Route Origin Authorization

$ rpki-client -vvvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3732313a3a2f34382d3438203d3e20313938303235.roa
File:                     326131343a373538303a3732313a3a2f34382d3438203d3e20313938303235.roa (raw, json)
Hash identifier:          Ud7ukTwzaOfSzL3RK4ZVoHA5pe1qskOSwzJn5Ws05NE=
Subject key identifier:   BD:E1:10:50:62:9F:B5:3B:79:6C:23:59:1F:63:3C:FC:D9:04:FF:FD
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       6C661144EAFC8430EF08CE3E24E05F9B4A11DE3C
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3732313a3a2f34382d3438203d3e20313938303235.roa
Signing time:             Mon 14 Sep 2026 13:14:24 +0000
ROA not before:           Mon 14 Sep 2026 13:09:24 +0000
ROA not after:            Mon 13 Sep 2027 13:14:24 +0000
asID:                     198025
IP address blocks:        2a14:7580:721::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:66:11:44:ea:fc:84:30:ef:08:ce:3e:24:e0:5f:9b:4a:11:de:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Sep 14 13:09:24 2026 GMT
            Not After : Sep 13 13:14:24 2027 GMT
        Subject: CN=BDE11050629FB53B796C23591F633CFCD904FFFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:6f:2e:0f:4b:46:21:f8:f0:02:eb:e0:8f:32:
                    4c:5c:ab:97:ee:99:45:ac:ba:fb:f4:c9:5a:4d:04:
                    03:2b:be:f5:7d:81:11:f0:34:58:17:cd:37:23:f4:
                    d6:2a:d7:af:b5:77:92:fc:b4:a8:d7:9a:39:f9:36:
                    59:69:83:80:6e:be:02:71:e3:86:a8:fb:f9:2f:65:
                    c8:5e:4f:fb:d9:c7:36:cc:bc:a3:12:84:b5:f0:4f:
                    68:e2:8e:df:f9:b8:17:99:f2:86:61:eb:78:ef:37:
                    1d:bd:5f:c7:13:3f:4d:e0:f9:73:c2:24:b1:5c:4c:
                    eb:3f:8b:a0:c1:6d:03:0c:c0:8d:55:29:b3:a7:be:
                    45:93:d6:85:db:b6:53:7f:0b:a3:1c:f8:7a:66:fa:
                    50:6e:67:3c:30:91:f8:0b:f6:a9:f5:52:a6:5b:cb:
                    c1:10:b4:35:8d:cd:c5:ab:f7:36:74:87:16:a4:d2:
                    37:cf:d9:49:37:b7:e3:e7:79:e1:69:94:2c:de:b2:
                    5a:32:bc:dc:1b:77:6c:7b:46:10:0f:b7:2d:d5:41:
                    54:c6:1c:3e:ed:09:b9:96:a0:6d:6d:c6:9f:c8:4b:
                    78:c2:87:22:ca:b5:c4:df:11:83:68:65:ac:03:2d:
                    a0:1c:b7:d5:bc:2c:5a:73:6a:4c:9a:9b:5d:12:81:
                    d1:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:E1:10:50:62:9F:B5:3B:79:6C:23:59:1F:63:3C:FC:D9:04:FF:FD
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3732313a3a2f34382d3438203d3e20313938303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:721::/48

    Signature Algorithm: sha256WithRSAEncryption
         06:cc:28:6f:f9:6e:e0:25:42:19:0e:5e:ec:40:76:97:a8:c4:
         90:53:21:95:fe:f4:61:6c:17:3d:31:fa:84:37:c4:8d:b0:bd:
         75:ba:ac:69:c3:d1:ab:99:e1:c5:fe:f9:cd:91:38:dd:0a:7d:
         50:16:54:b0:c0:a0:ab:44:cb:f8:30:3e:80:1d:cd:f3:bf:84:
         c8:8f:74:a8:38:e0:5d:ff:ff:33:4e:ab:24:77:a0:ab:92:45:
         84:b7:10:ed:e0:df:71:0b:42:b9:e2:22:c0:4c:26:3e:05:a5:
         d6:0d:6c:46:a0:6d:8c:c1:04:2a:9b:92:15:9f:b3:b8:6a:81:
         f1:78:2f:00:f7:e2:44:a9:ef:5e:29:ed:d9:84:cc:ae:13:17:
         bd:10:43:77:01:fe:66:56:48:38:44:2a:20:1f:bd:ab:e1:a3:
         cd:a8:d8:98:a0:78:98:53:59:58:d5:05:ef:e2:ab:05:c0:29:
         55:a4:18:0f:a7:a5:4c:e0:b4:89:fe:b5:8d:a6:5d:2c:3b:7b:
         1c:b2:fd:8b:c8:c0:d5:8e:b4:0f:4e:d0:92:ef:16:41:84:f6:
         84:02:4b:b2:22:19:1c:ab:b4:fd:70:51:12:35:57:61:7a:26:
         85:63:a5:48:15:41:61:a3:ef:81:88:b1:f3:62:60:03:59:41:
         2e:b7:c5:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 19:48:53 2026 by rpki-client