:FF:3A:8F:E0:9D:68:18:1A:AB:AA:AD:8C:1E
X509v3 Authority Key Identifier:
keyid:97:F2:B4:B8:FE:25:A0:C0:C7:F4:D6:FD:4F:A1:BA:7C:AE:61:2A:12
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/l_K0uP4loMDH9Nb9T6G6fK5hKhI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/l_K0uP4loMDH9Nb9T6G6fK5hKhI.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30260/paZRiaju0f86j-CdaBgaq6qtjB4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv6:
2001:2f0::/32
Signature Algorithm: sha256WithRSAEncryption
6f:79:f3:5a:29:a8:8e:67:85:14:c9:dc:27:f5:9e:fe:2b:46:
0a:ac:24:08:14:53:2c:7a:ea:40:65:1a:de:e8:6c:df:63:17:
83:41:7e:85:c9:46:88:5b:e8:7d:20:fc:d7:24:3e:2b:f3:1f:
57:56:bc:b1:cc:e4:5d:c3:ce:ab:72:36:21:ef:d6:3b:1b:7a:
0a:35:36:2d:94:aa:c7:3b:d2:30:f2:3d:62:fa:4e:2b:90:a1:
70:bc:36:84:9e:cf:83:9c:29:91:49:a4:52:a0:d5:9e:d0:88:
e9:3a:dd:06:62:a6:c5:f3:4d:e1:02:42:50:a0:14:20:ee:0d:
9b:b1:d6:38:e9:da:00:95:40:96:b7:74:ea:9d:e0:1b:8d:3e:
ec:c7:82:05:47:cd:1d:93:f9:be:ea:f8:3e:fe:5d:f3:7b:1d:
b6:2f:17:37:33:4e:61:4f:68:9b:e3:e3:84:77:e2:11:e1:39:
31:3a:0a:59:b4:46:f8:76:53:f2:46:ea:09:fe:15:53:f5:d9:
41:de:fc:e9:df:e9:b1:54:aa:0d:84:e4:9b:0b:7f:cc:17:74:
f6:0b:ae:26:a3:f3:fe:86:bb:dd:6a:74:90:a9:bc:eb:95:e0:
c9:81:fb:0e:c6:5f:5c:a6:17:63:b8:b8:9d:7c:65:28:b0:6d:
f4:29:90:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:09 2025 by rpki-client