![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/i9TOwuKXdnP8NCZNe5Sg0DhZWvQ.roa
File: i9TOwuKXdnP8NCZNe5Sg0DhZWvQ.roa (raw, json)
Hash identifier: xKxX1V1rCHa5/b0HxwjmBrAVNPxRaiIbY7lWlxA7BPM=
Subject key identifier: 8B:D4:CE:C2:E2:97:76:73:FC:34:26:4D:7B:94:A0:D0:38:59:5A:F4
Certificate issuer: /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial: 0154
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/i9TOwuKXdnP8NCZNe5Sg0DhZWvQ.roa
Signing time: Sun 01 Oct 2023 01:33:00 +0000
ROA not before: Sun 01 Oct 2023 01:33:00 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 18136
IP address blocks: 117.53.0.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 340 (0x154)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Validity
Not Before: Oct 1 01:33:00 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=8BD4CEC2E2977673FC34264D7B94A0D038595AF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2d:95:35:dd:b3:d5:04:ef:04:37:7a:a8:15:
8c:2e:31:f1:1b:19:6a:59:85:19:6b:9f:15:3e:99:
9c:74:08:a8:4b:d7:ea:4f:66:ff:9d:cb:0f:a7:3d:
d0:df:ea:9d:92:b0:94:0b:37:b5:3a:85:97:22:ce:
8a:76:55:5e:1c:8b:5d:1c:44:7e:6a:ac:ff:a1:04:
34:3a:10:4c:a3:6f:fe:9e:59:eb:6e:61:8d:6e:e0:
f9:a6:3d:83:9f:7c:88:30:a3:55:05:d2:8f:37:63:
93:2e:ae:aa:80:0f:01:c1:f6:78:4a:4e:fc:43:89:
b6:2d:b1:61:de:75:34:49:c1:52:83:2e:2e:92:33:
86:7f:30:49:dc:42:94:2e:f1:92:b8:07:ee:43:40:
b2:fe:fa:68:1b:74:a9:6d:b7:92:2c:c3:e1:de:b5:
14:f1:ca:c0:d9:db:b1:bd:08:97:99:68:6d:62:49:
1d:3d:be:aa:27:6c:ab:0c:c1:69:b1:3d:b8:44:15:
ae:a4:fd:50:bb:f3:6d:86:38:3b:4e:77:b6:b5:a0:
fd:86:58:4d:68:94:cf:8a:f4:5d:97:c4:73:43:b8:
9e:2c:53:2b:b3:cc:19:49:87:3d:a2:09:d3:ee:f5:
ba:82:e6:12:5c:48:7c:83:37:4b:c3:58:28:70:b1:
8c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D4:CE:C2:E2:97:76:73:FC:34:26:4D:7B:94:A0:D0:38:59:5A:F4
X509v3 Authority Key Identifier:
keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/i9TOwuKXdnP8NCZNe5Sg0DhZWvQ.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
117.53.0.0/19
Signature Algorithm: sha256WithRSAEncryption
2d:9c:50:e8:ed:f7:88:92:ec:a2:35:5e:d5:66:e8:e8:7b:2b:
d5:e9:3e:dd:2b:d4:80:8e:0e:f5:65:7a:ea:59:b8:1e:a1:b7:
ba:45:37:8a:59:b3:57:de:ed:37:49:87:3f:f4:8a:3f:e5:65:
cd:e8:9e:8b:01:28:3d:a5:cd:79:e7:d9:b9:c2:7b:3b:b5:08:
bc:33:37:11:fb:8a:48:c9:26:0c:ae:f3:54:97:82:13:9d:87:
86:bd:9e:e4:c5:72:79:f3:92:90:e9:27:a8:95:90:d6:3f:6d:
46:de:27:82:f0:30:50:a7:20:b5:89:a4:8c:2a:e7:4a:bc:6b:
ce:ca:54:eb:63:99:98:cc:25:50:39:84:2e:fc:24:38:dd:64:
b8:da:cd:55:5c:49:e0:d8:9a:65:96:c9:28:33:9d:b9:18:92:
98:5f:e8:02:25:a6:96:1a:1e:68:d2:73:9a:23:01:c6:5f:d9:
b9:d1:d2:ce:5f:65:05:f0:de:3f:61:ae:87:48:91:4e:9d:19:
c5:64:b7:49:91:2f:a7:c2:5a:26:60:3a:93:c9:40:8b:fc:f7:
33:dc:f5:c4:65:17:20:8d:96:e7:71:94:d1:01:13:69:74:30:
d2:dc:f1:50:17:08:e6:7e:23:0e:53:e2:b0:e3:ce:f3:98:12:
fb:16:a5:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:08 2025 by rpki-client