![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/ThibNp6tlBiZ33FlDPajwb4bvSs.roa
File: ThibNp6tlBiZ33FlDPajwb4bvSs.roa (raw, json)
Hash identifier: KrlhJXWCdceB7i9/DMz75M64LsEaOoUCIcjcCxY7PBo=
Subject key identifier: 4E:18:9B:36:9E:AD:94:18:99:DF:71:65:0C:F6:A3:C1:BE:1B:BD:2B
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 0403
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ThibNp6tlBiZ33FlDPajwb4bvSs.roa
Signing time: Tue 06 Jun 2023 16:05:49 +0000
ROA not before: Tue 06 Jun 2023 16:05:49 +0000
ROA not after: Tue 14 May 2024 01:30:02 +0000
asID: 9605
IP address blocks: 49.106.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1027 (0x403)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jun 6 16:05:49 2023 GMT
Not After : May 14 01:30:02 2024 GMT
Subject: CN=4E189B369EAD941899DF71650CF6A3C1BE1BBD2B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b7:85:45:96:4c:b9:b4:c7:62:13:11:90:90:
f0:4d:17:d1:ed:b4:0a:3a:de:41:1f:cc:82:61:1c:
1b:7d:ed:0a:3f:08:3c:0b:c3:bc:83:26:50:e8:00:
b9:0a:41:b0:13:4a:a3:b7:e9:88:45:8a:cc:65:5f:
30:d9:19:c7:98:c8:ce:94:ed:2b:a6:b8:54:51:f8:
8f:76:e4:62:be:f6:69:ce:d6:83:23:44:d0:25:c8:
36:f0:aa:c1:39:22:45:cd:32:cc:92:dd:48:70:13:
82:b9:41:6d:a5:4a:d7:79:76:82:a2:c5:13:af:46:
6a:50:57:65:44:2e:01:31:b0:68:b3:9a:d8:a3:cf:
81:6a:af:d7:7f:02:4e:0b:c3:8c:8b:71:61:69:b6:
54:b7:0d:da:87:ac:af:f4:12:02:34:c7:b8:a3:ac:
f5:d3:cb:53:ae:1c:36:37:ce:72:12:4d:c6:bf:62:
3d:b6:be:76:d1:20:be:c6:e2:ca:02:e8:38:d8:d0:
cb:92:f4:54:62:4d:4b:ce:9c:90:3a:4f:16:de:66:
2b:42:4e:7a:e4:5d:d6:8d:15:93:fe:27:61:f1:5c:
f0:44:70:99:9e:3c:00:6e:3c:44:e4:10:37:d3:1d:
5b:9f:15:dc:1f:25:c0:43:b0:f3:e8:8b:aa:f8:b6:
c0:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:18:9B:36:9E:AD:94:18:99:DF:71:65:0C:F6:A3:C1:BE:1B:BD:2B
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/ThibNp6tlBiZ33FlDPajwb4bvSs.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
49.106.215.0/24
Signature Algorithm: sha256WithRSAEncryption
76:f6:2b:02:09:f6:c8:45:0e:e7:b4:39:2d:9f:b1:b8:cc:c5:
0f:2f:26:ce:16:c4:75:00:be:8e:2b:70:8a:e4:24:ff:17:b1:
7b:ee:b8:9b:22:29:0f:2c:fc:0c:29:57:17:e8:1a:0a:42:a5:
dc:e0:dd:da:58:c1:67:aa:ab:f4:18:9b:53:0b:1f:e3:0c:68:
67:f2:e0:62:c8:3e:f6:ae:88:6f:4e:1c:96:25:52:96:98:d7:
6b:43:98:9c:83:88:c7:77:e6:eb:8a:9f:1e:22:23:4a:64:77:
dd:02:df:23:8d:5e:32:7c:d2:32:e7:57:e8:02:89:86:69:ab:
be:a8:f6:1a:de:a1:ea:72:e0:9e:13:f4:30:d6:68:c1:d8:62:
34:13:35:93:18:b0:17:77:fe:25:ba:00:d5:5b:60:41:02:e6:
58:f1:f3:a7:69:d5:ff:e4:80:64:df:1f:41:27:5b:c0:69:10:
c6:c2:1d:32:f1:fa:fb:10:75:29:38:1e:af:b1:e0:78:6f:bd:
9b:0b:fe:2c:6a:19:93:9b:2d:4e:71:f2:4c:3a:b3:6e:56:00:
55:7a:8a:90:90:e6:78:09:ba:b0:5b:42:6d:08:bd:6b:4a:6b:
6e:05:5c:ae:58:a5:bf:e5:35:1f:4a:8b:16:71:e0:df:47:5b:
7a:f5:34:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:16 2025 by rpki-client