![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/KijAievGzI_Pf2bUxfV4q6E9TSg.roa
File: KijAievGzI_Pf2bUxfV4q6E9TSg.roa (raw, json)
Hash identifier: oRGbPcmsSWZ4teoJm77BATKBUeheBGEb8v0cusOGtlI=
Subject key identifier: 2A:28:C0:89:EB:C6:CC:8F:CF:7F:66:D4:C5:F5:78:AB:A1:3D:4D:28
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0337
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KijAievGzI_Pf2bUxfV4q6E9TSg.roa
Signing time: Thu 01 Jun 2023 16:07:34 +0000
ROA not before: Thu 01 Jun 2023 16:07:34 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.98.66.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 823 (0x337)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 1 16:07:34 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=2A28C089EBC6CC8FCF7F66D4C5F578ABA13D4D28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:eb:f2:cf:ee:b9:47:31:3b:aa:bc:42:72:fe:
89:f4:90:66:2f:d2:35:af:ab:4b:59:bf:f1:fa:1a:
70:2a:ea:fd:60:bf:93:a9:c2:4e:7e:e4:9a:9b:b6:
29:77:d0:07:c0:5e:9d:11:30:c0:38:4c:e0:82:9a:
8b:29:66:f8:b6:39:df:05:2d:ce:30:14:e9:b6:03:
d9:36:ec:a1:67:5a:9b:ab:28:96:54:a9:73:aa:f0:
1e:60:65:fb:33:9f:65:8a:90:82:6c:23:50:2a:5f:
e7:bf:68:85:a8:4c:81:5e:2a:da:e8:dd:bf:52:86:
d1:34:6b:84:e7:db:f4:84:6a:6b:61:b0:06:ae:5e:
29:bf:b7:92:36:3f:fc:e0:ac:02:5e:40:dd:aa:ae:
00:3e:1c:2e:d1:48:86:cf:e5:1e:21:5a:72:ea:92:
72:59:c4:99:ed:13:77:f9:77:6d:cd:76:4c:1a:cf:
da:eb:fa:7d:6f:50:59:3c:2a:88:80:cd:c6:7a:94:
c6:18:a5:cd:59:28:87:56:8d:68:2c:14:33:fc:60:
71:05:56:79:90:9e:f1:10:af:11:63:69:ce:96:62:
e9:a1:f3:76:c2:82:d4:8d:16:3f:3d:d1:99:cf:74:
e0:e8:72:69:bc:30:7c:1e:20:2c:8d:2f:4f:1e:4d:
a3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:28:C0:89:EB:C6:CC:8F:CF:7F:66:D4:C5:F5:78:AB:A1:3D:4D:28
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/KijAievGzI_Pf2bUxfV4q6E9TSg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.98.66.0/23
Signature Algorithm: sha256WithRSAEncryption
3d:92:a1:8f:7e:f2:e4:db:f1:67:c1:fc:2d:ee:2a:53:69:bd:
05:da:e2:4d:4c:52:54:d7:42:ae:ba:16:5b:8a:57:84:70:75:
c4:8a:9e:6d:46:f0:85:99:b8:32:19:0e:8e:34:51:dd:1d:70:
37:a0:68:54:82:2f:5d:81:b0:59:2c:a4:0d:7a:38:83:0a:e1:
80:a8:75:22:b2:a4:6e:cf:df:f2:8e:c2:07:94:a1:fb:93:c0:
21:f4:0c:99:bb:5f:6b:2e:ee:b7:6d:ed:e4:74:61:16:8b:6b:
b8:7b:65:b7:d0:a8:b0:6f:4a:99:05:a1:06:71:69:c3:fe:e5:
cf:1b:7a:2f:53:df:77:6d:57:40:be:1c:3f:98:ae:ce:ff:39:
b1:d7:3c:d7:29:67:3c:2d:eb:4f:92:ad:f0:9e:bd:3d:92:ed:
00:51:4b:2e:0b:8c:4e:74:76:a8:28:d7:ad:7a:7e:15:81:c1:
9e:bd:ed:d3:6c:84:6e:33:cc:39:53:8e:37:fc:49:d0:5c:8a:
12:62:36:02:2a:12:a2:cd:bb:c1:e2:52:b7:b0:f4:9d:0f:21:
aa:2d:f4:39:f7:40:8d:cb:3e:30:e3:14:da:2d:fc:11:de:eb:
e9:ca:0b:49:d8:59:48:0d:3c:8d:f3:98:54:21:de:dc:3d:98:
73:33:d6:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:11 2025 by rpki-client