Route Origin Authorization
$ rpki-client -vvf repo.rpki.space/repo/Pfcloud/0/326131343a3763323a3a2f33322d3438203d3e203531333936.roa
File: 326131343a3763323a3a2f33322d3438203d3e203531333936.roa (raw, json)
Hash identifier: Q4TanDo/03WlMBqXG5NZRk00E+9yiRjEKl9vjFnMALs=
Subject key identifier: 19:80:45:C3:CA:D9:12:14:DC:4A:7A:66:D6:97:92:51:EB:1A:4E:58
Certificate issuer: /CN=43FB377824B048048B8756B6C65C599B82AEB5B9
Certificate serial: 1E4A56BEFBCC2BDEBFB03417619558D0C0D9622B
Authority key identifier: 43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
Subject info access: rsync://repo.rpki.space/repo/Pfcloud/0/326131343a3763323a3a2f33322d3438203d3e203531333936.roa
Signing time: Tue 29 Apr 2025 16:19:19 +0000
ROA not before: Tue 29 Apr 2025 16:14:19 +0000
ROA not after: Tue 28 Apr 2026 16:19:19 +0000
asID: 51396
IP address blocks: 2a14:7c2::/32 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:4a:56:be:fb:cc:2b:de:bf:b0:34:17:61:95:58:d0:c0:d9:62:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43FB377824B048048B8756B6C65C599B82AEB5B9
Validity
Not Before: Apr 29 16:14:19 2025 GMT
Not After : Apr 28 16:19:19 2026 GMT
Subject: CN=198045C3CAD91214DC4A7A66D6979251EB1A4E58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:03:67:7e:9f:cf:d2:77:ec:19:81:5d:a6:12:
91:f1:e5:db:98:8a:bb:11:2b:5b:1a:fe:48:2c:48:
2e:2b:2c:f0:18:71:b9:be:09:6a:e9:58:ec:86:50:
9d:2f:a1:15:5a:a4:ef:dd:82:3b:21:bc:54:84:e4:
80:8c:89:22:73:d3:1e:d4:f5:af:06:3a:05:5a:bf:
7e:b6:de:33:55:c3:5b:d8:ad:57:4b:56:1d:98:14:
28:48:9a:43:67:c2:26:ac:1d:5a:1d:29:03:d0:ed:
fb:fe:49:0d:a9:86:ec:0e:5d:ca:27:7e:15:41:70:
80:8a:75:17:fd:cf:7b:d9:ef:40:52:ad:45:45:3e:
20:11:8d:d0:5d:10:cf:bd:42:fc:4d:28:86:f1:8d:
5f:64:bf:f5:f2:41:b7:5a:6f:ba:f4:1f:1f:69:7a:
98:f7:04:06:6e:1e:12:38:02:9c:c7:69:3a:91:4d:
1d:df:8d:a0:a1:b9:47:0c:23:d4:0b:f1:d7:3c:09:
06:77:a1:21:ab:d8:a4:dc:13:3c:fe:ac:ef:36:6e:
23:61:b2:4b:9b:f5:ae:eb:39:27:c9:3c:74:1b:09:
53:2a:1a:13:26:9b:0f:83:31:77:3b:ea:e5:71:c2:
ad:89:3a:af:02:67:4c:1f:c4:3c:da:13:61:67:49:
39:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:80:45:C3:CA:D9:12:14:DC:4A:7A:66:D6:97:92:51:EB:1A:4E:58
X509v3 Authority Key Identifier:
keyid:43:FB:37:78:24:B0:48:04:8B:87:56:B6:C6:5C:59:9B:82:AE:B5:B9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo.rpki.space/repo/Pfcloud/0/43FB377824B048048B8756B6C65C599B82AEB5B9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/43FB377824B048048B8756B6C65C599B82AEB5B9.cer
Subject Information Access:
Signed Object - URI:rsync://repo.rpki.space/repo/Pfcloud/0/326131343a3763323a3a2f33322d3438203d3e203531333936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:7c2::/32
Signature Algorithm: sha256WithRSAEncryption
56:56:c1:9a:ec:05:7d:ec:f2:21:69:2b:98:2f:7d:56:e5:79:
bf:de:d1:5c:4c:e7:41:50:5e:16:4f:98:c3:f7:ab:cd:f4:ef:
63:01:dc:7c:02:c1:52:23:86:9e:55:8e:ad:20:e3:3c:e0:1a:
42:1d:c5:7a:b0:f0:bd:fe:bf:6c:80:b9:dd:fb:94:4a:99:fd:
3b:12:61:98:e4:e2:0f:98:46:85:63:09:81:22:24:f9:71:bf:
20:0d:05:8e:7c:39:a5:61:84:33:d7:34:74:92:e6:93:e8:16:
33:d7:62:e7:e0:f6:d5:2b:2e:ce:21:83:1e:76:49:fd:69:67:
6f:9e:c0:a2:c5:cb:fe:6f:11:3b:0f:7a:26:2c:31:c0:51:4d:
28:be:9a:d0:84:2a:55:27:cc:5c:c3:08:24:ae:5f:f6:de:c4:
55:6b:95:57:f8:2f:86:62:4a:7b:52:8a:c0:c6:a6:7b:70:66:
ff:56:e7:12:8e:87:b2:cc:89:60:c2:89:64:4b:fc:c1:66:0d:
29:28:05:c9:59:0f:a0:04:6c:43:75:70:78:50:9f:f0:73:64:
25:54:ed:4a:eb:80:cf:37:b9:f7:38:ac:dc:ca:26:e5:4d:11:
62:4b:44:49:09:77:dc:e4:b2:c9:1e:22:37:70:d7:5c:a3:1f:
69:8c:94:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 27 16:18:24 2025 by rpki-client