Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20313534313835.roa
File:                     326130663a316363353a666666663a3a2f34382d3438203d3e20313534313835.roa (raw, json)
Hash identifier:          XvIRVJWSzGf8in3fTtGTvjvqjc1g6pQk9NZzV+g/Q3o=
Subject key identifier:   4C:7E:F6:53:68:AE:E5:AD:A8:86:13:FD:2A:59:8E:B0:7B:55:6E:59
Certificate issuer:       /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Certificate serial:       1B88EE5511E9A588073F99391A6A1FBEE00F2474
Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20313534313835.roa
Signing time:             Wed 18 Mar 2026 16:45:16 +0000
ROA not before:           Wed 18 Mar 2026 16:40:16 +0000
ROA not after:            Wed 17 Mar 2027 16:45:16 +0000
asID:                     154185
IP address blocks:        2a0f:1cc5:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:88:ee:55:11:e9:a5:88:07:3f:99:39:1a:6a:1f:be:e0:0f:24:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
        Validity
            Not Before: Mar 18 16:40:16 2026 GMT
            Not After : Mar 17 16:45:16 2027 GMT
        Subject: CN=4C7EF65368AEE5ADA88613FD2A598EB07B556E59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:82:78:59:26:df:52:cd:0e:80:ab:89:d6:91:
                    27:61:ec:d8:cd:cb:a4:e8:f1:28:26:d3:b9:96:be:
                    a6:d4:5e:3a:fd:ab:53:05:70:ae:07:64:2b:e2:f4:
                    f1:f3:f1:e9:d6:af:84:fc:4f:92:d3:b4:21:16:12:
                    57:99:4e:4e:00:90:c1:6b:b7:0a:dc:9c:4b:c8:7e:
                    93:a4:49:30:48:97:6b:d7:43:f3:a2:3f:86:35:5e:
                    18:1e:4b:43:d6:93:cd:10:74:63:c9:79:cf:e5:1c:
                    51:4f:0f:b0:f3:dc:f2:7f:f0:57:ab:b8:5f:e9:d1:
                    97:b6:51:17:a4:db:10:ce:58:2c:44:ad:d8:b9:0d:
                    d0:26:2e:7a:71:99:bd:f3:4e:87:88:48:ee:3b:e1:
                    eb:af:8f:51:2d:93:bc:cf:11:93:f4:fe:bb:48:23:
                    41:ea:e1:dd:c0:4b:25:2d:34:7a:3c:f9:d9:f9:ca:
                    f8:7d:76:cb:a9:4b:a6:da:6a:eb:e0:76:bc:5f:7a:
                    cb:57:2e:d2:3f:50:63:81:0c:f7:01:d1:5c:c3:37:
                    ff:2b:ce:24:1b:b7:dc:ca:93:e3:0a:3e:a4:a3:2e:
                    70:07:65:2c:68:8b:3b:2b:ea:03:c1:1e:90:8a:ce:
                    0d:a0:13:95:12:59:83:d9:9a:e5:0c:28:bb:3f:f7:
                    35:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7E:F6:53:68:AE:E5:AD:A8:86:13:FD:2A:59:8E:B0:7B:55:6E:59
            X509v3 Authority Key Identifier:
                keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20313534313835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:38:a9:68:d8:6d:7a:6d:b7:99:f6:0f:b4:56:63:9e:04:23:
         ec:60:0d:38:98:13:31:6a:a2:bc:00:f4:b5:bf:5c:12:aa:59:
         c4:8b:af:69:bc:c5:89:f1:fc:5a:e6:2f:5e:25:46:dd:b8:b5:
         bf:40:54:59:91:7c:aa:32:e7:29:05:ad:34:75:fd:d5:24:4d:
         bb:ed:6e:5a:0c:8f:c7:cd:75:87:b1:7c:e4:ea:93:71:41:20:
         f2:cf:ef:16:15:05:9d:d3:c9:03:2a:6d:04:a2:f7:46:cf:13:
         19:6c:64:64:e2:09:55:d8:05:89:6b:6b:c5:df:61:a9:72:2e:
         d0:f0:99:ec:d5:ce:2b:76:52:39:0e:ad:ef:1e:f2:a0:66:ba:
         3b:0b:3c:6d:44:62:0f:e0:15:35:73:f8:e6:cc:0c:e5:b5:a6:
         42:1f:3e:75:a3:d3:a8:94:14:87:b3:1d:7d:ad:33:29:04:32:
         06:6d:46:f1:ac:98:0d:4d:18:f0:10:62:0f:c6:0a:92:6e:f6:
         c6:a4:d3:b7:75:a1:4c:83:88:7d:c6:2c:68:dd:2b:02:61:93:
         70:d3:6a:f1:82:c2:92:77:1d:6e:5c:42:06:ff:1f:bc:81:3e:
         cd:7b:81:28:18:5c:0e:b8:0b:01:d5:78:5e:45:58:a5:cb:6c:
         ef:32:cb:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:58 2026 by rpki-client