![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/zH67_-KQGyYO47_Wd8xS3rsZStg.roa
File: zH67_-KQGyYO47_Wd8xS3rsZStg.roa (raw, json)
Hash identifier: JUe8At+MrKnh1mvDHLSP9vaToXR0MZb9tI/1piqGhWc=
Subject key identifier: CC:7E:BB:FF:E2:90:1B:26:0E:E3:BF:D6:77:CC:52:DE:BB:19:4A:D8
Certificate issuer: /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial: BA
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zH67_-KQGyYO47_Wd8xS3rsZStg.roa
Signing time: Tue 01 Nov 2022 07:24:14 +0000
ROA not before: Tue 01 Nov 2022 07:24:14 +0000
ROA not after: Sun 15 Oct 2023 01:30:02 +0000
asID: 2527
IP address blocks: 133.165.128.0/18 maxlen: 18
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 186 (0xba)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
Validity
Not Before: Nov 1 07:24:14 2022 GMT
Not After : Oct 15 01:30:02 2023 GMT
Subject: CN=CC7EBBFFE2901B260EE3BFD677CC52DEBB194AD8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:50:84:ee:a9:15:0e:ff:f0:fd:53:f7:47:52:
db:f7:d3:1e:92:04:00:ae:57:b8:17:4d:39:27:b3:
6e:24:6f:95:a4:19:5a:82:2b:d4:a6:25:71:63:29:
b5:a5:1b:d0:18:18:dc:a3:8e:8d:8d:e4:ba:20:ae:
b7:55:1d:38:9a:ee:ba:6b:29:b1:4c:5c:a8:07:f8:
a8:3e:73:2c:ce:df:c7:f2:bd:48:dd:6a:72:b1:e9:
58:a6:84:d1:cb:51:99:32:5a:8f:2c:10:9b:c0:a6:
44:68:f3:c8:a8:13:17:4e:8a:4a:d9:9a:e7:d9:a8:
66:1e:d0:9d:a5:07:5d:95:71:a0:a1:d6:a9:ff:3e:
d4:7a:0e:65:44:05:c8:38:c9:7e:eb:52:92:ee:3b:
82:37:be:84:6c:af:98:a1:f4:37:75:c3:e5:91:d0:
2b:6c:22:36:d8:0a:25:91:59:71:81:83:b8:57:6e:
79:68:8f:87:21:ef:d4:ee:71:22:55:f9:bc:39:a7:
9b:48:06:78:f6:86:a3:86:05:10:90:a1:a0:dc:7c:
95:8d:f4:72:20:29:c4:0d:0d:b5:e4:db:ab:4b:d2:
8c:6c:8c:33:51:30:69:d6:48:b0:70:e2:b7:81:a8:
45:10:e2:91:58:3d:2a:33:c7:76:82:cc:ef:3a:63:
06:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CC:7E:BB:FF:E2:90:1B:26:0E:E3:BF:D6:77:CC:52:DE:BB:19:4A:D8
X509v3 Authority Key Identifier:
keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/zH67_-KQGyYO47_Wd8xS3rsZStg.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
133.165.128.0/18
Signature Algorithm: sha256WithRSAEncryption
0f:c0:f4:25:d4:ed:e3:ad:23:1c:66:d4:a6:d8:2e:bb:5b:d9:
4e:92:ff:65:c1:70:46:f1:aa:72:a0:ed:67:79:ef:f0:89:0b:
70:a4:6f:40:e0:9a:57:b7:e9:4a:a7:b4:78:ca:64:c0:d9:09:
2f:8d:1a:2c:d2:7b:96:3e:6d:b5:f0:db:08:ec:4e:97:1b:10:
e4:53:51:02:d7:b1:b8:55:e0:d3:40:e8:58:e9:eb:c0:40:2d:
f3:df:a8:00:25:d8:57:40:de:df:24:cf:d9:1c:d5:80:b9:83:
65:5e:f1:3a:c0:d1:0d:91:61:c8:95:f7:42:f5:8c:23:36:71:
86:46:4d:c8:58:04:f3:71:28:82:2e:3d:29:5b:e6:b0:ab:42:
ec:57:1b:5f:7f:52:19:bc:8b:54:d1:7e:0b:37:72:aa:17:63:
61:51:e0:5b:81:cb:97:d1:f8:4f:5d:7f:bf:08:85:72:76:2d:
14:8e:c6:40:16:2b:23:52:36:af:fc:ec:13:fd:84:39:3c:31:
e1:ae:f5:0e:e0:eb:df:ff:28:c7:cf:64:cf:7d:30:4d:c5:68:
56:bf:46:8c:4c:36:ee:47:7d:29:b1:e9:15:46:10:a8:57:ef:
af:c4:2e:84:f2:2a:c4:79:62:2b:ee:12:4d:e1:20:75:fe:85:
18:96:c8:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:28 2025 by rpki-client