Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323134393535.roa
File:                     326130663a316363353a666666663a3a2f34382d3438203d3e20323134393535.roa (raw, json)
Hash identifier:          q1rtEIydQtXc6XR9QZq51yLZBkSxM0B31x+nzXmgSqo=
Subject key identifier:   84:06:51:70:87:5D:6B:F4:9A:A0:24:AA:DD:AB:AF:54:3E:3B:F3:01
Certificate issuer:       /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Certificate serial:       0B777F605CCECAA51AC4F4D345432FD46C3BAB82
Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323134393535.roa
Signing time:             Thu 19 Mar 2026 07:58:55 +0000
ROA not before:           Thu 19 Mar 2026 07:53:55 +0000
ROA not after:            Thu 18 Mar 2027 07:58:55 +0000
asID:                     214955
IP address blocks:        2a0f:1cc5:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:77:7f:60:5c:ce:ca:a5:1a:c4:f4:d3:45:43:2f:d4:6c:3b:ab:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
        Validity
            Not Before: Mar 19 07:53:55 2026 GMT
            Not After : Mar 18 07:58:55 2027 GMT
        Subject: CN=84065170875D6BF49AA024AADDABAF543E3BF301
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b9:9a:b0:64:10:55:be:bc:fb:6a:07:9e:64:
                    6c:ee:7f:8a:71:3d:0b:b4:5c:39:d4:c6:38:66:88:
                    3a:1b:ee:47:1e:46:77:8b:82:30:2c:97:03:53:8f:
                    72:a5:02:76:a9:e3:14:a2:84:14:af:2b:17:a5:5c:
                    b8:80:18:79:3c:1e:64:c4:74:2d:6b:2a:77:68:47:
                    b4:da:9d:94:0c:20:f3:ae:c7:e6:a1:1c:b2:ac:e8:
                    4a:10:ad:c5:a2:9c:b4:96:7f:d8:4b:59:23:f6:0c:
                    87:3c:d1:a3:79:2b:29:47:91:57:67:94:f2:3f:1b:
                    0e:f8:ca:92:7e:6b:1b:8a:c2:1a:b9:19:7f:7e:01:
                    04:75:b4:6e:e4:f9:7f:75:9a:a1:02:89:14:23:a8:
                    07:40:c8:39:6d:b0:98:71:0f:ac:f5:2a:72:92:db:
                    53:39:53:05:a3:e1:5a:d9:fa:56:92:58:b6:55:d6:
                    4f:8f:60:66:55:8f:1e:16:ad:f2:82:88:04:25:3a:
                    b5:ca:73:20:e6:80:05:6e:30:a3:1f:53:6a:e8:92:
                    6b:a2:ff:94:47:cf:47:02:b1:c6:a5:0e:c8:9a:0a:
                    74:e9:67:3f:f2:ab:1b:64:47:30:2c:19:ad:8d:3b:
                    6b:e8:40:71:15:5d:43:cc:af:b3:96:ff:05:d4:e8:
                    2e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:06:51:70:87:5D:6B:F4:9A:A0:24:AA:DD:AB:AF:54:3E:3B:F3:01
            X509v3 Authority Key Identifier:
                keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323134393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:9c:20:35:61:a9:fe:3e:6f:64:a0:43:04:4d:0a:07:80:bf:
         c4:2a:f0:ff:79:56:40:66:f0:e3:53:d5:86:24:a3:09:8f:61:
         9c:a8:b4:8a:ef:f7:fc:13:0c:dd:c4:e0:c1:13:1b:1b:fc:5a:
         a5:0a:f3:df:7c:86:cf:ea:1a:22:78:5c:9b:13:ba:0f:56:a2:
         80:a9:10:85:d9:f2:74:23:fc:d1:18:c0:d5:21:94:18:03:59:
         0b:7f:87:bb:c5:02:90:c4:87:00:6d:ae:c2:d0:04:57:65:6a:
         16:7c:e2:65:db:57:33:d0:97:3d:05:1e:49:b6:8e:47:58:33:
         d5:8d:4b:82:82:e0:fc:ec:74:84:63:9c:6b:e6:9a:92:18:90:
         ce:03:57:c8:73:1c:57:34:9d:c7:1d:8d:eb:5d:19:05:bd:61:
         7e:ec:f0:0f:cd:bd:f6:18:7c:cb:13:51:85:ec:7f:5c:e7:ad:
         86:e6:9f:1c:12:c6:fe:51:06:e3:71:50:09:f6:b5:4a:1a:7a:
         31:32:11:68:6c:97:55:d6:c9:72:79:c1:01:98:90:f9:96:30:
         db:f3:b7:bd:06:25:e2:1d:6b:aa:71:3d:47:c4:6b:f3:21:91:
         f0:1d:05:b4:b9:cf:2f:8f:d1:b7:50:e6:53:ca:5f:cd:86:d8:
         f5:dd:9c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:55:00 2026 by rpki-client