![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/R2kLsVtJ9CmR7Bu6mjD7bJvhHH4.roa
File: R2kLsVtJ9CmR7Bu6mjD7bJvhHH4.roa (raw, json)
Hash identifier: 1hl+JABpIxK6TlkYsVxGwFRqLEayDmjUTKVF/0EH1Dc=
Subject key identifier: 47:69:0B:B1:5B:49:F4:29:91:EC:1B:BA:9A:30:FB:6C:9B:E1:1C:7E
Certificate issuer: /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial: 36
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/R2kLsVtJ9CmR7Bu6mjD7bJvhHH4.roa
Signing time: Mon 01 May 2023 01:29:05 +0000
ROA not before: Mon 01 May 2023 01:29:05 +0000
ROA not after: Sun 14 Apr 2024 01:30:02 +0000
asID: 131934
IP address blocks: 61.245.208.0/20 maxlen: 32
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 54 (0x36)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Validity
Not Before: May 1 01:29:05 2023 GMT
Not After : Apr 14 01:30:02 2024 GMT
Subject: CN=47690BB15B49F42991EC1BBA9A30FB6C9BE11C7E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:9f:31:d1:0c:21:ce:28:d0:16:46:fc:ec:
37:27:72:20:fe:52:df:7f:15:97:7c:ba:e1:0a:30:
9d:34:ac:d1:2e:7b:a6:ff:91:aa:55:10:c4:2d:11:
3a:99:43:5e:ce:d0:09:09:c2:42:9c:29:06:78:33:
90:1d:b9:bc:52:c7:7d:99:3d:9c:53:f6:10:e7:3b:
b4:49:10:85:06:c1:74:1b:3c:49:c4:18:08:d3:06:
dd:f2:f9:50:d5:eb:34:f4:ad:37:99:a4:32:50:ef:
5b:2a:48:3f:20:65:3e:7b:22:fe:fb:29:66:25:63:
be:fa:2c:b5:8e:72:2b:57:b4:fe:3d:4f:28:04:3b:
bb:d2:8a:50:fc:ae:56:8f:7a:9a:57:ac:ed:22:4d:
50:a6:0a:63:83:1c:da:2a:16:d4:f9:c3:a2:8b:3d:
35:ab:7d:37:59:72:34:b3:c1:8d:8c:89:12:7c:c4:
aa:9f:30:f9:cd:63:2d:1f:e0:c0:e1:26:b2:9c:12:
38:cc:c7:d3:69:7e:20:ee:c1:3d:85:ce:09:53:aa:
74:01:11:b2:b3:1a:d4:e6:dc:fa:5f:44:ef:b9:f2:
7a:10:98:90:7e:8c:4b:29:55:f5:1b:bc:f3:a4:4f:
e6:4e:31:43:f6:fc:f1:8f:88:83:a8:7f:09:d1:2a:
84:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:69:0B:B1:5B:49:F4:29:91:EC:1B:BA:9A:30:FB:6C:9B:E1:1C:7E
X509v3 Authority Key Identifier:
keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/R2kLsVtJ9CmR7Bu6mjD7bJvhHH4.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.245.208.0/20
Signature Algorithm: sha256WithRSAEncryption
8e:e4:c0:ba:db:0d:a7:35:ad:1d:aa:47:cc:34:37:ba:bb:82:
dc:04:6e:9b:ae:af:dd:80:53:4b:20:cf:ef:4c:98:6b:c9:d6:
d4:8d:75:55:54:ca:0d:ae:fd:96:61:11:e6:b8:f8:de:b1:e0:
88:60:cb:89:d2:ea:8d:43:00:64:7c:d4:5a:de:50:40:ba:d1:
0f:1c:08:3e:a3:12:d0:16:87:4f:1d:60:cb:ca:2c:08:7a:27:
9c:2f:d2:d5:ba:4b:77:9f:fd:f2:84:5c:43:bc:44:60:6c:5d:
73:d4:0b:ee:7d:13:4d:00:58:44:a6:b4:06:5d:8d:79:84:78:
b1:71:a1:e5:28:0f:5f:5e:d5:fa:c5:22:c9:11:f5:f0:0c:0f:
c6:7f:90:ae:1f:c3:db:a9:56:d4:12:c8:68:d2:39:7d:ae:5b:
e0:b8:e6:28:70:89:17:13:ec:a5:6f:a2:c9:98:0b:73:27:96:
ed:d0:78:f8:61:4e:ce:ea:c1:21:1d:b1:7c:b0:cd:5f:cf:a2:
83:e9:bd:4d:54:12:ba:38:10:71:a8:e3:9f:19:3d:a6:6e:fe:
f2:80:27:87:38:e9:f5:9f:03:cd:aa:a7:7d:f7:e4:d6:24:fa:
1c:5d:41:2b:c3:aa:66:2f:18:81:fb:db:ca:d3:7b:3d:44:ab:
4f:ad:6c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:24 2025 by rpki-client