Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323130343430.roa
File:                     326130663a316363353a666666663a3a2f34382d3438203d3e20323130343430.roa (raw, json)
Hash identifier:          2B4z/3nOIywKOGdkln/KZ8PwiRUcWp9UJwWWkK57MSA=
Subject key identifier:   B1:B8:95:98:38:BA:B1:D8:9C:6C:E0:D7:DD:62:C5:01:AD:AE:72:DD
Certificate issuer:       /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Certificate serial:       03210ED5925B4B67672926D13035097C1E437FA5
Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323130343430.roa
Signing time:             Wed 18 Mar 2026 16:45:21 +0000
ROA not before:           Wed 18 Mar 2026 16:40:21 +0000
ROA not after:            Wed 17 Mar 2027 16:45:21 +0000
asID:                     210440
IP address blocks:        2a0f:1cc5:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:21:0e:d5:92:5b:4b:67:67:29:26:d1:30:35:09:7c:1e:43:7f:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
        Validity
            Not Before: Mar 18 16:40:21 2026 GMT
            Not After : Mar 17 16:45:21 2027 GMT
        Subject: CN=B1B8959838BAB1D89C6CE0D7DD62C501ADAE72DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c9:0d:45:50:ea:8e:ce:2b:c2:59:de:72:71:
                    d4:20:f7:cd:ba:48:a3:5b:dd:74:8e:43:31:1b:83:
                    66:84:3c:1b:5d:97:72:ce:08:20:50:7a:de:43:44:
                    b1:de:cd:60:59:4d:c3:33:64:87:d0:aa:f8:97:13:
                    49:c5:77:57:1e:b6:83:cb:25:b2:5c:85:f8:8c:dd:
                    30:d8:51:ca:b9:f8:9a:94:3b:dd:4c:64:ac:44:14:
                    17:a1:21:35:23:77:8c:ef:a9:7f:34:d9:29:79:b1:
                    42:9d:20:3a:89:43:83:1d:61:fb:89:fb:07:bf:e6:
                    3f:d3:7d:48:3a:1b:44:26:90:00:bd:e2:85:79:0b:
                    c5:6e:a6:87:f4:5b:bd:6e:4f:c7:50:97:6d:ff:0d:
                    2b:37:44:8f:78:c1:30:fb:09:af:03:f3:af:fb:57:
                    00:4d:ac:14:b2:fb:47:50:c4:c5:34:07:ab:20:2a:
                    4f:80:ae:9c:cd:a5:e8:6d:96:59:6d:67:df:4c:2d:
                    45:46:12:6c:31:f0:60:87:ef:01:a7:e0:00:61:74:
                    a0:c4:22:56:5f:f4:02:8b:dd:f2:10:23:11:bc:a7:
                    b9:ce:e1:31:53:77:93:c8:9d:5b:e7:54:e7:ef:d7:
                    82:ac:7b:2b:aa:7b:80:37:fb:97:ea:5d:31:b2:78:
                    97:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:B8:95:98:38:BA:B1:D8:9C:6C:E0:D7:DD:62:C5:01:AD:AE:72:DD
            X509v3 Authority Key Identifier:
                keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323130343430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:db:46:5e:5e:1d:64:df:3e:93:6f:cf:65:13:74:98:59:f7:
         15:06:a6:5a:ab:69:55:7a:47:38:ee:2f:2d:d9:4d:7d:21:08:
         f4:6c:44:3f:83:4d:c3:8f:03:c1:43:97:9e:9d:18:1f:be:9a:
         d4:a8:3d:f9:e8:bd:f4:9c:34:fe:ae:4f:b5:78:15:62:d6:23:
         c7:0f:16:d2:b7:d7:a2:6a:27:7b:d4:6f:ee:15:f4:48:8e:57:
         4d:53:f8:18:c9:85:b4:05:cb:63:20:90:ef:89:86:7f:ab:b3:
         f8:5b:71:67:e7:e1:3e:80:5c:d5:f8:ba:73:1b:f7:8e:40:a3:
         33:4e:7b:13:be:5a:e5:18:6d:73:2e:9d:a6:08:4c:46:4e:35:
         b9:f5:86:08:43:1e:39:24:33:71:a2:90:87:e8:80:07:e2:28:
         19:ca:f5:38:9d:a1:08:d7:6c:f4:c3:e2:3f:f0:c7:2b:60:19:
         65:1d:67:5b:06:c8:6e:40:27:11:67:c2:88:31:3e:72:99:4d:
         44:67:35:91:11:dc:5f:4b:76:a8:d9:3f:ad:e5:b8:d3:e5:5e:
         7f:6f:b9:6c:77:f4:23:e4:46:fa:33:79:b6:e4:ed:e6:0c:90:
         2d:e9:49:20:1f:f8:77:a7:09:29:f3:e5:7f:25:af:bd:9c:ad:
         0f:36:c2:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:02 2026 by rpki-client