![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/doW61wGem7PuTzVztkdB4txxFXQ.roa
File: doW61wGem7PuTzVztkdB4txxFXQ.roa (raw, json)
Hash identifier: PduZMFkPdZHNaPL3S286SyfsvNHOpz+lHLuij72/8xk=
Subject key identifier: 76:85:BA:D7:01:9E:9B:B3:EE:4F:35:73:B6:47:41:E2:DC:71:15:74
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 012F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/doW61wGem7PuTzVztkdB4txxFXQ.roa
Signing time: Sun 01 Oct 2023 01:30:09 +0000
ROA not before: Sun 01 Oct 2023 01:30:09 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 9824
IP address blocks: 61.211.144.0/20 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 303 (0x12f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 1 01:30:09 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=7685BAD7019E9BB3EE4F3573B64741E2DC711574
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:ed:20:74:a2:08:2a:b4:4a:4d:cd:02:4b:ea:
73:11:e0:b1:d4:ef:6e:14:99:75:1c:71:0b:87:d8:
42:42:77:1d:a7:97:74:5b:f0:45:e2:6b:7c:4b:21:
08:91:f3:27:75:a1:98:8e:39:0d:ac:db:d8:d4:d2:
a7:ec:dc:2e:b2:b4:c2:bc:78:1f:6c:86:11:6a:56:
da:2b:11:b9:5f:8c:31:8f:a4:1d:69:4e:cf:0a:81:
54:93:44:3a:e8:6f:ed:8a:3e:d6:14:ef:a9:ef:d8:
1c:cf:f5:ef:0a:76:34:8f:23:f6:33:74:b6:30:1d:
7f:ef:d2:f6:d9:02:b7:95:67:55:06:49:ef:9b:c3:
0e:c9:27:3b:9a:0f:39:d0:af:a8:13:9e:7b:f0:47:
ae:bf:fb:b5:48:cc:ad:2f:10:89:91:80:d9:94:b4:
53:f4:da:54:02:02:77:60:e4:4a:33:9f:99:62:08:
7d:e1:8a:d1:5a:7f:44:ae:7d:52:39:03:a3:64:17:
b4:c1:b6:db:e2:d9:a5:3a:ff:47:38:fc:b2:9d:b3:
96:5e:6a:78:0d:d8:f6:be:16:5e:21:3e:e6:d9:14:
88:93:f6:cc:9e:81:b5:e3:cc:65:e8:d3:02:2c:77:
4a:c8:66:69:84:d2:62:e6:d2:59:e8:16:29:1b:72:
bd:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:85:BA:D7:01:9E:9B:B3:EE:4F:35:73:B6:47:41:E2:DC:71:15:74
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/doW61wGem7PuTzVztkdB4txxFXQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
61.211.144.0/20
Signature Algorithm: sha256WithRSAEncryption
a2:5f:44:d1:ed:cb:6e:d8:b4:ae:22:e1:55:b2:cf:1f:87:0b:
cc:13:ca:db:8f:b2:46:6a:cb:64:5f:12:c6:e8:24:84:e3:6e:
a0:95:63:e9:e2:69:cb:47:ff:bc:27:e1:c9:ff:ac:54:db:cf:
d1:f3:db:08:55:6f:f4:dd:9d:42:e8:aa:8b:63:d9:6e:1a:27:
af:3e:cc:9c:55:91:f8:5b:df:c2:8e:c4:81:3b:f6:93:91:41:
79:72:6e:64:de:a9:e6:b9:6a:83:b1:08:2c:b1:43:1f:c7:63:
5d:ad:0a:75:7f:ec:80:ba:79:f9:a9:82:2d:b6:fd:bc:e8:da:
2c:ec:e2:77:2d:cb:b1:da:1c:80:05:cb:51:38:15:90:b4:a3:
38:47:e9:af:bb:de:ff:a6:fb:75:4f:36:7d:7a:8c:08:31:53:
43:5e:55:81:70:64:36:68:d9:3d:59:e9:21:fe:45:4a:52:d7:
4f:29:34:d3:fa:5b:ea:6b:50:6b:e4:10:03:2c:21:ca:55:fa:
e6:47:e0:bc:ca:70:20:78:1f:21:4a:b5:0c:ab:5c:a6:0e:99:
a5:b5:0c:94:cd:3f:05:df:ca:58:0e:d5:24:1b:15:b4:13:49:
d0:25:4d:ba:7b:54:e0:31:41:c0:c8:83:30:26:01:08:1f:1a:
99:3f:cd:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:09 2025 by rpki-client