Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3763623a3a2f34382d3438203d3e20313938303235.roa
File:                     326131343a373538303a3763623a3a2f34382d3438203d3e20313938303235.roa (raw, json)
Hash identifier:          qzul46YAnC0dhe1Mr0VkNNr8LTd0RQOHaKUfiXALF6U=
Subject key identifier:   3F:2D:E7:8A:43:F1:EB:21:AD:0A:3C:D7:E8:F3:CF:FD:48:F9:6B:D6
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       5FA70788767447ACC444EF62A74111AF17054886
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3763623a3a2f34382d3438203d3e20313938303235.roa
Signing time:             Sat 27 Sep 2025 06:07:51 +0000
ROA not before:           Sat 27 Sep 2025 06:02:51 +0000
ROA not after:            Sat 26 Sep 2026 06:07:51 +0000
asID:                     198025
IP address blocks:        2a14:7580:7cb::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Oct 2025 15:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:a7:07:88:76:74:47:ac:c4:44:ef:62:a7:41:11:af:17:05:48:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Sep 27 06:02:51 2025 GMT
            Not After : Sep 26 06:07:51 2026 GMT
        Subject: CN=3F2DE78A43F1EB21AD0A3CD7E8F3CFFD48F96BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:58:ec:38:47:5b:a8:6e:a5:5d:b3:91:09:df:
                    d6:a7:8e:0a:d1:06:32:9b:bb:4f:9a:6c:a2:0e:59:
                    90:3d:8b:ff:3d:8e:10:98:fe:c2:72:58:c1:c7:51:
                    fb:6c:9f:ca:06:3e:81:f8:1e:e0:06:ff:e7:7c:50:
                    ad:2a:74:74:f0:81:d4:7d:ef:62:f8:68:00:ca:c8:
                    c2:da:1c:8c:8b:ee:e5:d2:60:cd:d4:e7:57:14:39:
                    80:13:89:d9:0a:7c:78:68:bd:d5:9e:40:21:a7:88:
                    e0:2f:5a:cf:32:da:5a:29:d3:7c:4d:ad:b6:50:73:
                    03:be:ca:a4:1e:b8:54:5f:17:aa:44:b0:24:31:2b:
                    cc:45:5b:f7:85:83:78:3b:5c:1e:64:71:aa:84:8a:
                    a1:8a:bd:03:bc:6a:0e:35:97:d3:72:23:7d:c6:91:
                    07:3e:07:80:a4:c6:ce:e3:9f:4b:6c:b2:d6:bf:87:
                    bb:93:85:32:56:a8:2b:df:5f:32:cb:db:04:15:c6:
                    5c:a3:04:c2:65:93:85:f7:17:6b:6f:bd:cf:ec:a8:
                    9b:0f:15:14:e2:53:68:10:f0:9d:48:2e:03:12:e8:
                    ba:d5:2e:d1:5e:33:29:09:65:2b:45:66:4c:98:f3:
                    c3:b0:36:47:04:3d:47:60:d0:88:2c:5a:57:d6:f0:
                    4b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:2D:E7:8A:43:F1:EB:21:AD:0A:3C:D7:E8:F3:CF:FD:48:F9:6B:D6
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3763623a3a2f34382d3438203d3e20313938303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:7cb::/48

    Signature Algorithm: sha256WithRSAEncryption
         15:8f:56:92:ed:52:94:ba:e9:f2:36:62:3d:03:69:9b:b0:8a:
         88:5c:dd:3d:6d:d8:7a:0a:9c:87:95:14:2f:e9:fe:e7:b8:47:
         ca:75:58:27:6d:54:8b:80:c1:01:3a:1f:6c:59:74:b5:08:00:
         b1:81:17:2a:64:32:17:67:b5:e9:45:15:57:21:4f:2f:80:2c:
         52:01:a0:bf:ba:9f:98:e4:14:98:1e:c0:01:d5:c4:16:f2:41:
         92:26:1f:39:33:a7:56:85:05:29:10:59:e6:64:9a:88:9a:07:
         be:9d:33:b5:a9:a7:6d:1a:d5:f1:f0:a0:20:33:74:d9:26:65:
         3e:8a:fe:58:e4:88:99:c8:aa:59:23:54:7d:e9:ee:93:00:fa:
         1e:8c:bb:e3:7f:80:b1:aa:71:e6:e2:bf:03:be:9f:12:e0:0d:
         27:fc:51:9a:2e:46:af:bf:2e:77:d6:bc:cd:ee:ad:8c:ba:60:
         13:09:b1:99:12:fd:3b:b6:f0:81:41:5a:bd:36:2d:fe:6b:21:
         13:bd:f0:c8:29:94:39:ec:d0:de:58:70:e3:ba:91:2d:79:ab:
         46:96:66:bd:8a:c4:f6:7f:25:19:6d:82:4a:30:1d:4c:ac:14:
         bc:87:6c:d3:af:8f:16:01:26:5a:48:8d:b6:a3:24:11:90:57:
         81:94:8e:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 01:07:01 2025 by rpki-client