Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323033313638.roa
File:                     326130663a316363353a666666663a3a2f34382d3438203d3e20323033313638.roa (raw, json)
Hash identifier:          WE34nV7FHZuV7JlAcB9jcQtvfr3rJELrwsUNpw0jdYE=
Subject key identifier:   D8:51:96:C6:1B:23:D5:BB:77:54:8B:59:41:1A:69:EE:C5:D8:64:7E
Certificate issuer:       /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Certificate serial:       0D3D641BDD4BCABEF625A76434040454F41CBB9A
Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323033313638.roa
Signing time:             Wed 18 Mar 2026 16:46:07 +0000
ROA not before:           Wed 18 Mar 2026 16:41:07 +0000
ROA not after:            Wed 17 Mar 2027 16:46:07 +0000
asID:                     203168
IP address blocks:        2a0f:1cc5:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:3d:64:1b:dd:4b:ca:be:f6:25:a7:64:34:04:04:54:f4:1c:bb:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
        Validity
            Not Before: Mar 18 16:41:07 2026 GMT
            Not After : Mar 17 16:46:07 2027 GMT
        Subject: CN=D85196C61B23D5BB77548B59411A69EEC5D8647E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0c:f1:9f:23:6f:30:4d:67:4b:df:86:be:b1:
                    1a:db:66:53:c7:7b:a3:7e:b3:24:6c:15:73:9b:45:
                    c8:ac:4b:c2:a7:93:0e:c6:b8:19:ae:5b:4b:ef:72:
                    aa:e2:82:b5:8b:8a:c8:ee:26:20:a1:9c:0b:2e:3c:
                    a5:4f:47:2d:f9:ac:02:8c:32:4a:b1:56:9a:49:64:
                    76:a9:05:e7:63:ad:fb:d2:12:44:53:fd:c9:ed:a3:
                    9e:41:b9:eb:a2:77:74:0b:77:83:46:3e:41:4d:f1:
                    75:ec:cf:1a:8c:6c:82:b0:47:f5:6a:3e:c5:6e:8b:
                    47:d0:cf:be:5e:73:5e:91:dd:3b:13:27:77:62:49:
                    89:cc:ef:b7:89:8f:da:68:ae:b7:88:1c:76:3d:01:
                    06:1c:a3:07:5e:e6:86:fc:a4:29:eb:8e:fe:1e:d9:
                    81:7c:b7:35:41:1f:35:9e:d0:5e:a4:8a:bc:79:89:
                    c0:d8:d1:fd:c7:01:51:0e:d1:06:ab:25:ba:86:a2:
                    a0:b6:0d:43:12:7b:9d:95:b4:76:85:e0:66:11:11:
                    08:84:23:3b:23:35:d1:7a:e7:19:00:0f:b0:34:20:
                    fd:35:37:df:cc:56:a3:09:1f:b4:9b:ac:37:f1:29:
                    16:e6:7b:8a:c5:4d:47:85:ca:e6:01:83:81:91:d8:
                    eb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:51:96:C6:1B:23:D5:BB:77:54:8B:59:41:1A:69:EE:C5:D8:64:7E
            X509v3 Authority Key Identifier:
                keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323033313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:14:8d:20:c4:8f:c8:8f:96:b6:4e:53:c3:93:87:6f:07:1f:
         f2:e0:f4:46:62:0d:a4:82:6a:68:b4:62:1e:12:34:98:6b:c6:
         8f:cd:c9:52:a7:0e:07:42:b3:a6:99:e0:3e:93:fc:d6:de:5c:
         4b:af:bb:8d:27:85:73:bc:41:ad:05:7e:45:98:fe:f2:6c:9d:
         e5:1b:e3:25:4e:d9:c6:01:e9:02:68:e0:33:ad:f2:64:0f:f1:
         a8:6a:38:64:da:81:63:07:28:e3:56:9f:34:e2:56:44:aa:db:
         92:d4:cc:d8:33:9a:d4:55:1d:24:d9:a8:36:e5:95:76:b7:e2:
         6f:1a:23:bc:52:f5:d8:50:38:b3:87:09:0e:9b:2c:be:7f:46:
         e7:80:2f:b9:07:18:d5:2f:e5:e3:44:6c:0a:f1:1a:22:18:ff:
         11:2b:c8:39:86:36:7c:16:1a:d8:78:c1:0a:ab:b4:21:e5:cc:
         2f:a1:18:d4:6b:3c:1a:8c:83:37:0a:29:6c:00:df:22:d1:8f:
         c4:90:f7:4b:b8:d1:65:09:be:78:9f:86:39:72:01:46:fe:14:
         83:11:90:2e:65:ca:36:24:29:e3:60:5a:cf:c1:64:85:fb:9b:
         be:dd:44:03:b9:38:d8:ea:fe:a6:82:8b:bd:bd:08:76:cf:2c:
         32:6e:43:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:07 2026 by rpki-client