Route Origin Authorization
$ rpki-client -vvf rpki-pp.com/repo/GOOFL/3/3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa
File: 3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa (raw, json)
Hash identifier: mnLQW4wdhn8yK7znDc6FyFIo3V3pd1FXAhTBIKhgzlQ=
Subject key identifier: 6C:23:FA:EB:98:CA:6B:53:A1:81:0D:FE:AE:E9:AB:ED:B5:F7:C8:CD
Certificate issuer: /CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC
Certificate serial: 5FF4DBBAB2FE81A3789D35038125387DB2ACE269
Authority key identifier: F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC
Authority info access: rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer
Subject info access: rsync://rpki-pp.com/repo/GOOFL/3/3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa
Signing time: Mon 25 May 2026 02:00:03 +0000
ROA not before: Mon 25 May 2026 01:55:03 +0000
ROA not after: Mon 24 May 2027 02:00:03 +0000
asID: 47065
IP address blocks: 138.185.231.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:f4:db:ba:b2:fe:81:a3:78:9d:35:03:81:25:38:7d:b2:ac:e2:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F0AAD925E534BD72E6B3E9869201D046C7916AFC
Validity
Not Before: May 25 01:55:03 2026 GMT
Not After : May 24 02:00:03 2027 GMT
Subject: CN=6C23FAEB98CA6B53A1810DFEAEE9ABEDB5F7C8CD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:da:62:37:61:dc:d9:3a:cd:0e:af:2b:f6:d5:
0b:5c:69:e0:4d:53:00:06:86:a5:0c:5d:63:53:a9:
3f:3f:f2:53:72:a2:dc:2a:5c:0f:a6:59:f2:a4:ff:
06:f8:e5:7d:0f:23:98:ba:1a:9d:a1:e6:33:3f:a1:
af:4f:7c:c6:c9:ed:80:f1:89:72:bc:76:2e:8c:49:
51:16:ca:50:0e:fa:47:bf:4f:cb:cf:8a:84:6f:15:
0f:40:8e:cc:e6:3a:44:7d:b5:0d:bc:32:dd:66:53:
9d:c3:02:62:1a:fc:78:5b:f9:fc:1f:7b:e7:57:5e:
12:fd:ea:d5:23:54:d2:38:d3:1c:e9:c8:49:a1:27:
ca:87:69:4e:04:c2:aa:16:58:07:22:da:51:cc:f2:
62:7a:ed:b1:6b:ca:44:43:2c:de:46:2b:56:af:92:
a6:a8:ca:e3:4f:3e:6f:cd:5a:4b:61:68:49:50:24:
67:98:eb:86:b4:d4:06:3a:06:e6:9a:0f:4a:e6:0c:
2e:f6:da:7e:9b:02:88:0b:65:0f:d7:e3:be:1b:fc:
1f:20:1b:99:bd:56:45:74:96:ac:30:db:72:20:8f:
b3:cb:1d:b2:a0:4e:fe:be:a9:65:e9:45:1d:43:cb:
f7:b0:b1:f0:8a:24:97:07:d7:c8:68:64:98:9c:cf:
78:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:23:FA:EB:98:CA:6B:53:A1:81:0D:FE:AE:E9:AB:ED:B5:F7:C8:CD
X509v3 Authority Key Identifier:
keyid:F0:AA:D9:25:E5:34:BD:72:E6:B3:E9:86:92:01:D0:46:C7:91:6A:FC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-pp.com/repo/GOOFL/3/F0AAD925E534BD72E6B3E9869201D046C7916AFC.crl
Authority Information Access:
CA Issuers - URI:rsync://krill.peering.ee.columbia.edu/repo/peering-testbed/0/F0AAD925E534BD72E6B3E9869201D046C7916AFC.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-pp.com/repo/GOOFL/3/3133382e3138352e3233312e302f32342d3234203d3e203437303635.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.185.231.0/24
Signature Algorithm: sha256WithRSAEncryption
78:cb:5f:72:c8:7f:b1:bc:19:48:66:2a:e6:1d:e5:8f:f2:3b:
7b:8e:82:3d:6c:60:30:8c:59:93:10:ee:3e:a8:38:e1:8a:5f:
dc:88:5c:ca:7d:50:1f:fc:e4:46:4c:24:24:f0:8c:53:58:a2:
a1:4c:79:1a:b8:56:cb:af:b4:a3:c3:25:12:65:fb:22:df:7e:
de:8a:ae:4c:31:c3:7f:76:5b:da:42:77:aa:0d:54:e5:8e:be:
65:d9:f4:69:13:3a:de:11:12:44:a8:d0:84:6d:fd:96:64:4a:
47:ec:2c:d8:13:75:b1:b8:b9:b1:94:c5:2f:6c:02:5f:cf:5b:
ca:69:03:69:d4:59:4a:cd:47:53:31:d8:0b:c9:f9:a8:75:a8:
27:98:d1:38:22:38:57:41:19:87:41:f2:30:34:87:45:e7:df:
51:47:5a:3e:f1:54:5d:c7:95:16:d0:51:e9:93:d5:b6:21:6d:
45:ec:c4:59:5a:26:46:8a:7f:99:fa:dc:0a:82:92:e7:89:17:
35:14:94:7f:e9:da:4c:94:f2:68:d9:7d:2c:f6:f4:a6:dc:67:
0a:e0:da:ff:8e:4d:20:9e:a9:71:b1:44:25:c6:eb:02:04:31:
3e:6b:75:23:99:1d:5d:5c:08:cb:f2:5f:bf:a4:68:1d:d3:ea:
ea:0e:cc:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 12:03:35 2026 by rpki-client