![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/_rfTNn7zGFLHw-JE-yrk7enlDbc.roa
File: _rfTNn7zGFLHw-JE-yrk7enlDbc.roa (raw, json)
Hash identifier: EC2nN84g2HEbuaL1gPMXIPU5kWstnPbGFNw39YZoG4s=
Subject key identifier: FE:B7:D3:36:7E:F3:18:52:C7:C3:E2:44:FB:2A:E4:ED:E9:E5:0D:B7
Certificate issuer: /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial: 04B6
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_rfTNn7zGFLHw-JE-yrk7enlDbc.roa
Signing time: Thu 27 Jul 2023 16:48:10 +0000
ROA not before: Thu 27 Jul 2023 16:48:10 +0000
ROA not after: Sun 14 Jul 2024 01:30:03 +0000
asID: 9605
IP address blocks: 1.74.248.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1206 (0x4b6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Validity
Not Before: Jul 27 16:48:10 2023 GMT
Not After : Jul 14 01:30:03 2024 GMT
Subject: CN=FEB7D3367EF31852C7C3E244FB2AE4EDE9E50DB7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f2:73:f4:40:d6:9a:d5:75:37:b9:ec:d2:13:
12:cb:24:c5:ba:61:95:42:4b:f6:6c:70:d7:27:31:
b5:38:60:35:14:b2:cc:10:db:7a:89:73:20:59:85:
25:21:26:50:5b:a0:07:cc:eb:34:40:02:6a:f6:79:
0e:ec:4f:7e:2b:c7:05:9f:ec:98:86:4f:e3:f2:f1:
df:5a:eb:df:98:89:87:2f:4d:0e:88:30:2e:29:64:
57:1a:b5:41:ff:5f:0d:ed:62:38:6a:6f:12:21:c8:
96:fe:cb:5b:94:e2:65:f0:08:85:0c:08:c1:a0:4b:
a7:22:d6:0e:7a:01:8e:cb:9e:66:83:3a:08:86:45:
a2:2c:89:77:8e:12:60:69:5d:e8:5f:f1:26:ce:a9:
f9:48:97:85:bc:44:ab:1b:18:f5:93:74:3c:f4:de:
c7:bd:99:5b:ef:c8:4c:a6:93:a5:6a:a1:8c:ae:c4:
a8:71:d7:b9:04:ca:22:aa:5f:bb:26:85:0a:a2:09:
a2:ef:11:f1:a5:74:fb:53:3e:31:18:6a:69:d4:86:
3e:65:a9:fb:22:a0:35:9e:c2:ff:77:ed:41:b2:fe:
4b:02:27:a5:91:ef:3e:ef:19:d2:6e:ca:96:41:70:
ef:bc:b9:3b:74:fc:91:12:55:99:c0:99:26:33:fa:
92:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:B7:D3:36:7E:F3:18:52:C7:C3:E2:44:FB:2A:E4:ED:E9:E5:0D:B7
X509v3 Authority Key Identifier:
keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/_rfTNn7zGFLHw-JE-yrk7enlDbc.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
1.74.248.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:d2:d6:cb:f8:af:d6:fc:15:89:b8:da:6e:ec:53:7a:84:b8:
96:8a:3d:05:52:aa:b6:6a:74:2a:fb:10:1d:2d:ca:99:11:d7:
cd:f2:49:38:28:56:96:f0:a8:59:2c:f2:41:c4:9f:81:a9:c6:
61:3c:11:0b:2b:20:89:a2:9f:0c:7e:32:ba:e0:da:d5:10:61:
d8:66:9d:82:73:e7:48:22:cc:26:6d:7f:4f:3f:1c:2f:ba:76:
bc:da:24:b6:47:35:b1:e7:14:93:23:0b:2c:85:87:f0:dd:06:
17:b0:4a:0f:75:39:1f:11:07:24:0d:d3:8e:24:a1:f2:15:68:
33:04:36:b4:80:4c:4c:bf:a6:5a:af:41:cf:7d:ca:78:74:51:
67:2a:a0:a1:d0:c1:2b:c0:6f:c7:21:6c:98:47:df:9d:37:96:
5a:c5:a5:1a:9c:dd:da:6c:fe:f9:c3:d8:05:dc:82:66:41:ed:
c6:7d:95:ce:a2:4d:6d:99:c8:9e:4d:31:f7:35:c9:88:7e:76:
0c:59:b9:87:ba:03:36:4e:85:64:44:44:2f:9b:20:e5:d6:c1:
55:79:2c:17:d8:ab:b2:39:f3:d9:61:24:89:ce:e0:1b:ad:6c:
22:32:75:2c:22:b1:1c:48:62:4f:ec:b0:a8:6e:17:ef:5f:6f:
e2:08:75:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:59 2025 by rpki-client