![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/TuMwMb3gpiNI5VeH8xyz-JDdk04.roa
File: TuMwMb3gpiNI5VeH8xyz-JDdk04.roa (raw, json)
Hash identifier: pxj2xGQAorm5bV/uyVjAY1fPhQT++M5hpthIT2kRZpo=
Subject key identifier: 4E:E3:30:31:BD:E0:A6:23:48:E5:57:87:F3:1C:B3:F8:90:DD:93:4E
Certificate issuer: /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial: 01B2
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TuMwMb3gpiNI5VeH8xyz-JDdk04.roa
Signing time: Fri 07 Jul 2023 04:14:36 +0000
ROA not before: Fri 07 Jul 2023 04:14:36 +0000
ROA not after: Fri 14 Jun 2024 01:30:02 +0000
asID: 10013
IP address blocks: 219.99.96.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 434 (0x1b2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Validity
Not Before: Jul 7 04:14:36 2023 GMT
Not After : Jun 14 01:30:02 2024 GMT
Subject: CN=4EE33031BDE0A62348E55787F31CB3F890DD934E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:9f:56:1e:11:2a:ff:2a:1a:92:d6:b6:6f:5c:
a7:02:e8:67:c9:05:50:20:88:7b:ba:c9:66:bf:b3:
c4:52:1f:d8:32:0a:8b:c5:49:93:3f:c5:f9:12:d1:
5d:2d:29:ce:60:b3:45:31:09:12:b9:c9:2f:85:81:
96:8e:30:c9:3d:c3:a9:44:b9:98:8e:60:ca:cf:d9:
89:f2:08:30:c6:13:cd:27:c8:eb:22:0e:9b:fe:87:
91:40:f2:a0:8d:01:d6:32:ff:d7:46:dc:fb:c2:28:
c0:08:5a:9b:c2:cc:8f:c8:00:44:fc:a2:43:02:ee:
1c:2b:35:ca:8c:39:42:6c:58:22:df:4e:19:35:9a:
d8:c8:50:ad:3f:07:9a:16:26:81:5e:c0:d7:66:fc:
9a:70:ba:03:b7:eb:f4:2f:ae:b1:b4:30:b7:37:63:
6b:31:e6:2f:e5:9e:fa:91:62:02:bc:cc:8e:10:0e:
c4:0d:17:06:72:cb:f2:96:db:47:b5:a8:3e:11:2e:
47:78:bc:e3:9e:48:0a:db:0e:a2:25:79:ac:e1:a7:
30:ab:39:95:9a:f5:d4:66:64:6f:38:cb:e5:60:e5:
dc:f1:1f:ae:d7:63:b8:94:f7:c5:d5:1a:3b:59:47:
1a:ee:7b:38:2e:84:54:da:c0:c6:a7:b4:12:c1:66:
51:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E3:30:31:BD:E0:A6:23:48:E5:57:87:F3:1C:B3:F8:90:DD:93:4E
X509v3 Authority Key Identifier:
keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/TuMwMb3gpiNI5VeH8xyz-JDdk04.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
219.99.96.0/19
Signature Algorithm: sha256WithRSAEncryption
23:ff:9c:ca:f5:d1:2c:b0:af:48:ca:a3:1c:26:e4:d8:59:4b:
4e:f9:3c:5a:60:b2:ef:ca:fd:93:09:f7:ca:77:24:d2:33:03:
fb:2e:56:e2:ea:3c:e0:6d:56:43:d4:56:3c:cb:9c:eb:b9:ed:
5f:10:e2:95:49:f1:bf:c8:ac:b5:c5:c7:9f:ce:99:58:cd:0d:
e2:83:c7:05:5f:a6:92:1c:4e:44:9b:75:3b:96:d1:01:ee:6a:
92:d2:62:7d:d4:75:49:23:83:bc:fe:48:95:1f:dd:73:a0:88:
0c:ba:e8:05:e3:b6:33:a6:00:de:84:3b:4b:c4:e6:19:ac:37:
05:81:e2:9f:7d:29:df:d2:b3:88:e7:8d:aa:66:33:7d:cb:21:
27:98:a2:e1:23:54:1b:5f:bf:48:aa:4b:8d:c3:66:bd:28:34:
45:9d:16:88:a5:07:c9:e7:39:63:ce:a6:01:f8:6c:eb:eb:fb:
56:05:5c:85:5f:19:80:6b:2c:42:8b:9d:26:ea:f8:eb:18:c2:
4e:73:5e:4b:fe:0e:40:fd:f0:25:f7:03:66:32:ea:bb:e9:2b:
c1:31:7f:2f:bb:b4:97:9c:d4:6b:5f:23:a2:a0:e9:04:e8:b2:
54:64:10:39:b8:78:ab:00:4d:3f:7f:49:73:e6:ce:cb:16:7c:
0f:03:3e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:17 2025 by rpki-client