![](/console.gif)
Route Origin Authorization
$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/7E9GnOzJDBXnO1SnbBin5GjYWjU.roa
File: 7E9GnOzJDBXnO1SnbBin5GjYWjU.roa (raw, json)
Hash identifier: zC41yjymL4v1cckSV6gvZ5PEEv1q1mdpuSKplfdmkXM=
Subject key identifier: EC:4F:46:9C:EC:C9:0C:15:E7:3B:54:A7:6C:18:A7:E4:68:D8:5A:35
Certificate issuer: /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial: 37
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access: rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/7E9GnOzJDBXnO1SnbBin5GjYWjU.roa
Signing time: Fri 06 Oct 2023 06:05:45 +0000
ROA not before: Fri 06 Oct 2023 06:05:45 +0000
ROA not after: Sat 14 Sep 2024 01:30:03 +0000
asID: 9374
IP address blocks: 218.216.144.0/20 maxlen: 20
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 55 (0x37)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Validity
Not Before: Oct 6 06:05:45 2023 GMT
Not After : Sep 14 01:30:03 2024 GMT
Subject: CN=EC4F469CECC90C15E73B54A76C18A7E468D85A35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:97:74:b2:47:ee:8c:1f:d1:a6:86:77:32:5a:
38:93:d4:e0:27:cd:43:ae:3a:e4:ac:cc:84:26:87:
e6:e8:8d:a6:64:c6:48:4d:6b:a6:b0:68:99:8b:e6:
fa:4c:8c:e6:3a:52:f0:2a:0f:36:93:8d:79:a1:68:
c2:d9:e0:d7:57:45:cc:8e:9f:06:59:15:42:89:e6:
04:9d:ff:a4:e7:c4:ad:31:ab:54:ba:7f:67:f5:00:
9c:a4:01:aa:54:db:20:93:c8:c0:d2:d7:d4:1b:be:
c9:8e:d3:30:da:a5:7d:a2:43:c3:7f:de:72:d3:c7:
8b:aa:72:61:00:c3:b6:bb:fd:95:19:d0:35:47:37:
99:58:8b:65:d0:8a:a3:22:15:d9:87:00:03:46:bc:
ca:9b:61:4b:cc:1e:73:71:5c:20:c6:dc:b4:62:56:
e4:83:b1:3c:5e:a5:e5:22:e5:6f:a7:81:16:d9:2d:
bc:98:a2:cd:e3:4a:ca:f0:c1:b5:25:57:77:61:18:
2c:08:1b:64:a6:53:81:2f:aa:b9:bf:46:44:25:c9:
3f:10:d3:3c:cf:ae:3a:0f:af:55:a9:bf:42:15:91:
4e:10:6e:a2:e9:9a:dc:68:87:01:13:ed:f6:85:c7:
7b:9d:54:54:db:77:39:e8:2e:17:e5:d6:37:46:dd:
66:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:4F:46:9C:EC:C9:0C:15:E7:3B:54:A7:6C:18:A7:E4:68:D8:5A:35
X509v3 Authority Key Identifier:
keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
X509v3 Key Usage: critical
Digital Signature
Subject Information Access:
Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/7E9GnOzJDBXnO1SnbBin5GjYWjU.roa
RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
218.216.144.0/20
Signature Algorithm: sha256WithRSAEncryption
02:58:e2:26:ab:a7:57:95:9b:1d:0f:16:89:81:b1:34:8c:72:
9e:c6:91:f0:5c:56:56:66:30:f0:92:04:1d:05:58:ed:9d:e3:
97:fe:9a:a1:40:04:4c:6f:cc:f4:3f:a2:6b:9a:f4:cf:ce:5f:
fe:cb:f3:20:31:ba:25:6a:d5:a1:fa:8c:18:42:7e:1c:e6:36:
af:d6:3c:0d:2b:91:f9:8a:62:bf:fc:a1:e6:e6:dc:ca:5e:b4:
ca:fa:24:5c:64:f6:95:de:30:20:28:5b:0e:d8:72:ee:6e:fd:
91:55:5c:10:a2:4f:60:f5:b0:e1:a5:e5:63:df:2d:ca:3b:37:
aa:51:86:7b:35:29:ea:0d:c9:2a:c5:38:32:ef:29:32:e8:bb:
93:81:70:0d:4d:46:eb:3e:fa:e1:9c:ac:b0:f2:63:97:3b:e2:
cc:33:67:31:c8:75:91:5a:3e:95:67:c1:62:60:b0:fc:55:96:
90:23:a1:1f:b0:7e:73:c4:c0:4c:31:f6:43:c8:2f:fd:e0:48:
98:c7:ca:76:cb:d4:f5:34:d5:88:17:be:28:90:7c:86:96:36:
8e:77:a4:b8:f6:7c:2b:90:b3:93:a7:5f:53:de:cd:cd:e0:da:
c5:e6:a7:d8:7c:31:b3:9a:51:c8:b1:4e:87:27:62:ac:d6:c2:
53:66:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:14:08 2025 by rpki-client