Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3731663a3a2f34382d3438203d3e20313531313934.roa
File:                     326131343a373538303a3731663a3a2f34382d3438203d3e20313531313934.roa (raw, json)
Hash identifier:          eBVDDBCATN4Z6IcdlByVapyoF1loRfygKov0A+GUUB0=
Subject key identifier:   E6:18:A2:DD:41:52:9C:41:CE:B2:40:3B:89:B5:39:0B:58:5B:9A:1D
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       5DBA22F911743B3F451B7E3201FED926DDE8FD9D
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3731663a3a2f34382d3438203d3e20313531313934.roa
Signing time:             Tue 04 Nov 2025 16:19:49 +0000
ROA not before:           Tue 04 Nov 2025 16:14:49 +0000
ROA not after:            Tue 03 Nov 2026 16:19:49 +0000
asID:                     151194
IP address blocks:        2a14:7580:71f::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Nov 2025 16:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ba:22:f9:11:74:3b:3f:45:1b:7e:32:01:fe:d9:26:dd:e8:fd:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Nov  4 16:14:49 2025 GMT
            Not After : Nov  3 16:19:49 2026 GMT
        Subject: CN=E618A2DD41529C41CEB2403B89B5390B585B9A1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d7:29:84:9c:b7:7d:d0:53:2b:28:80:cb:c5:
                    d8:32:fb:4d:24:8c:03:27:4a:df:09:f2:93:2b:52:
                    87:5b:2c:7a:5a:d8:1b:d6:46:58:5a:93:23:5e:b8:
                    da:70:7b:41:d6:1a:b1:b5:fd:ef:12:bf:85:a4:d7:
                    d5:ab:ac:2a:8b:f0:15:90:da:72:b2:78:ff:b5:62:
                    ec:60:d5:03:9d:30:a3:7a:26:20:6d:46:d7:1a:d3:
                    8d:19:a6:c4:f6:d2:5d:c3:6f:7f:d8:a3:13:0c:d0:
                    b2:70:1a:0c:23:c6:3c:5e:f1:cb:4a:fc:9e:2a:9d:
                    c5:e2:77:cf:87:06:a7:65:e0:ba:43:cc:21:7a:39:
                    dd:0a:10:24:d5:97:d3:53:4f:dc:fc:1f:ad:8f:2f:
                    75:d0:54:3d:bf:98:14:1a:5d:bd:94:48:57:b3:91:
                    00:3a:a1:c1:da:c4:b2:ef:95:e6:c8:c7:4d:16:b0:
                    78:c6:8c:b5:dc:cb:28:34:a5:e0:e9:1d:06:40:e7:
                    26:1a:5d:18:5f:04:ea:b1:a6:b7:2c:03:3f:09:12:
                    e9:25:ac:a0:d5:59:aa:29:dc:c2:b6:43:03:61:de:
                    19:f4:f0:a5:45:08:82:6f:de:e0:6f:63:d3:1b:c3:
                    86:53:f5:c5:ec:8d:45:4f:21:52:11:c0:e3:cb:e0:
                    e0:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:18:A2:DD:41:52:9C:41:CE:B2:40:3B:89:B5:39:0B:58:5B:9A:1D
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3731663a3a2f34382d3438203d3e20313531313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:71f::/48

    Signature Algorithm: sha256WithRSAEncryption
         3c:53:bb:fd:7c:f0:ee:6b:01:c7:d3:2d:e4:dd:aa:25:0e:16:
         4a:ca:45:0b:2f:3c:14:f0:48:75:a1:3a:15:50:90:af:df:9c:
         56:47:c0:f4:8f:59:12:31:85:57:a5:0d:4b:68:50:4a:70:e2:
         6e:52:ee:71:39:24:c3:94:05:e9:de:01:50:a7:a4:83:e3:ec:
         ff:2a:4c:eb:f4:1b:13:e1:00:56:3d:47:f2:10:63:86:ed:9a:
         62:01:67:eb:7a:a3:9a:ea:92:69:24:e7:29:4f:d0:ea:b6:e6:
         56:4d:39:e6:24:a2:59:0e:77:c9:a4:1c:58:fa:d4:0c:39:52:
         03:fa:43:4d:c4:71:30:aa:94:58:67:fd:1d:1d:21:86:5c:9b:
         6e:5d:4f:2c:32:ae:0e:65:19:5d:53:31:0b:85:dc:91:00:a8:
         ab:fd:1d:8a:dd:01:af:83:60:06:5b:85:8e:25:f4:07:41:58:
         6b:13:b0:03:10:a0:8a:30:fe:fa:3a:09:75:cb:a4:60:39:30:
         3a:bf:a5:e5:e0:d2:79:14:98:d8:80:ea:c2:46:91:90:27:ad:
         0d:ac:de:67:a1:df:bd:fe:4f:5d:28:1c:8a:b8:e3:ab:f1:49:
         3b:73:3e:5a:d5:b6:9c:9d:3a:5e:99:d6:bd:fb:aa:37:4b:53:
         29:12:9a:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 20:36:40 2025 by rpki-client