Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323031393434.roa
File:                     326130663a316363353a666666663a3a2f34382d3438203d3e20323031393434.roa (raw, json)
Hash identifier:          dlBB5kDMY/ExUSgcKCKh+pA6Kxbhv9tnTJsR5sn7im0=
Subject key identifier:   86:CC:A2:17:15:F6:F6:E9:0F:FB:1C:8C:C0:C8:23:3F:68:6C:B9:8B
Certificate issuer:       /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Certificate serial:       71B5CDE7DDAB278D8E605D753F16D25F1351F050
Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323031393434.roa
Signing time:             Wed 18 Mar 2026 16:45:08 +0000
ROA not before:           Wed 18 Mar 2026 16:40:08 +0000
ROA not after:            Wed 17 Mar 2027 16:45:08 +0000
asID:                     201944
IP address blocks:        2a0f:1cc5:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:b5:cd:e7:dd:ab:27:8d:8e:60:5d:75:3f:16:d2:5f:13:51:f0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
        Validity
            Not Before: Mar 18 16:40:08 2026 GMT
            Not After : Mar 17 16:45:08 2027 GMT
        Subject: CN=86CCA21715F6F6E90FFB1C8CC0C8233F686CB98B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:cf:0e:e6:1d:6a:2d:85:55:30:79:de:fa:
                    d2:86:e7:27:7a:75:af:0f:8c:9e:9f:96:a2:9e:4d:
                    de:63:fc:32:88:f4:ab:11:77:5d:70:48:af:0d:cc:
                    ed:b9:5a:d6:d7:83:c2:f2:1f:ca:e0:e6:62:bf:a3:
                    0d:89:ef:dc:43:a8:3a:5f:70:91:5e:c8:fc:59:f3:
                    bb:d6:93:a7:b6:52:c7:2e:2f:d3:48:88:9c:2d:3a:
                    de:72:aa:80:2f:68:a2:6c:61:ed:e0:9c:37:e4:da:
                    7d:f9:68:a2:f2:77:7c:c7:49:3f:4f:f5:da:85:cc:
                    9b:a1:f6:b5:c0:a1:b7:01:d7:27:7d:ad:f1:a1:dd:
                    31:58:0d:ef:cb:87:7f:e2:8f:76:16:f2:5f:cb:85:
                    93:8d:44:c7:44:51:c2:d6:7e:4f:22:e8:02:65:fb:
                    14:49:67:a2:6e:6c:ea:30:73:98:3d:12:d3:f6:5a:
                    d7:8a:b1:ae:92:10:5e:99:fb:16:73:9c:02:7f:34:
                    07:5a:db:f7:d3:e3:44:ca:5d:98:35:c8:41:29:7f:
                    5f:61:05:c2:44:55:94:b4:90:47:42:88:2c:30:df:
                    a0:15:0c:0d:f4:69:44:d5:4a:e3:f1:73:64:47:96:
                    9a:a3:3f:6f:b8:d5:ae:e0:20:18:8a:99:ef:5b:f7:
                    d7:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:CC:A2:17:15:F6:F6:E9:0F:FB:1C:8C:C0:C8:23:3F:68:6C:B9:8B
            X509v3 Authority Key Identifier:
                keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323031393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:49:d9:ce:96:f8:cc:04:20:30:d1:5c:e2:81:17:a9:70:4f:
         3e:e7:50:13:f6:d9:bb:7a:ca:7a:f2:6c:b6:a4:22:56:d7:0e:
         d1:ad:41:5b:32:19:53:05:79:a1:0f:50:ee:a1:c6:87:4d:3f:
         9e:77:38:d4:a7:62:98:3c:a8:44:8f:ed:87:6b:16:1c:5b:77:
         ab:57:5b:b4:2a:63:64:a3:4a:b8:68:ec:74:d8:c3:9e:88:47:
         64:90:e8:20:90:e0:f4:2e:bb:0d:57:0d:22:e5:e3:4b:9c:65:
         0f:c0:c8:a5:d8:e9:4b:a6:00:da:4f:3d:8e:7c:c2:22:10:25:
         6b:60:2e:4b:1f:67:82:80:80:17:db:98:f3:92:0d:91:b2:c5:
         cc:68:8d:7e:f8:98:53:98:f2:31:b2:45:26:54:f7:75:85:a4:
         f4:05:f8:0d:1e:7d:37:15:55:c2:7e:ad:b0:72:99:7a:20:58:
         e0:a8:fa:3e:21:6e:95:bf:dd:45:50:ec:ec:1d:00:c9:2f:85:
         1f:05:c9:3a:ef:15:ef:a7:ad:a2:c6:95:b5:af:87:99:e1:38:
         56:ea:14:e0:5e:3a:0a:d0:8c:dd:7b:fb:21:62:a3:9e:04:4d:
         b4:ec:20:0b:20:6e:93:46:0d:2e:4e:25:d9:72:60:c4:98:20:
         82:38:25:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:16:42 2026 by rpki-client