Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20313531363733.roa
File:                     326130663a316363353a666666663a3a2f34382d3438203d3e20313531363733.roa (raw, json)
Hash identifier:          ZDVrDvhbCEZsEtpRfy7t1vsrK3cr48eiAFZaU02V90w=
Subject key identifier:   C5:5D:FC:8F:CD:DD:65:F0:75:FF:A3:CC:34:5E:E4:27:CC:95:C2:3F
Certificate issuer:       /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Certificate serial:       4C23FABE677CEF17DB43382C345DD797EE1EAB03
Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20313531363733.roa
Signing time:             Wed 18 Mar 2026 16:45:32 +0000
ROA not before:           Wed 18 Mar 2026 16:40:32 +0000
ROA not after:            Wed 17 Mar 2027 16:45:32 +0000
asID:                     151673
IP address blocks:        2a0f:1cc5:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:23:fa:be:67:7c:ef:17:db:43:38:2c:34:5d:d7:97:ee:1e:ab:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
        Validity
            Not Before: Mar 18 16:40:32 2026 GMT
            Not After : Mar 17 16:45:32 2027 GMT
        Subject: CN=C55DFC8FCDDD65F075FFA3CC345EE427CC95C23F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a7:3f:b2:a8:95:95:62:63:0e:d8:7f:cd:6a:
                    0d:09:2f:dd:92:b8:6a:59:73:89:b8:14:4d:93:9c:
                    ca:92:95:82:b6:e9:3e:ad:ff:fc:f6:05:61:4b:fb:
                    73:c8:f2:17:cb:7c:3a:6c:96:9d:e2:1b:99:5d:47:
                    c5:c5:fb:8f:79:5b:0f:28:cf:38:88:9f:8d:7d:91:
                    b0:c8:58:5e:21:c9:64:70:bc:38:57:54:45:3f:57:
                    60:d0:ba:0f:db:b6:83:7c:23:50:5d:89:ff:d6:2d:
                    eb:ae:63:b7:98:2e:df:30:63:2c:d6:25:e8:52:b6:
                    be:6e:41:d0:5d:b3:04:aa:8c:5c:6d:8c:56:ae:e8:
                    9a:8d:33:f9:7a:83:c0:c3:22:de:ba:02:01:36:55:
                    65:35:02:07:00:09:ee:a4:ca:b0:bf:28:ce:b4:e9:
                    7e:5a:88:5a:61:de:20:0d:29:1e:3a:f0:ec:cd:7d:
                    bd:a7:fc:ac:52:7f:a6:ad:fb:8f:bc:05:8b:a8:ce:
                    0e:12:f2:2f:2d:57:5d:0a:f6:7d:78:ad:42:dd:70:
                    0f:5e:6f:7a:a1:94:8f:6d:b0:62:e4:2c:6c:3f:ce:
                    1a:3b:8c:28:08:e4:5b:4c:fa:52:21:ba:45:a4:d2:
                    f8:3c:44:11:48:6e:37:3d:aa:9e:a5:48:32:88:7b:
                    6b:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:5D:FC:8F:CD:DD:65:F0:75:FF:A3:CC:34:5E:E4:27:CC:95:C2:3F
            X509v3 Authority Key Identifier:
                keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20313531363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:f5:8d:dd:e6:10:61:dd:9c:93:b4:46:04:04:44:2e:94:c8:
         71:30:bb:f6:b3:36:0f:db:31:0b:c3:b1:36:df:49:9d:37:00:
         6f:a9:96:35:36:21:6d:ae:a5:ac:d7:33:d8:82:0d:f8:1f:dc:
         0d:6e:7d:0b:9e:35:e6:eb:40:62:7d:9f:28:83:a2:e6:bf:1d:
         c3:09:f0:c3:88:c4:8d:5e:44:27:ca:06:40:1e:c1:8b:5e:d0:
         e9:2f:c1:6a:6a:33:c1:d0:0d:9c:15:53:5f:e5:a8:aa:ff:60:
         e4:00:ad:f6:ba:29:f3:8a:d5:59:b0:09:76:ff:55:6e:ff:b8:
         0e:44:f5:0a:09:f5:90:0a:a6:2a:58:b1:b1:03:45:01:f2:eb:
         82:e8:ee:b7:48:40:46:12:17:38:05:90:e1:13:74:84:cd:c5:
         a3:76:4e:18:fc:4b:2f:72:41:c0:06:bf:ba:2a:a0:60:98:71:
         01:8f:e5:94:49:0f:5c:8a:a5:30:ad:9a:67:c6:22:83:ea:cc:
         c8:fa:60:a5:d1:43:bd:79:62:f2:dd:66:f7:3b:53:1a:36:c4:
         a0:92:b2:f8:38:44:56:ba:3f:79:fe:13:de:84:d4:1f:d5:bc:
         ef:1a:c8:5c:b8:e5:f4:e8:c8:25:1b:d8:63:62:eb:4f:d3:0b:
         cf:dd:93:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:40 2026 by rpki-client