Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/0/326131343a3763323a313032323a3a2f34382d3438203d3e203230343733.roa
File: 326131343a3763323a313032323a3a2f34382d3438203d3e203230343733.roa (raw, json)
Hash identifier: lmsU4Ru6WU6LD+Trpra0hPmekL3FYErdA4kEIEpXNJY=
Subject key identifier: 1D:A8:1F:1A:F9:E1:54:A3:E1:D3:FC:F2:AF:90:71:49:21:EA:24:41
Certificate issuer: /CN=43FB377824B048048B8756B6C65C599B82AEB5B9
Certificate serial: 60E403145507EF144A755455472CB397B6D7E767
Authority key identifier: 43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
Subject info access: rsync://repo.rpki.space/repo/Pfcloud/0/326131343a3763323a313032323a3a2f34382d3438203d3e203230343733.roa
Signing time: Sat 10 May 2025 13:43:18 +0000
ROA not before: Sat 10 May 2025 13:38:18 +0000
ROA not after: Sat 09 May 2026 13:43:18 +0000
asID: 20473
IP address blocks: 2a14:7c2:1022::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
60:e4:03:14:55:07:ef:14:4a:75:54:55:47:2c:b3:97:b6:d7:e7:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FB377824B048048B8756B6C65C599B82AEB5B9
Validity
Not Before: May 10 13:38:18 2025 GMT
Not After : May 9 13:43:18 2026 GMT
Subject: CN=1DA81F1AF9E154A3E1D3FCF2AF90714921EA2441
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:1f:d3:d9:b1:df:53:a7:f0:4b:1d:bd:43:51:
6a:34:1e:5f:1b:98:4d:c2:8d:9e:e8:bc:e9:b2:93:
07:87:dd:ea:95:eb:dc:78:5c:c9:da:e7:da:b6:a0:
05:7f:46:ef:13:1b:49:0a:04:b5:45:49:3e:9e:d1:
4f:6e:6e:e8:ee:3b:b0:cc:35:b2:93:25:43:a5:6c:
56:64:69:be:9d:00:a1:36:d6:b7:b3:90:b9:9d:4e:
d2:4f:09:26:83:f7:ee:23:18:d8:99:c2:90:bc:fb:
1f:35:77:fa:f1:a0:7a:36:4b:a8:6b:60:e7:11:07:
af:6b:f2:22:39:09:30:cb:cb:49:7f:5f:cf:ed:24:
c6:ea:3d:61:ea:47:23:bc:18:07:63:50:be:48:1b:
db:fb:e5:f3:05:7d:7a:1d:ca:b7:f8:45:06:48:51:
e5:8e:13:a2:90:66:c4:44:1f:54:3b:2f:43:5f:07:
44:f6:a7:82:ca:0b:b4:f9:4c:3f:85:3e:ab:a3:ca:
90:94:04:33:ad:3b:d6:18:fb:4c:70:93:6d:e4:25:
83:c8:b8:b0:e5:cf:bd:f2:82:23:08:83:1e:b2:a9:
53:69:09:44:9a:25:f6:57:fd:e9:16:6e:c4:e5:69:
4f:aa:fe:09:84:c2:cc:27:7e:bd:41:a0:3b:e4:9e:
2e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:A8:1F:1A:F9:E1:54:A3:E1:D3:FC:F2:AF:90:71:49:21:EA:24:41
X509v3 Authority Key Identifier:
keyid:43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/0/326131343a3763323a313032323a3a2f34382d3438203d3e203230343733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c2:1022::/48
Signature Algorithm: sha256WithRSAEncryption
8a:47:e5:46:87:27:84:33:9a:e6:9a:9e:d9:7d:8b:b6:ad:8e:
b8:f8:09:ed:1a:67:96:a4:b2:6b:70:8d:36:89:7e:0d:01:fb:
43:36:d0:79:7e:be:d4:c7:e1:4d:64:81:22:6f:60:9a:06:2e:
05:5b:5b:8e:41:be:45:24:b4:8d:f4:31:62:6c:65:74:e1:9b:
13:bd:f2:d2:c2:80:c7:4d:7e:c9:78:da:94:b5:0f:ac:29:9a:
f7:81:28:f1:b9:01:d0:13:95:20:2d:e9:75:0a:02:5e:43:cd:
59:90:54:85:fc:30:1d:fe:85:a5:91:b3:a5:e2:fb:fa:d1:5d:
52:ad:b9:ca:67:4a:90:ff:32:ac:ba:a4:e2:5c:2d:28:43:08:
a6:42:9b:45:54:90:28:31:0f:87:29:79:53:3c:ab:13:25:43:
af:29:f4:2c:dd:2e:09:29:9f:1c:b9:4c:87:30:0a:dd:1e:21:
89:f1:d0:2c:70:4b:a9:b4:f5:f9:41:d8:6b:46:5b:90:e2:89:
85:20:7c:b0:77:b2:0f:3d:d2:89:b1:55:72:27:aa:0b:a9:21:
d9:e7:c2:f7:68:1b:2c:dd:9a:ef:26:a6:32:23:d4:22:35:97:
2e:4a:ee:d2:2e:f8:26:ca:76:f9:4d:bd:6a:ab:93:ac:f3:88:
53:cc:45:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:18:24 2025 by rpki-client