Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/3/3133382e3138352e3232382e302f32342d3234203d3e203133353237.roa
File: 3133382e3138352e3232382e302f32342d3234203d3e203133353237.roa (raw, json)
Hash identifier: Wl9f6O+9d12IhkGClEnlpFwj5dz0E4LUFdn2NN6Nceo=
Subject key identifier: AA:36:A6:35:DF:70:BA:36:73:63:18:9D:F9:F7:17:16:2A:61:69:56
Certificate issuer: /CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC
Certificate serial: 21917D912CA43D04E004EFA0D9297073AF3408F0
Authority key identifier: F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC
Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/3/3133382e3138352e3232382e302f32342d3234203d3e203133353237.roa
Signing time: Mon 25 May 2026 02:00:02 +0000
ROA not before: Mon 25 May 2026 01:55:02 +0000
ROA not after: Mon 24 May 2027 02:00:02 +0000
asID: 13527
IP address blocks: 138.185.228.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
21:91:7d:91:2c:a4:3d:04:e0:04:ef:a0:d9:29:70:73:af:34:08:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC
Validity
Not Before: May 25 01:55:02 2026 GMT
Not After : May 24 02:00:02 2027 GMT
Subject: CN=AA36A635DF70BA367363189DF9F717162A616956
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:6d:be:f7:04:20:8f:de:7e:c9:da:c9:1b:11:
7c:d2:c0:be:f0:41:f2:5d:c9:12:be:34:a2:c1:8b:
3f:56:18:0d:d3:e9:ee:15:51:6e:af:6b:8d:d9:a3:
0a:d9:1d:5e:8c:5d:28:7a:b6:f6:b2:bd:11:ea:e6:
49:65:e6:f4:b4:20:44:45:e9:a9:b6:6d:fc:1b:0c:
8a:a8:c3:29:6c:92:ef:f8:8a:bc:62:98:69:cc:a5:
b9:69:64:cb:36:36:09:64:24:ac:81:e3:83:c6:66:
a5:3f:c7:95:23:b9:13:c6:19:05:f8:8e:8d:be:a7:
b4:7d:66:71:67:1d:c8:5e:89:b8:64:51:82:09:8b:
76:98:91:81:ca:37:16:96:c0:d8:1c:d0:bf:1b:31:
36:2d:43:ab:7d:2a:ca:ee:0e:ea:0a:d7:49:c8:7d:
b8:6f:32:95:89:92:0c:17:20:8e:a8:52:82:e8:0f:
50:a4:06:0a:d8:66:cb:06:d9:13:ab:96:5b:86:7d:
8b:3c:52:45:83:9c:f0:c0:29:68:64:0c:45:4b:de:
d7:18:44:eb:cc:1c:ed:3b:7f:3c:97:fc:e1:39:85:
20:12:66:5d:2f:78:83:f0:a9:4e:df:73:1e:aa:ba:
38:c5:34:bc:d2:14:e3:2f:0b:66:e1:4a:4e:b6:6c:
95:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:36:A6:35:DF:70:BA:36:73:63:18:9D:F9:F7:17:16:2A:61:69:56
X509v3 Authority Key Identifier:
keyid:F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/3/3133382e3138352e3232382e302f32342d3234203d3e203133353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.228.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:d3:61:67:68:19:47:65:ea:5c:99:06:02:6a:05:90:cf:a2:
dd:a1:49:07:73:46:c6:31:53:87:4c:fe:6d:75:26:03:d8:bf:
6c:b7:8a:a8:f9:9e:1c:4b:db:ad:b7:6b:e4:bc:f4:64:f4:b8:
c7:67:7d:74:94:3b:8e:f4:1a:00:4d:8e:84:9b:67:75:39:82:
6a:e1:51:a4:37:f1:82:08:12:88:2d:60:2b:e5:d2:21:e1:a0:
1f:51:a1:21:4b:07:0d:1b:e7:54:82:f1:2f:2c:1c:8f:07:3f:
95:02:8f:0f:05:dc:40:0a:ca:d6:da:ad:40:d5:8f:b0:1e:67:
e5:67:93:fc:2b:bf:3f:5a:dd:58:1a:78:f4:df:9d:eb:c5:42:
31:a3:8e:1e:39:2e:37:26:57:77:31:c3:54:13:81:6a:dc:c7:
b5:d4:44:95:c5:6c:35:45:9e:35:8e:8e:f2:94:d7:94:e2:b6:
ab:2c:43:a0:ba:e4:ba:63:df:6a:cd:fa:af:e7:7d:c6:f4:b7:
6a:3f:f0:24:96:41:4e:2c:99:44:56:ab:ef:46:d1:a5:75:db:
0e:51:ce:a8:86:01:b4:de:00:e1:90:69:6b:fa:02:84:cd:dd:
49:22:65:e7:34:13:23:13:41:48:fa:9a:48:5c:a7:1a:b3:2b:
f5:d7:0a:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:03:35 2026 by rpki-client