Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/3/3133382e3138352e3233302e302f32342d3234203d3e203437303635.roa
File: 3133382e3138352e3233302e302f32342d3234203d3e203437303635.roa (raw, json)
Hash identifier: oOew7nfRjVHr2A6IwvyjgnEv7vlsCqfmGcGBn+W9vs0=
Subject key identifier: 31:51:F8:E2:8C:C3:2A:D0:83:73:40:8C:22:83:42:41:1E:D9:17:36
Certificate issuer: /CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC
Certificate serial: 60981C87686192623EA3325BCED7A6F1BFA5FC4F
Authority key identifier: F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC
Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/3/3133382e3138352e3233302e302f32342d3234203d3e203437303635.roa
Signing time: Mon 25 May 2026 02:00:03 +0000
ROA not before: Mon 25 May 2026 01:55:03 +0000
ROA not after: Mon 24 May 2027 02:00:03 +0000
asID: 47065
IP address blocks: 138.185.230.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:98:1c:87:68:61:92:62:3e:a3:32:5b:ce:d7:a6:f1:bf:a5:fc:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC
Validity
Not Before: May 25 01:55:03 2026 GMT
Not After : May 24 02:00:03 2027 GMT
Subject: CN=3151F8E28CC32AD08373408C228342411ED91736
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:5c:a2:c0:21:a6:b6:e5:47:2a:ef:28:51:83:
25:bf:f5:64:f5:e3:17:5f:8c:22:27:af:6b:a3:2d:
d6:8d:4e:e6:14:3d:83:fc:77:63:ef:c4:66:a0:26:
2e:63:28:62:77:52:9d:1c:c1:cb:26:16:3f:47:42:
e1:fa:50:4a:ff:48:89:c3:7c:30:c3:85:0d:b3:a1:
b2:fa:dc:8f:d9:e6:9e:e3:fa:e0:47:30:f0:15:d5:
2a:5f:6d:21:3f:45:0c:d5:85:5d:08:d5:24:16:f6:
07:70:75:55:f5:b6:22:62:c6:37:bd:a3:8a:92:26:
f1:f2:76:34:82:4a:a7:e8:80:42:09:5a:c3:11:e0:
90:50:03:f8:d0:cf:f3:89:1d:5c:34:23:59:c4:9b:
50:8f:17:f1:00:64:0a:be:86:0b:fe:04:c4:ca:61:
5a:5c:8c:9f:7d:9a:22:38:41:54:3c:e8:0d:a4:18:
c5:ab:1b:6a:10:87:66:7f:8f:3c:60:69:2c:f4:1e:
e5:d8:cb:1b:7d:c8:37:44:2e:db:20:20:23:71:3f:
fa:7c:be:cf:08:c4:07:69:02:53:a0:5b:48:18:02:
c1:9e:63:66:ed:e4:63:fa:7e:5d:a4:5f:ca:f5:aa:
ff:11:12:81:b2:d9:71:39:cc:9a:e5:f8:b5:26:4b:
88:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:51:F8:E2:8C:C3:2A:D0:83:73:40:8C:22:83:42:41:1E:D9:17:36
X509v3 Authority Key Identifier:
keyid:F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/3/3133382e3138352e3233302e302f32342d3234203d3e203437303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.230.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:f2:95:2d:45:56:54:50:18:95:fa:3d:fb:b6:6c:a5:1d:b0:
3b:c2:7d:ae:13:0a:7b:d6:e2:08:1e:03:01:0e:ed:4b:00:93:
cc:67:3c:92:b4:18:c7:10:8a:6b:3f:e4:f8:1a:ea:b3:fe:1b:
48:70:ab:31:be:77:ef:65:3f:2a:cf:13:24:8c:86:93:a2:0e:
3d:06:6b:7b:a6:b1:25:84:ab:80:eb:d7:59:d7:b9:b7:16:d0:
10:16:5d:a0:18:24:67:aa:2e:85:18:f6:cb:63:52:76:8c:ce:
58:10:08:8a:b2:ca:d0:4b:c9:54:25:3b:4c:f5:3a:ec:a7:75:
64:f8:2c:6a:3a:6a:11:44:c6:e3:d4:ad:ab:e1:d2:01:62:36:
94:2a:9d:62:98:81:cb:fe:41:00:ba:3c:9c:2d:6b:b7:f3:77:
86:f2:6e:e5:c0:f8:4e:62:f1:e9:50:01:9d:cd:88:52:c7:95:
ed:9c:b4:34:3c:4a:a6:98:28:d9:7a:da:b1:28:69:74:b4:fe:
09:41:59:f0:50:d6:b0:30:eb:22:99:0d:17:d8:84:8e:26:a5:
09:f7:63:3d:0d:3a:7f:8a:16:b4:93:54:6c:2b:e8:93:c2:74:
41:ce:51:8b:85:3c:39:63:f1:2a:12:b9:29:f2:d2:69:a4:e9:
d2:f4:b8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:03:35 2026 by rpki-client