Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323035303038.roa
File:                     326130663a316363353a666666663a3a2f34382d3438203d3e20323035303038.roa (raw, json)
Hash identifier:          idWWcIDH8Uiax8Hf1+p2xbwPSbiGWW0hnrKDE92oOXY=
Subject key identifier:   0C:37:26:A0:22:DE:FF:83:B6:3F:0F:E2:0B:10:C0:55:5E:2B:1D:BD
Certificate issuer:       /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Certificate serial:       0EC8EAB1D79F3AEF21A56CFC5DD74B5F403ED9F0
Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323035303038.roa
Signing time:             Wed 18 Mar 2026 16:46:36 +0000
ROA not before:           Wed 18 Mar 2026 16:41:36 +0000
ROA not after:            Wed 17 Mar 2027 16:46:36 +0000
asID:                     205008
IP address blocks:        2a0f:1cc5:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c8:ea:b1:d7:9f:3a:ef:21:a5:6c:fc:5d:d7:4b:5f:40:3e:d9:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
        Validity
            Not Before: Mar 18 16:41:36 2026 GMT
            Not After : Mar 17 16:46:36 2027 GMT
        Subject: CN=0C3726A022DEFF83B63F0FE20B10C0555E2B1DBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:22:f8:7c:5f:52:9b:bc:21:7a:f7:54:f4:68:
                    85:de:3f:dc:e7:19:79:4a:00:f4:b6:0d:20:8e:3e:
                    ba:30:a7:bd:4b:87:83:d2:47:bd:e1:db:ac:3b:d4:
                    1a:19:a1:d2:bb:93:22:bc:98:bd:c9:c0:52:a5:b2:
                    c6:3e:ab:84:cd:cc:ef:13:3e:f6:a7:59:c4:f3:f0:
                    ad:2b:78:da:4d:2e:a1:84:50:16:67:a6:21:87:16:
                    8d:41:c6:ea:9c:e3:54:50:8b:39:17:6b:83:45:2e:
                    d0:d1:58:c5:7d:d5:44:d7:5e:00:9c:43:e2:69:f4:
                    25:ed:74:94:55:93:fc:97:3b:88:f2:a2:84:5b:d9:
                    75:4d:bc:44:3f:de:74:b4:2a:9e:12:16:f3:24:77:
                    49:6c:6e:6c:78:b4:a2:b8:c9:fc:79:ed:9c:04:2f:
                    3d:73:c3:6a:fc:f6:ad:1c:b6:87:da:a2:d4:1b:d6:
                    d0:73:1b:71:33:d8:83:7f:f9:61:bf:85:a1:39:d5:
                    e9:8b:00:d2:ad:b7:94:18:44:38:a8:38:5d:e3:79:
                    37:58:55:59:d4:c7:d1:a4:01:96:36:8c:c9:4d:79:
                    9e:30:7c:ae:2d:e7:40:b9:18:2d:60:1a:65:1b:12:
                    2c:f7:b5:7a:d2:af:9e:fe:88:77:28:7a:4e:81:fd:
                    f3:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:37:26:A0:22:DE:FF:83:B6:3F:0F:E2:0B:10:C0:55:5E:2B:1D:BD
            X509v3 Authority Key Identifier:
                keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323035303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:82:6c:44:bc:22:22:83:ed:56:7b:eb:85:3f:c5:ae:82:f6:
         56:d5:4a:e0:8c:ad:4b:cb:31:0a:64:8a:54:fb:63:ab:57:dd:
         a0:ab:cf:a5:6a:56:01:f0:7d:58:03:ff:6c:f3:b7:d8:e8:2c:
         4c:a7:4c:c8:c1:0a:db:ff:4f:2a:33:7e:57:10:cb:f9:6b:98:
         26:25:03:d5:fd:4e:d0:8f:dd:34:f4:f8:f2:2e:43:6c:46:71:
         80:6a:0e:99:d0:5e:06:2f:43:a0:b0:fa:31:3e:f6:0b:01:51:
         8e:3e:fe:7c:bb:50:5d:31:7e:52:70:f0:d6:29:ee:31:e2:ef:
         3c:8c:16:5d:cc:4e:49:c1:db:b2:17:9b:7c:c6:e8:ee:ad:d8:
         57:53:43:17:14:fe:a4:ae:30:86:73:71:07:ec:df:3f:a6:22:
         c0:5a:4b:bc:ad:7b:bf:69:31:ac:d9:30:d5:12:f7:a3:d7:11:
         16:b1:94:7e:81:4c:cb:95:65:ea:15:d7:56:68:ef:18:60:a8:
         c4:aa:a7:d9:3a:40:38:9c:dc:f6:fc:a3:ae:b0:24:e9:e2:49:
         01:58:13:78:59:7d:51:07:d3:d4:45:09:20:ef:95:6c:cb:c3:
         67:e1:01:33:5a:13:7a:92:81:5d:b2:9a:b7:a6:ac:ec:f5:48:
         a9:ff:ca:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:40 2026 by rpki-client