Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323130373733.roa
File:                     326130663a316363353a666666663a3a2f34382d3438203d3e20323130373733.roa (raw, json)
Hash identifier:          s2r2z+s2MnvC053ztz6KcOr8Jjw7Mi5NvBSzcwqDb1Q=
Subject key identifier:   36:54:40:D2:6A:21:92:E2:A5:3B:A9:29:7A:F7:A3:63:9F:33:89:87
Certificate issuer:       /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Certificate serial:       01D15601594345DEF86574E91A9B5D6C5A9AB731
Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323130373733.roa
Signing time:             Wed 18 Mar 2026 16:45:51 +0000
ROA not before:           Wed 18 Mar 2026 16:40:51 +0000
ROA not after:            Wed 17 Mar 2027 16:45:51 +0000
asID:                     210773
IP address blocks:        2a0f:1cc5:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:d1:56:01:59:43:45:de:f8:65:74:e9:1a:9b:5d:6c:5a:9a:b7:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
        Validity
            Not Before: Mar 18 16:40:51 2026 GMT
            Not After : Mar 17 16:45:51 2027 GMT
        Subject: CN=365440D26A2192E2A53BA9297AF7A3639F338987
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ac:c5:c2:a7:04:a5:b5:50:b5:0a:fe:bd:56:
                    d2:6a:1a:49:45:63:49:06:da:59:58:0c:cd:5f:c7:
                    7f:a6:ea:0e:50:98:95:69:1a:f3:19:b3:8a:90:9a:
                    a8:17:0c:0d:8b:d9:6b:fa:45:7c:25:fc:24:28:5c:
                    7f:be:e4:64:5e:8f:b5:88:c8:9b:43:22:c7:a0:5f:
                    0f:5c:a4:cf:37:34:6e:42:2e:bf:f8:47:56:ac:5c:
                    c0:39:64:49:c6:65:9f:bc:0a:cf:45:42:4d:20:99:
                    56:68:f8:a1:b9:4d:eb:2f:26:79:ec:f2:ef:92:b5:
                    86:28:d9:0e:8b:13:16:bb:c2:bf:f9:21:20:c7:aa:
                    c4:b4:d6:ad:43:da:cc:09:4f:8f:44:15:14:a3:78:
                    59:f0:c9:55:38:cb:8f:a6:53:27:a5:77:6e:0b:bc:
                    47:cb:f8:a4:a5:e7:cb:eb:7b:f2:6c:0a:fb:73:5d:
                    c3:f8:7e:45:b7:c2:1a:96:4c:ff:0d:9f:44:4b:60:
                    18:c9:40:37:cd:ce:7e:52:18:ef:a4:fc:a4:1f:5c:
                    9f:22:19:be:27:e7:66:fa:c3:dc:33:92:42:ff:25:
                    a5:20:5a:c9:75:27:7f:85:fe:14:0b:f0:d3:09:d1:
                    b7:dd:d3:2b:b4:46:88:4f:60:74:19:0b:84:16:6b:
                    ee:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:54:40:D2:6A:21:92:E2:A5:3B:A9:29:7A:F7:A3:63:9F:33:89:87
            X509v3 Authority Key Identifier:
                keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323130373733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:98:09:e8:1c:80:93:f2:f9:5f:35:ea:b1:ff:db:e3:ec:73:
         46:f2:ac:36:b3:41:b4:5d:39:d1:1c:d6:97:47:6a:21:00:93:
         7a:ab:78:00:0b:f0:bd:9d:32:5d:6e:e7:ce:2d:4e:26:d8:21:
         41:a5:fe:b3:ca:e6:6f:d5:b4:94:28:42:a4:f9:c2:5a:e8:eb:
         84:89:4a:cd:58:65:06:07:f9:4f:6a:61:85:35:4c:6a:47:2e:
         d4:b4:15:b7:70:17:15:f8:12:9d:15:fe:ae:58:98:38:dd:c8:
         3d:a8:b4:31:9f:39:9c:fa:2c:30:ff:58:d7:29:43:10:58:a1:
         de:7e:09:3a:70:af:e0:47:b6:a1:66:ae:86:c3:17:d6:c0:4a:
         f3:82:b0:c3:0e:3b:4a:da:f1:fd:b2:68:2c:25:41:f2:05:08:
         7c:8d:30:3c:62:c3:a6:25:80:ec:34:3d:9a:21:4d:21:82:90:
         7c:28:11:62:6a:ee:0c:f3:af:02:cf:56:4c:af:a0:62:bd:62:
         ae:e6:b9:21:c0:cc:52:c9:4d:c1:8c:39:2c:78:f9:e5:9c:44:
         51:e8:35:d4:f6:4b:19:0d:60:e3:e4:00:d2:51:0c:2e:f8:61:
         8d:2f:a2:a8:c6:ec:19:aa:27:58:23:69:8c:82:b8:cc:2e:2b:
         34:c7:2d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:16 2026 by rpki-client