Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/3/3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa
File: 3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa (raw, json)
Hash identifier: pGBwQY/0TrsPQyK1RyV8H+pjV057hp37DKHEeaYcQV8=
Subject key identifier: 52:73:5E:04:A9:69:5B:AC:F5:1B:67:7C:70:06:92:0C:EB:45:3E:30
Certificate issuer: /CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC
Certificate serial: 17AE72E1A13C81DF0F65D0755EE18EBFC7168AB5
Authority key identifier: F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC
Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/3/3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa
Signing time: Mon 25 May 2026 02:00:02 +0000
ROA not before: Mon 25 May 2026 01:55:02 +0000
ROA not after: Mon 24 May 2027 02:00:02 +0000
asID: 13527
IP address blocks: 138.185.229.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
17:ae:72:e1:a1:3c:81:df:0f:65:d0:75:5e:e1:8e:bf:c7:16:8a:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC
Validity
Not Before: May 25 01:55:02 2026 GMT
Not After : May 24 02:00:02 2027 GMT
Subject: CN=52735E04A9695BACF51B677C7006920CEB453E30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:02:2c:7a:b9:16:af:f1:da:00:01:1b:a0:15:
ab:f9:a9:7b:b2:3d:eb:6a:1c:05:ed:0b:6b:f9:cb:
ac:12:ff:1b:db:a6:50:60:f0:4c:f4:41:4a:a6:91:
18:a3:49:6b:10:a2:1b:96:a6:4a:63:c7:eb:98:0f:
92:38:c9:f8:7f:ae:41:ce:4f:be:01:83:fd:c5:cc:
ae:f1:8d:37:9b:dc:6b:df:4d:88:20:09:ba:ba:26:
0d:38:eb:f2:e1:03:09:f2:ed:82:6f:47:f5:b3:97:
fe:4c:55:28:51:e3:9d:c8:66:33:31:1e:53:36:a1:
34:ac:47:bf:9a:44:b5:ca:09:ad:c8:20:af:52:a5:
1e:98:20:72:83:00:32:96:52:08:37:ed:9a:36:85:
ed:35:50:7c:fa:4b:07:68:5d:08:a8:7d:95:78:87:
51:92:b8:47:0a:c0:03:cc:d5:1c:89:81:b5:75:47:
ec:3a:83:fa:13:b8:b1:8c:b1:9a:f0:8f:0a:6f:c3:
a8:52:ed:10:06:03:46:e8:4d:88:1e:bb:54:49:c0:
ac:7c:05:20:1a:c9:3b:d9:e3:1b:32:15:55:ed:c1:
3d:03:7b:c9:30:c5:5f:62:de:c7:80:0e:f1:d4:91:
ea:1b:1b:dc:ef:0f:37:1a:e0:bd:2c:fd:12:0c:16:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:73:5E:04:A9:69:5B:AC:F5:1B:67:7C:70:06:92:0C:EB:45:3E:30
X509v3 Authority Key Identifier:
keyid:F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/3/3133382e3138352e3232392e302f32342d3234203d3e203133353237.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.229.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:d6:3f:6d:62:ba:14:9e:d2:0a:bf:d9:16:f3:95:31:fc:93:
f7:d3:6b:fb:a3:fd:a9:ef:53:91:32:e7:89:a9:eb:25:05:74:
70:3b:f1:0f:5e:05:3b:5c:0e:76:ae:03:4a:e0:fc:fb:2c:0b:
6f:ce:c5:a8:60:45:fd:44:96:e1:04:28:cb:0e:d1:71:e3:82:
6b:e1:c7:d7:0e:07:3c:d8:91:ce:ff:4d:84:a8:52:8e:5e:9b:
62:91:aa:00:17:bb:23:88:8c:8c:09:40:e3:41:62:e8:53:88:
f0:2f:eb:03:6d:d0:6f:dd:aa:04:f0:42:4b:57:73:9b:3c:9a:
98:c6:49:f9:47:e7:64:ca:63:58:56:6f:90:4a:05:85:d1:8b:
b2:99:f5:80:00:5e:3e:c1:24:da:8b:83:2c:2f:a7:b2:47:19:
5f:ca:da:1e:ae:52:fd:ab:04:d0:d9:cc:39:b0:3f:cd:64:d5:
58:42:84:62:6a:78:b8:fa:60:97:21:6a:a6:ce:7e:eb:85:fc:
37:00:aa:1b:c4:f4:ef:92:08:5e:c3:69:3a:ff:f4:7f:9d:37:
0e:2e:eb:55:c7:28:69:2c:78:a2:7d:c7:4b:1d:f5:61:2b:36:
b6:2a:da:6d:a5:66:2c:7d:13:99:6f:a6:85:3b:e9:d6:0a:b2:
8c:cf:9d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:03:36 2026 by rpki-client