Route Origin Authorization

$ rpki-client -vvvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3735383a3a2f34382d3438203d3e20313938303235.roa
File:                     326131343a373538303a3735383a3a2f34382d3438203d3e20313938303235.roa (raw, json)
Hash identifier:          9d0ALixkMSZSKl6JIjo5I2z5fjVwAQyUCPlLh2qTbnM=
Subject key identifier:   4B:33:33:F2:18:0D:65:AE:AC:80:9E:D1:32:2F:9F:45:9B:0A:1E:92
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       298375BC0F7FBED6C814FB114A0E1E547DF59D97
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3735383a3a2f34382d3438203d3e20313938303235.roa
Signing time:             Mon 14 Sep 2026 13:14:24 +0000
ROA not before:           Mon 14 Sep 2026 13:09:24 +0000
ROA not after:            Mon 13 Sep 2027 13:14:24 +0000
asID:                     198025
IP address blocks:        2a14:7580:758::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 00:49:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:83:75:bc:0f:7f:be:d6:c8:14:fb:11:4a:0e:1e:54:7d:f5:9d:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Sep 14 13:09:24 2026 GMT
            Not After : Sep 13 13:14:24 2027 GMT
        Subject: CN=4B3333F2180D65AEAC809ED1322F9F459B0A1E92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:80:3d:70:36:36:7a:18:df:fc:48:78:c5:14:
                    12:08:ed:94:5d:2a:12:3e:43:5f:1a:5a:63:ee:92:
                    b8:97:55:0b:6c:fe:51:53:d9:03:f8:75:e6:79:61:
                    67:2e:67:7f:77:88:8f:68:58:23:59:80:20:6a:82:
                    88:f1:4f:ff:98:75:9b:bf:98:1d:04:92:d5:42:ba:
                    74:c2:55:75:19:9f:b9:65:69:ea:46:8f:0e:50:9e:
                    34:0f:45:fe:97:ea:c1:c6:72:71:98:ff:ac:ad:0c:
                    d3:84:11:1e:d0:76:26:51:da:9b:67:95:ba:2d:fe:
                    15:f9:7a:eb:62:88:3d:67:a6:8d:02:27:da:35:13:
                    6f:85:95:ff:ef:48:df:c4:61:95:e1:11:f9:ee:4f:
                    85:05:1a:f7:bf:ae:13:c3:8e:d0:7d:01:52:a9:01:
                    53:0a:32:bb:94:12:33:cf:f7:41:51:1e:d8:b5:51:
                    37:bf:ea:ae:5e:80:22:5a:40:3b:f3:9d:f3:d3:ba:
                    50:78:b2:bf:89:81:1a:17:91:9c:e0:10:6f:35:93:
                    fc:5c:0a:f9:ea:7b:08:26:e5:e4:15:04:4e:58:40:
                    60:72:53:a4:2d:b1:45:5d:44:7b:3f:ad:9e:5d:00:
                    77:d7:4a:c9:31:f2:da:73:63:ec:f5:2f:9d:9d:24:
                    0a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:33:33:F2:18:0D:65:AE:AC:80:9E:D1:32:2F:9F:45:9B:0A:1E:92
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3735383a3a2f34382d3438203d3e20313938303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:758::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:f6:cb:07:a4:48:38:58:45:e2:86:cc:89:fd:f2:ed:e3:13:
         51:e8:27:4f:96:a7:cc:8c:ee:c6:16:42:44:65:a2:fd:8c:2f:
         b6:19:a4:cd:bc:57:8f:0d:11:a1:3a:8d:59:a9:1f:20:97:99:
         b7:71:4a:85:20:d9:4a:21:80:e8:4f:0d:29:0c:46:a3:43:d9:
         36:2c:89:bc:7e:c2:3d:b1:5b:4c:63:0c:8d:47:f7:8a:12:29:
         b9:06:e8:16:05:87:1c:3a:d0:47:00:cf:81:00:a1:6c:60:a3:
         93:c4:0a:ac:e7:29:3e:f9:ac:92:88:40:4d:77:08:01:5e:6a:
         21:7c:3f:04:98:52:b0:eb:27:c6:6d:2a:8d:43:55:20:a8:4f:
         27:b6:00:e9:b4:5a:17:23:c4:cb:07:f2:4a:a0:97:49:65:18:
         fb:b5:d6:18:39:4e:d8:cf:fb:17:1c:8f:39:f6:21:e9:03:41:
         13:48:56:90:ef:bc:14:45:e7:43:49:60:8f:27:6d:ec:62:5a:
         f6:a8:69:15:df:78:09:b4:d4:7f:fc:cc:cb:ef:40:ef:2b:03:
         54:7a:04:3e:56:35:9d:1b:ac:ce:7e:5c:a4:b8:25:72:77:2e:
         9d:98:7c:4e:aa:80:43:b0:2f:07:b2:d2:57:e9:0b:c0:3a:bc:
         a9:52:75:75
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUKYN1vA9/vtbIFPsRSg4eVH31nZcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjZERTZGQzdBQzQ2N0YxMEI1NzA1RTYwQjhGRERBMDJG
RkZENzM3ODAeFw0yNjA5MTQxMzA5MjRaFw0yNzA5MTMxMzE0MjRaMDMxMTAvBgNV
BAMTKDRCMzMzM0YyMTgwRDY1QUVBQzgwOUVEMTMyMkY5RjQ1OUIwQTFFOTIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqgD1wNjZ6GN/8SHjFFBII7ZRd
KhI+Q18aWmPukriXVQts/lFT2QP4deZ5YWcuZ393iI9oWCNZgCBqgojxT/+YdZu/
mB0EktVCunTCVXUZn7llaepGjw5QnjQPRf6X6sHGcnGY/6ytDNOEER7QdiZR2ptn
lbot/hX5eutiiD1npo0CJ9o1E2+Flf/vSN/EYZXhEfnuT4UFGve/rhPDjtB9AVKp
AVMKMruUEjPP90FRHti1UTe/6q5egCJaQDvznfPTulB4sr+JgRoXkZzgEG81k/xc
Cvnqewgm5eQVBE5YQGByU6QtsUVdRHs/rZ5dAHfXSskx8tpzY+z1L52dJArNAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUSzMz8hgNZa6sgJ7RMi+fRZsKHpIwHwYDVR0j
BBgwFoAU9t5vx6xGfxC1cF5guP3aAv/9c3gwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraS5heGl2b3JhLm5ldC9yZXBvL0F4aXZv
cmEtTmV0LzIvRjZERTZGQzdBQzQ2N0YxMEI1NzA1RTYwQjhGRERBMDJGRkZENzM3
OC5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2Zl
LTQyOTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNkRFNkZDN0FDNDY3RjEwQjU3MDVF
NjBCOEZEREEwMkZGRkQ3Mzc4LmNlcjCBigYIKwYBBQUHAQsEfjB8MHoGCCsGAQUF
BzALhm5yc3luYzovL3Jwa2kuYXhpdm9yYS5uZXQvcmVwby9BeGl2b3JhLU5ldC8y
LzMyNjEzMTM0M2EzNzM1MzgzMDNhMzczNTM4M2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzEzOTM4MzAzMjM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIG
CCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhR1gAdYMA0GCSqGSIb3DQEBCwUA
A4IBAQBR9ssHpEg4WEXihsyJ/fLt4xNR6CdPlqfMjO7GFkJEZaL9jC+2GaTNvFeP
DRGhOo1ZqR8gl5m3cUqFINlKIYDoTw0pDEajQ9k2LIm8fsI9sVtMYwyNR/eKEim5
BugWBYccOtBHAM+BAKFsYKOTxAqs5yk++aySiEBNdwgBXmohfD8EmFKw6yfGbSqN
Q1UgqE8ntgDptFoXI8TLB/JKoJdJZRj7tdYYOU7Yz/sXHI859iHpA0ETSFaQ77wU
RedDSWCPJ23sYlr2qGkV33gJtNR//MzL70DvKwNUegQ+VjWdG6zOflykuCVydy6d
mHxOqoBDsC8HstJX6QvAOrypUnV1
-----END CERTIFICATE-----
Generated at Mon Sep 21 11:46:06 2026 by rpki-client