Route Origin Authorization

$ rpki-client -vvvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3762303a3a2f34342d3438203d3e20313938303235.roa
File:                     326131343a373538303a3762303a3a2f34342d3438203d3e20313938303235.roa (raw, json)
Hash identifier:          84oSZtuQ5JalYX5gJweQyLdZSUWzJ8kMga9DtJ+GmmE=
Subject key identifier:   1B:50:F0:DF:EF:06:BB:DC:2C:AF:F1:CF:DF:5D:B3:75:B2:07:E2:7A
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       11175C0B7E64396E30AF21362AE31D3D468D2A8E
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3762303a3a2f34342d3438203d3e20313938303235.roa
Signing time:             Mon 14 Sep 2026 13:14:24 +0000
ROA not before:           Mon 14 Sep 2026 13:09:24 +0000
ROA not after:            Mon 13 Sep 2027 13:14:24 +0000
asID:                     198025
IP address blocks:        2a14:7580:7b0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 12:21:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:17:5c:0b:7e:64:39:6e:30:af:21:36:2a:e3:1d:3d:46:8d:2a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Sep 14 13:09:24 2026 GMT
            Not After : Sep 13 13:14:24 2027 GMT
        Subject: CN=1B50F0DFEF06BBDC2CAFF1CFDF5DB375B207E27A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:8d:34:54:a7:93:64:57:7b:f7:17:dc:81:
                    0a:77:41:29:1f:5e:a5:6d:4e:c2:38:c9:da:2f:5d:
                    e0:3e:d5:22:29:41:fc:d8:e8:68:7b:e9:c5:ff:fe:
                    5b:cd:77:f7:e0:c5:58:65:47:7c:8e:0a:a0:7b:cd:
                    eb:18:3e:11:a6:c8:79:23:bd:a8:04:56:4a:aa:8d:
                    c6:34:6e:aa:1c:65:a9:04:5e:ab:8e:05:25:9c:a2:
                    92:b2:54:5e:0e:4a:ca:72:fb:a8:3f:25:7d:1b:b1:
                    f1:7c:b2:3b:48:02:e5:95:3e:f4:45:c3:bc:11:42:
                    b0:b5:91:39:ce:0e:fd:75:55:02:5d:f7:33:c3:87:
                    64:95:6e:f0:83:f0:0b:d4:e7:43:a8:06:4c:11:f9:
                    9d:a4:57:9e:73:0c:41:97:2c:13:cc:5d:ce:4a:e7:
                    0e:4f:16:e3:b2:bf:31:74:f5:33:53:ed:30:f3:04:
                    eb:60:dc:d3:65:c4:bf:ff:a8:05:d2:42:5e:bf:04:
                    7f:61:d8:fb:e0:6f:eb:71:54:81:19:e2:8c:12:e7:
                    0d:f5:d0:08:c9:f4:d4:fc:bb:96:c0:62:d4:3a:2c:
                    b3:66:23:d5:5c:80:a8:23:64:37:32:59:5e:3d:ae:
                    4c:6e:99:e7:c1:44:f6:e6:46:7c:91:35:d9:57:91:
                    6c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:50:F0:DF:EF:06:BB:DC:2C:AF:F1:CF:DF:5D:B3:75:B2:07:E2:7A
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3762303a3a2f34342d3438203d3e20313938303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:7b0::/44

    Signature Algorithm: sha256WithRSAEncryption
         28:86:98:22:02:be:9a:59:6d:2b:53:62:ce:83:b7:f5:91:07:
         cb:61:c8:c8:32:07:f4:c8:a0:df:b8:62:b6:d3:94:98:4c:ad:
         95:73:88:6c:ee:72:6e:38:09:95:e5:a7:f4:61:e6:9a:a7:e4:
         22:02:e6:3f:89:1c:00:32:79:f5:3a:7f:8a:4e:43:35:b5:63:
         a0:cb:64:49:ba:ae:da:f0:3d:10:c3:99:1a:d6:e8:0c:84:61:
         a7:e9:14:1b:0e:8c:4b:85:a3:6c:19:c9:cb:59:14:f0:13:cd:
         79:f0:8a:5e:d7:c4:7b:40:33:e5:f2:f0:89:09:23:04:b6:fe:
         2e:e6:02:68:1f:a5:1c:15:7f:62:29:ff:9e:6b:52:8f:6c:a9:
         b1:a2:95:22:df:94:b5:b9:ad:0f:f7:9c:a3:de:78:0b:87:85:
         a5:f7:73:52:5d:42:31:12:b3:2e:2f:db:8a:8c:73:28:7f:bc:
         60:d7:8f:87:3d:68:57:d6:b0:8e:42:32:25:95:2a:eb:ec:58:
         88:a5:4d:f0:c7:26:8b:88:ac:7f:e8:c0:94:52:e5:aa:9d:94:
         5f:5c:70:b4:98:9c:b2:5b:e3:f3:a0:5b:d9:6c:d1:00:82:9e:
         f6:47:dc:b0:3c:fe:21:22:1d:c9:f6:cc:25:98:db:b7:e0:52:
         76:58:a8:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:52:48 2026 by rpki-client