Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3735303a3a2f34372d3438203d3e20313534313835.roa
File:                     326131343a373538303a3735303a3a2f34372d3438203d3e20313534313835.roa (raw, json)
Hash identifier:          8K7okE0w6Q9taHg8ohlFBtT6L7BNRj3tU/Xf8wbcLyM=
Subject key identifier:   C6:DA:7F:3D:B2:40:3C:36:12:28:50:E6:96:CA:35:F2:19:0B:A1:F9
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       67159343F7A22A11A9CD3B79AE5F8F49B34120EF
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3735303a3a2f34372d3438203d3e20313534313835.roa
Signing time:             Thu 09 Oct 2025 07:12:55 +0000
ROA not before:           Thu 09 Oct 2025 07:07:55 +0000
ROA not after:            Thu 08 Oct 2026 07:12:55 +0000
asID:                     154185
IP address blocks:        2a14:7580:750::/47 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Oct 2025 09:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:15:93:43:f7:a2:2a:11:a9:cd:3b:79:ae:5f:8f:49:b3:41:20:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Oct  9 07:07:55 2025 GMT
            Not After : Oct  8 07:12:55 2026 GMT
        Subject: CN=C6DA7F3DB2403C36122850E696CA35F2190BA1F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:5f:eb:e5:17:6e:38:28:69:36:b2:c0:20:ba:
                    e5:97:03:4f:f2:59:0f:d0:56:ce:60:0e:74:f1:1e:
                    66:7a:e4:c1:6d:83:c8:ad:e0:a0:91:f0:25:fc:74:
                    be:93:76:64:2f:d0:de:ba:2c:2e:4e:76:67:32:17:
                    e0:a2:4d:aa:e9:d1:6e:b7:55:9d:dc:8e:c7:02:35:
                    23:72:58:97:d5:6f:f8:36:be:b1:ec:e5:4d:af:29:
                    8a:ec:fa:d3:4c:40:5b:c0:45:43:b7:44:5d:47:6c:
                    ff:3a:24:3b:0e:d9:41:04:73:67:76:ae:1d:f9:44:
                    08:aa:27:0f:8d:82:e5:8c:c9:a7:63:ab:47:57:43:
                    e8:8d:ad:35:c8:c8:91:23:08:fc:e5:32:96:1a:7c:
                    14:50:1b:72:54:10:10:11:8f:3d:95:f0:eb:ae:80:
                    31:24:64:a1:dc:72:9d:62:db:13:54:0b:3a:52:ac:
                    58:44:87:e4:5a:ab:24:27:51:05:bf:30:61:24:43:
                    80:40:bd:91:d5:11:6a:38:f0:64:a1:d7:07:c6:2f:
                    c2:32:84:61:ca:cb:a9:c4:15:b1:09:71:a2:09:cb:
                    c1:e0:5c:1c:12:ae:63:9d:99:41:6f:6a:4e:d8:d7:
                    08:11:97:f7:72:1e:9c:99:25:64:6a:9c:5c:01:9f:
                    e9:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:DA:7F:3D:B2:40:3C:36:12:28:50:E6:96:CA:35:F2:19:0B:A1:F9
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3735303a3a2f34372d3438203d3e20313534313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:750::/47

    Signature Algorithm: sha256WithRSAEncryption
         41:dc:04:14:a9:d3:23:a8:1e:b7:ae:90:bf:68:29:f8:8b:14:
         2e:6c:f8:a6:d8:bd:76:48:81:21:f7:d9:96:83:a8:b5:7d:26:
         a0:a8:12:5b:0c:fd:c1:c0:c5:96:de:dc:e7:09:0f:73:94:32:
         ce:f6:00:4d:ec:8c:79:8c:fb:91:9f:47:b5:fc:f5:f4:ac:33:
         84:fc:d7:a6:55:d1:9a:45:d1:68:77:0f:b0:00:82:70:74:ed:
         0d:52:ba:8b:5d:9a:ec:ea:05:6c:9a:44:28:24:4d:01:62:ce:
         37:96:67:67:6d:62:d2:25:d4:d8:f5:a7:6e:75:f4:e8:89:30:
         8e:ea:10:d1:16:93:6b:d0:57:af:2c:26:33:59:10:31:18:b2:
         92:5f:bb:dd:77:8d:f0:89:f4:80:c8:3a:08:70:17:46:34:04:
         e5:35:5e:7b:aa:ac:38:19:0f:f6:ab:08:da:9d:06:cb:22:5b:
         a7:eb:34:b5:7e:91:96:96:a0:79:d0:8c:e1:10:2c:a4:02:0c:
         d9:2b:c3:39:61:4c:03:50:a2:ee:d2:ce:3e:dc:c1:33:16:31:
         f4:47:53:37:f8:8c:f7:00:fc:36:c0:e6:aa:dc:12:71:ee:98:
         d7:99:71:7a:a3:38:42:a5:76:ab:f4:ca:56:22:8b:37:6f:fb:
         68:40:8e:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 12:22:47 2025 by rpki-client