Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323034353339.roa
File:                     326130663a316363353a666666663a3a2f34382d3438203d3e20323034353339.roa (raw, json)
Hash identifier:          11qX0jnB3jOO32HZ8wapaxH+yuFzAiIK19tPVY2kI54=
Subject key identifier:   A6:20:91:7A:8C:A1:DC:80:DF:8C:C5:E3:10:1E:73:7A:9D:3D:39:4E
Certificate issuer:       /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Certificate serial:       4A374C2A87BE2A2BF688C1AECF847A15398F9D27
Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323034353339.roa
Signing time:             Wed 18 Mar 2026 16:44:46 +0000
ROA not before:           Wed 18 Mar 2026 16:39:46 +0000
ROA not after:            Wed 17 Mar 2027 16:44:46 +0000
asID:                     204539
IP address blocks:        2a0f:1cc5:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:37:4c:2a:87:be:2a:2b:f6:88:c1:ae:cf:84:7a:15:39:8f:9d:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
        Validity
            Not Before: Mar 18 16:39:46 2026 GMT
            Not After : Mar 17 16:44:46 2027 GMT
        Subject: CN=A620917A8CA1DC80DF8CC5E3101E737A9D3D394E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:90:5d:ae:d3:33:9f:e7:2b:ca:b2:c2:a8:
                    45:46:d2:72:3d:79:ee:6f:3e:08:41:f9:ec:b3:17:
                    df:e0:24:14:b0:d0:52:19:04:09:94:a9:bd:49:93:
                    88:f8:89:16:8d:e4:b1:56:66:5a:29:1d:46:28:ca:
                    90:06:f7:21:68:15:cb:a8:18:2e:3b:a2:3f:ba:2d:
                    a2:f7:2c:1b:c5:b7:9e:16:d7:a1:51:6a:71:28:f7:
                    44:84:dd:c2:66:e1:d9:92:d5:d4:35:45:71:ac:a9:
                    b3:33:bf:f3:fc:48:1c:b3:7d:54:83:b7:81:9a:38:
                    17:b3:f9:e6:4b:7b:b9:74:48:be:5e:1d:2c:ca:db:
                    d5:4f:b8:37:ed:ff:2a:91:29:25:9b:14:9c:d5:ea:
                    1b:bb:33:e6:de:a1:ab:88:93:16:c8:89:b8:79:00:
                    6e:3e:30:bf:f7:ae:c2:fe:12:e3:b2:67:05:e7:54:
                    cd:5d:8e:bb:de:07:97:95:23:65:03:fd:c1:27:00:
                    b1:b8:41:ee:35:20:fd:c6:95:9b:74:71:b3:76:0a:
                    a0:74:b0:28:ff:a0:b9:9c:b7:58:9a:40:16:5c:12:
                    a4:11:75:b4:40:b1:fa:0d:11:7b:6b:a7:92:30:e8:
                    62:3c:1a:09:dd:9d:c1:a8:70:35:f8:42:dd:3f:5f:
                    7d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:20:91:7A:8C:A1:DC:80:DF:8C:C5:E3:10:1E:73:7A:9D:3D:39:4E
            X509v3 Authority Key Identifier:
                keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323034353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         4a:dc:98:4a:36:88:9d:bc:3e:fc:0d:38:8f:fe:06:43:c4:88:
         24:1c:6a:77:04:f7:53:8f:c9:6b:22:54:8b:e0:b6:65:a6:47:
         91:57:e3:b0:7d:38:e6:ef:68:32:4c:b6:ee:7b:ac:10:96:31:
         8c:28:0b:6c:f1:35:2b:a0:a2:a1:7f:bc:8e:0e:19:f7:d8:7f:
         06:5d:5c:2c:27:7b:94:9f:a7:94:7a:9d:89:f9:ae:b5:04:81:
         5f:d7:ad:a3:2e:b2:e2:30:c1:3c:54:1b:e6:6d:70:c4:41:02:
         17:2e:cf:55:8b:b7:24:25:45:bb:ae:83:47:4c:04:dc:c3:6e:
         5b:ea:bf:55:5e:98:c3:02:4e:b0:cd:f1:d9:57:50:16:3a:e1:
         fb:26:cf:74:f5:d1:e1:16:f0:56:51:69:b0:73:5e:e3:d0:8b:
         2c:e6:ee:b0:89:ee:f3:53:91:b1:0c:8e:59:4a:22:cd:1f:d6:
         9f:1c:64:aa:0b:9e:03:14:e4:9f:05:c5:c9:1f:40:18:b7:9f:
         81:b3:9f:fd:bc:0a:66:76:99:78:78:44:73:e3:ad:b2:2b:8e:
         be:c7:83:bf:e7:63:78:44:ce:45:bd:97:e5:cb:e2:73:f0:13:
         d3:09:e1:15:92:02:8e:54:b0:c9:b8:6f:d7:f8:2a:b0:52:7a:
         bc:0c:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:38 2026 by rpki-client