Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323036303639.roa
File:                     326130663a316363353a666666663a3a2f34382d3438203d3e20323036303639.roa (raw, json)
Hash identifier:          e/MvgozPHbW5+a1dK+ZiWx3kijIe32XY7+Mi4Dqqr7w=
Subject key identifier:   B9:54:AA:0A:62:20:4B:C6:41:A9:06:FD:BF:16:3D:CD:E2:F4:A9:93
Certificate issuer:       /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Certificate serial:       3085D717A7C1688B2ECE9BFD14F818DC13C0B4E8
Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323036303639.roa
Signing time:             Wed 18 Mar 2026 16:45:45 +0000
ROA not before:           Wed 18 Mar 2026 16:40:45 +0000
ROA not after:            Wed 17 Mar 2027 16:45:45 +0000
asID:                     206069
IP address blocks:        2a0f:1cc5:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:85:d7:17:a7:c1:68:8b:2e:ce:9b:fd:14:f8:18:dc:13:c0:b4:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
        Validity
            Not Before: Mar 18 16:40:45 2026 GMT
            Not After : Mar 17 16:45:45 2027 GMT
        Subject: CN=B954AA0A62204BC641A906FDBF163DCDE2F4A993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ed:ae:7a:4e:25:57:c9:56:db:1f:7c:92:3d:
                    96:d0:e3:bd:fa:21:62:a5:86:ff:e1:1d:41:6b:f0:
                    69:3c:34:44:ec:98:47:19:a9:88:01:ba:da:79:26:
                    78:88:78:3f:2b:dc:57:f2:47:bf:44:7a:32:bb:43:
                    15:4c:99:d7:ca:3d:83:02:c9:bb:d2:d6:b9:b9:95:
                    6b:85:ef:7e:a6:04:f8:e6:94:82:30:48:8f:b0:99:
                    76:1d:2a:0f:3a:cf:47:cb:19:8c:ad:c3:e2:3e:0c:
                    b4:20:a1:10:fe:cb:61:25:30:51:2f:9d:f5:bb:44:
                    69:e0:e4:61:5b:20:79:d9:50:81:3d:6f:48:96:ad:
                    c0:3c:67:64:aa:47:5e:4a:02:2c:09:84:68:ee:5c:
                    e9:ba:e3:7f:50:5c:30:ec:04:c0:34:54:0a:9d:b6:
                    97:93:8e:7a:b6:51:e5:c9:ee:26:39:1c:44:70:66:
                    9c:13:2a:0a:da:48:75:b8:bd:0e:45:40:75:9f:e2:
                    26:fe:7c:47:50:f7:1e:46:31:db:c1:85:1d:97:67:
                    e5:2c:1a:0b:55:fa:68:65:4b:58:ea:0d:07:d8:e7:
                    68:3f:71:72:78:3f:2d:01:9a:b7:1b:46:ef:20:24:
                    10:56:2c:d1:11:a2:f9:1e:0a:cc:db:37:8c:a0:da:
                    83:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:54:AA:0A:62:20:4B:C6:41:A9:06:FD:BF:16:3D:CD:E2:F4:A9:93
            X509v3 Authority Key Identifier:
                keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323036303639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:e4:1e:a9:e6:de:fb:31:99:62:be:5e:97:ef:64:78:ec:a0:
         90:25:8c:af:88:b4:c9:0b:96:79:57:a8:18:c3:d1:69:ca:af:
         3b:90:37:19:16:2e:98:a1:43:b7:25:fd:33:6b:a9:5f:12:20:
         18:19:21:90:96:e9:a4:ec:ea:62:2b:fd:86:ed:9d:2d:e3:5a:
         68:93:ae:43:f8:4b:d0:78:41:4f:a4:7f:c4:7d:f4:17:44:3d:
         4f:03:e6:a4:44:58:2a:f7:20:93:7d:67:37:e9:95:e0:b4:14:
         5a:ea:3f:67:3b:eb:78:66:c3:cf:d9:fb:77:12:2a:e2:f0:ac:
         0c:4d:2d:21:14:e9:0c:1f:e6:d2:9b:be:50:99:76:c7:ca:cc:
         fa:48:2c:66:51:f3:c8:88:41:05:57:5a:3b:68:c4:a7:48:02:
         3b:4c:4f:07:dd:a8:87:18:8a:92:48:0c:ab:56:6e:44:b5:31:
         2a:1d:2b:65:f7:c0:c0:e3:fa:cc:4c:89:92:fd:d9:91:7e:33:
         bd:54:53:15:55:b0:f3:0a:85:4b:f2:d4:e4:f1:2a:69:8a:c6:
         d0:7c:91:b9:b9:9f:d1:c9:1c:18:87:0c:61:b2:1e:13:e8:14:
         1e:dd:b9:ea:18:81:3b:84:d5:10:7d:d3:1a:15:0e:41:3a:84:
         1b:52:0d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:18:40 2026 by rpki-client