![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-VssScDuM2YOV8lcU4oJCPLAiTs.roa
File: -VssScDuM2YOV8lcU4oJCPLAiTs.roa (raw, json)
Hash identifier: HqasMHukDHgoziRpNV+m2QJhox09e4BMadpL4ua6bPQ=
Subject key identifier: F9:5B:2C:49:C0:EE:33:66:0E:57:C9:5C:53:8A:09:08:F2:C0:89:3B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 02AD
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-VssScDuM2YOV8lcU4oJCPLAiTs.roa
Signing time: Tue 30 May 2023 17:17:28 +0000
ROA not before: Tue 30 May 2023 17:17:28 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.102.152.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 685 (0x2ad)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: May 30 17:17:28 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=F95B2C49C0EE33660E57C95C538A0908F2C0893B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:a8:6b:61:07:5e:d4:84:70:b4:17:3c:55:
0e:e9:21:82:10:ae:f9:db:73:7b:f4:ef:08:24:2e:
7f:34:84:d8:9a:bd:7d:4d:7b:05:e2:17:be:de:93:
f3:b2:45:cc:b6:52:7a:1f:39:de:1a:26:54:3d:a4:
d9:8c:f1:14:e8:9e:84:d7:f5:4a:5d:a3:e0:13:63:
1c:5d:7d:b3:6b:ac:3e:be:01:31:07:30:25:f4:42:
86:85:1a:da:fb:2a:03:e4:36:c2:ab:d6:a2:11:5a:
d2:5e:32:80:2e:5e:b3:20:f7:26:74:62:86:14:50:
a3:d0:19:2e:97:cc:f7:47:8c:89:bb:8a:ff:16:23:
f5:ad:75:9a:cc:9a:49:b1:cb:6a:54:f7:ba:e8:8c:
c6:86:2d:d6:99:82:46:d0:36:2c:69:e8:0a:7c:9d:
f4:6c:e1:bc:ad:52:d5:b7:cc:01:88:62:f9:ba:0a:
16:4e:c5:79:02:04:04:61:cf:d6:30:74:4e:d5:33:
a1:be:34:d4:23:d2:aa:29:01:f8:ef:98:63:d4:97:
df:12:8b:0e:e4:32:3d:ba:bc:25:1c:52:cd:65:6a:
87:85:45:a7:51:a7:b0:ee:7b:61:4c:71:9a:a5:37:
05:14:22:7b:d7:db:2a:09:dc:cb:be:60:a4:43:db:
2f:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:5B:2C:49:C0:EE:33:66:0E:57:C9:5C:53:8A:09:08:F2:C0:89:3B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-VssScDuM2YOV8lcU4oJCPLAiTs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.102.152.0/23
Signature Algorithm: sha256WithRSAEncryption
11:95:4c:b6:77:6b:e7:8d:da:7e:24:ca:d4:78:46:1d:58:26:
5e:11:0c:ab:07:d0:ed:e3:54:05:84:5d:5e:21:05:ca:aa:f4:
d0:98:62:78:b9:01:89:15:72:4b:6c:45:40:85:bb:71:3e:0e:
5a:5b:00:3c:ac:23:3c:6f:08:2d:55:5b:27:14:60:41:78:e1:
98:84:84:12:22:d7:0a:ea:3a:fd:2f:71:17:d1:a7:f4:37:1c:
49:3f:f3:d1:61:86:97:5f:81:bc:e8:e6:04:b3:1a:f6:45:d6:
b0:09:9c:09:78:45:e9:9e:b7:2f:a5:2c:be:b0:1d:04:4d:80:
bd:a9:c8:54:e6:03:08:79:b8:61:23:14:b0:9d:4e:dc:85:b7:
99:07:80:3f:d9:ce:41:e0:b7:48:1c:32:27:99:9d:73:72:72:
cb:ab:4d:a2:f8:8a:de:c8:2f:ac:69:5e:b1:89:18:08:e4:6b:
d2:ae:1e:df:57:e7:d9:93:d7:7c:96:b7:22:0d:34:f4:51:90:
51:82:35:1d:25:09:be:ab:0e:bb:2c:fa:88:9a:2a:91:2b:86:
87:eb:6e:10:f3:a0:51:56:fb:97:33:20:f7:d3:f9:7f:34:26:
2d:a2:e7:85:97:11:b5:1e:fd:1f:6f:dd:a3:5f:f1:57:32:e3:
7c:9a:ba:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:57 2025 by rpki-client