Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323135313732.roa
File:                     326130663a316363353a666666663a3a2f34382d3438203d3e20323135313732.roa (raw, json)
Hash identifier:          Tq2IAhMPxZSbwYb2O3kRoHSwyaOEJ1Jx6jNADZl5KCI=
Subject key identifier:   94:05:57:AD:6B:DD:E1:EE:94:C4:B7:88:50:75:29:29:CF:29:35:64
Certificate issuer:       /CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
Certificate serial:       68D52EE9A02A7F4646D67D7E3E8FFCE0590B3A13
Authority key identifier: 80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323135313732.roa
Signing time:             Wed 18 Mar 2026 16:46:24 +0000
ROA not before:           Wed 18 Mar 2026 16:41:24 +0000
ROA not after:            Wed 17 Mar 2027 16:46:24 +0000
asID:                     215172
IP address blocks:        2a0f:1cc5:ffff::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/411E2D411D687BCB4449C3DF45BEEDC041007D94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/QR4tQR1oe8tEScPfRb7twEEAfZQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 26 Mar 2026 08:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d5:2e:e9:a0:2a:7f:46:46:d6:7d:7e:3e:8f:fc:e0:59:0b:3a:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=808DAC70271F8080A22C1AEE42EFAF98E1776954
        Validity
            Not Before: Mar 18 16:41:24 2026 GMT
            Not After : Mar 17 16:46:24 2027 GMT
        Subject: CN=940557AD6BDDE1EE94C4B78850752929CF293564
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:5f:24:32:58:0b:39:a5:9f:4a:1f:ac:bc:a9:
                    08:21:06:33:40:85:84:73:44:38:cb:97:b4:bf:10:
                    1f:2e:92:7c:20:b9:37:d5:fe:a7:3f:ba:8e:a2:ce:
                    e8:5e:9f:9c:66:dc:04:da:6f:ce:f9:bd:05:fd:35:
                    3e:d5:10:d2:63:ca:2f:ee:0a:3f:59:9e:11:16:eb:
                    78:62:01:01:e9:e4:2d:94:23:80:8e:52:52:85:de:
                    1e:c8:5b:b5:56:f3:29:2a:ad:63:2d:56:cb:35:6a:
                    1a:29:47:c6:ee:d0:92:29:64:48:20:42:8c:4f:b8:
                    c4:6c:e9:79:ff:e5:d4:89:b9:73:b4:96:1c:0a:e9:
                    a4:98:e6:e6:10:29:dc:6f:e8:4a:0f:62:d0:cb:6a:
                    fc:de:3a:a1:d2:d8:f3:43:c1:ca:c5:f7:c7:61:3c:
                    67:84:b7:b8:8c:07:6f:3f:53:a3:7c:f7:1e:2c:df:
                    8c:26:df:a7:eb:d2:90:56:36:d9:ba:c0:7b:8f:e9:
                    4d:02:ee:0e:98:d7:72:91:60:5d:46:6e:14:77:e3:
                    9d:0c:75:05:fe:01:4b:3d:98:ca:12:10:39:e3:2d:
                    09:a6:da:7d:7c:e2:d9:fa:d2:3f:ee:d8:05:90:87:
                    0a:50:04:63:7c:e0:21:47:3c:6b:fa:30:5b:70:c1:
                    c6:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:05:57:AD:6B:DD:E1:EE:94:C4:B7:88:50:75:29:29:CF:29:35:64
            X509v3 Authority Key Identifier:
                keyid:80:8D:AC:70:27:1F:80:80:A2:2C:1A:EE:42:EF:AF:98:E1:77:69:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/808DAC70271F8080A22C1AEE42EFAF98E1776954.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/8afb5fe2-3c2a-4939-95e9-0077b80b4f0e/0/808DAC70271F8080A22C1AEE42EFAF98E1776954.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/3/326130663a316363353a666666663a3a2f34382d3438203d3e20323135313732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0f:1cc5:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:59:ac:69:a3:f7:e7:8a:77:35:2e:31:3a:52:8c:e6:0e:e2:
         3f:83:6d:a6:30:05:20:87:f0:6f:12:c5:47:cf:89:cf:f6:1d:
         21:c0:8c:59:4c:bd:25:c0:ab:80:c3:94:d7:e8:de:48:c0:24:
         04:a9:0a:48:eb:84:8f:b5:b9:97:89:ed:3f:01:5f:b2:c6:c3:
         91:d6:6c:c3:e3:a1:64:2e:71:8a:9e:5a:2d:31:b5:84:51:d9:
         17:4c:e2:3b:75:69:d4:61:aa:27:35:25:5c:28:a5:93:39:1f:
         4d:39:92:d9:27:0f:e7:b8:f6:6d:1d:37:5c:cf:f3:ce:3c:58:
         1a:fa:79:d6:49:a6:9b:a0:20:08:10:59:2b:0c:bf:64:2b:12:
         24:5c:ea:32:88:15:f0:58:cd:dd:58:59:69:af:28:4c:95:93:
         26:81:51:fe:f5:3b:22:19:3c:90:f3:04:b4:52:4d:7f:f6:22:
         8a:42:ed:c1:9c:2f:23:ec:df:d2:9f:80:49:28:07:40:d2:cb:
         4e:5e:72:15:a5:a2:0b:a5:cd:cc:a9:b8:75:74:d8:9a:8b:85:
         84:94:31:a5:eb:6c:98:a7:e7:be:ec:34:f6:f3:9e:73:a0:8c:
         7b:3c:db:93:f4:ab:c2:29:2c:83:0b:12:48:91:1b:26:a5:70:
         06:30:d0:80
-----BEGIN CERTIFICATE-----
MIIFJDCCBAygAwIBAgIUaNUu6aAqf0ZG1n1+Po/84FkLOhMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODA4REFDNzAyNzFGODA4MEEyMkMxQUVFNDJFRkFGOThF
MTc3Njk1NDAeFw0yNjAzMTgxNjQxMjRaFw0yNzAzMTcxNjQ2MjRaMDMxMTAvBgNV
BAMTKDk0MDU1N0FENkJEREUxRUU5NEM0Qjc4ODUwNzUyOTI5Q0YyOTM1NjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHXyQyWAs5pZ9KH6y8qQghBjNA
hYRzRDjLl7S/EB8uknwguTfV/qc/uo6izuhen5xm3ATab875vQX9NT7VENJjyi/u
Cj9ZnhEW63hiAQHp5C2UI4COUlKF3h7IW7VW8ykqrWMtVss1ahopR8bu0JIpZEgg
QoxPuMRs6Xn/5dSJuXO0lhwK6aSY5uYQKdxv6EoPYtDLavzeOqHS2PNDwcrF98dh
PGeEt7iMB28/U6N89x4s34wm36fr0pBWNtm6wHuP6U0C7g6Y13KRYF1GbhR3450M
dQX+AUs9mMoSEDnjLQmm2n184tn60j/u2AWQhwpQBGN84CFHPGv6MFtwwcanAgMB
AAGjggIuMIICKjAdBgNVHQ4EFgQUlAVXrWvd4e6UxLeIUHUpKc8pNWQwHwYDVR0j
BBgwFoAUgI2scCcfgICiLBruQu+vmOF3aVQwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud
HwRiMGAwXqBcoFqGWHJzeW5jOi8vcnBraS5heGl2b3JhLm5ldC9yZXBvL0F4aXZv
cmEtTmV0LzMvODA4REFDNzAyNzFGODA4MEEyMkMxQUVFNDJFRkFGOThFMTc3Njk1
NC5jcmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9y
c3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YWZiNWZlMi0zYzJh
LTQ5MzktOTVlOS0wMDc3YjgwYjRmMGUvMC84MDhEQUM3MDI3MUY4MDgwQTIyQzFB
RUU0MkVGQUY5OEUxNzc2OTU0LmNlcjCBjQYIKwYBBQUHAQsEgYAwfjB8BggrBgEF
BQcwC4ZwcnN5bmM6Ly9ycGtpLmF4aXZvcmEubmV0L3JlcG8vQXhpdm9yYS1OZXQv
My8zMjYxMzA2NjNhMzE2MzYzMzUzYTY2NjY2NjY2M2EzYTJmMzQzODJkMzQzODIw
M2QzZTIwMzIzMTM1MzEzNzMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg8cxf//MA0GCSqGSIb3DQEB
CwUAA4IBAQC1Waxpo/fninc1LjE6UozmDuI/g22mMAUgh/BvEsVHz4nP9h0hwIxZ
TL0lwKuAw5TX6N5IwCQEqQpI64SPtbmXie0/AV+yxsOR1mzD46FkLnGKnlotMbWE
UdkXTOI7dWnUYaonNSVcKKWTOR9NOZLZJw/nuPZtHTdcz/POPFga+nnWSaaboCAI
EFkrDL9kKxIkXOoyiBXwWM3dWFlpryhMlZMmgVH+9TsiGTyQ8wS0Uk1/9iKKQu3B
nC8j7N/Sn4BJKAdA0stOXnIVpaILpc3Mqbh1dNiai4WElDGl62yYp+e+7DT2855z
oIx7PNuT9KvCKSyDCxJIkRsmpXAGMNCA
-----END CERTIFICATE-----
Generated at Wed Mar 25 22:54:59 2026 by rpki-client