Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/1/326131343a373538303a6363303a3a2f34342d3438203d3e20323034353339.roa
File:                     326131343a373538303a6363303a3a2f34342d3438203d3e20323034353339.roa (raw, json)
Hash identifier:          ac2Mfh1KdbG2j82zStJziAG6i/zvAOzgIL5QigJdcX0=
Subject key identifier:   13:CF:12:8B:5D:B7:CE:30:D7:2F:DB:2F:93:5B:9F:DB:24:E8:78:BD
Certificate issuer:       /CN=00F736ADDA2A4172D32FC166E5EBA9341512CDC1
Certificate serial:       3E1A517FC794B75CE57CCC46B343D9366A93A2E2
Authority key identifier: 00:F7:36:AD:DA:2A:41:72:D3:2F:C1:66:E5:EB:A9:34:15:12:CD:C1
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/1/326131343a373538303a6363303a3a2f34342d3438203d3e20323034353339.roa
Signing time:             Sat 17 Jan 2026 19:11:23 +0000
ROA not before:           Sat 17 Jan 2026 19:06:23 +0000
ROA not after:            Sat 16 Jan 2027 19:11:23 +0000
asID:                     204539
IP address blocks:        2a14:7580:cc0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/1/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/1/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 11:22:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:1a:51:7f:c7:94:b7:5c:e5:7c:cc:46:b3:43:d9:36:6a:93:a2:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00F736ADDA2A4172D32FC166E5EBA9341512CDC1
        Validity
            Not Before: Jan 17 19:06:23 2026 GMT
            Not After : Jan 16 19:11:23 2027 GMT
        Subject: CN=13CF128B5DB7CE30D72FDB2F935B9FDB24E878BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c0:57:40:e0:76:c1:dc:6c:32:09:37:6a:1f:
                    62:a6:bb:6e:2c:68:ae:b5:d2:00:cf:83:1e:65:7a:
                    64:09:e2:1d:18:19:a9:79:c9:6e:16:b1:46:f7:43:
                    92:2b:80:d3:9f:8d:b0:eb:e3:d5:68:72:63:f7:fb:
                    44:d0:9b:56:ce:7c:80:ff:0c:51:ae:0e:e9:f4:af:
                    e6:da:0b:38:1c:ef:49:dd:5d:d8:df:6c:13:c1:07:
                    41:90:de:7e:26:a1:eb:d0:29:84:b6:78:d0:01:84:
                    16:d1:15:bf:00:fe:0a:a9:e4:82:35:59:19:d0:63:
                    ca:2a:11:e0:5e:78:17:bf:16:4e:ec:22:ed:60:3f:
                    24:bb:c2:fd:28:32:7f:41:fe:53:ed:52:72:f5:0f:
                    f0:8c:15:86:9b:53:17:69:d3:50:c1:ea:d9:5a:49:
                    3e:9c:78:d9:98:07:75:2d:ef:53:f7:27:8e:e5:28:
                    48:93:0e:4e:e8:9e:9c:3d:89:5c:5d:bd:fb:e2:a8:
                    84:f7:fe:c5:11:8c:dc:88:d3:a4:56:1a:fa:50:b4:
                    51:2e:81:d5:d5:c7:67:b2:32:27:26:64:ac:26:e4:
                    3b:c2:fa:d6:fc:70:d2:6a:d3:42:3d:6c:63:7f:70:
                    13:80:55:e0:ca:c5:d3:7f:01:d0:c7:ad:86:01:e4:
                    85:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:CF:12:8B:5D:B7:CE:30:D7:2F:DB:2F:93:5B:9F:DB:24:E8:78:BD
            X509v3 Authority Key Identifier:
                keyid:00:F7:36:AD:DA:2A:41:72:D3:2F:C1:66:E5:EB:A9:34:15:12:CD:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/1/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/00F736ADDA2A4172D32FC166E5EBA9341512CDC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/1/326131343a373538303a6363303a3a2f34342d3438203d3e20323034353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:cc0::/44

    Signature Algorithm: sha256WithRSAEncryption
         21:2b:de:e0:94:8b:11:64:63:0f:53:e9:6a:4e:e3:d5:ea:d2:
         c8:ef:30:1e:6f:d1:61:19:ae:0b:e4:db:9e:70:d8:2d:60:0a:
         ee:26:d0:f7:81:81:61:b1:0d:08:55:8e:55:ee:6c:10:ac:23:
         14:e2:30:5c:88:47:a0:ec:82:49:e0:f5:34:d2:43:dc:1a:11:
         0f:46:03:21:e3:bf:8a:89:29:46:31:ad:5c:f7:49:8d:6e:01:
         b9:16:e6:7b:98:1e:7d:46:2e:3c:7d:70:e6:86:b7:ec:5b:bc:
         a2:bb:c6:d0:13:b4:78:5d:91:31:11:33:b2:be:dd:67:e9:cd:
         43:0c:c1:71:0e:6e:8a:e7:cc:e0:94:3c:87:75:0a:2b:83:52:
         f4:7f:cf:2d:f5:9e:7c:31:d6:e0:43:8f:05:91:16:8b:0a:fc:
         0c:23:3a:5c:fc:51:75:cd:e1:ec:dc:04:bc:89:f8:f0:f1:39:
         57:c7:be:23:7d:0d:79:07:6e:67:48:cf:a0:a4:23:26:07:5d:
         f6:74:9c:f1:f9:fb:ef:60:a0:00:70:ba:13:f3:be:9d:b1:77:
         9f:b3:5c:29:05:c0:4d:d7:ca:88:67:f1:80:f3:9d:59:9b:d3:
         29:29:df:93:a7:6a:c2:d9:5a:7f:74:69:29:ca:fb:84:63:2e:
         0c:9c:9b:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:42:41 2026 by rpki-client