Route Origin Authorization

$ rpki-client -vvvf rpki.as219412.net/repo/axel-vir/0/326131343a373538313a336230303a3a2f34302d3430203d3e20323139343132.roa
File:                     326131343a373538313a336230303a3a2f34302d3430203d3e20323139343132.roa (raw, json)
Hash identifier:          wkt4v5qmJ8pJCyq7eZIjwcnUy3LJWIiHURXHAsfKhG8=
Subject key identifier:   B9:42:E3:B9:C0:FC:FE:65:F5:F3:B5:73:11:1E:CC:D9:90:CD:BC:63
Certificate issuer:       /CN=A6ADE8EAA224CCCD1F263E58DC920BA8DA119DF9
Certificate serial:       6B3B087659D6ADDA6FA260D7BE9C6CEE131B8667
Authority key identifier: A6:AD:E8:EA:A2:24:CC:CD:1F:26:3E:58:DC:92:0B:A8:DA:11:9D:F9
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A6ADE8EAA224CCCD1F263E58DC920BA8DA119DF9.cer
Subject info access:      rsync://rpki.as219412.net/repo/axel-vir/0/326131343a373538313a336230303a3a2f34302d3430203d3e20323139343132.roa
Signing time:             Mon 19 Oct 2026 19:21:12 +0000
ROA not before:           Mon 19 Oct 2026 19:16:12 +0000
ROA not after:            Mon 18 Oct 2027 19:21:12 +0000
asID:                     219412
IP address blocks:        2a14:7581:3b00::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.as219412.net/repo/axel-vir/0/A6ADE8EAA224CCCD1F263E58DC920BA8DA119DF9.crl
                          rsync://rpki.as219412.net/repo/axel-vir/0/A6ADE8EAA224CCCD1F263E58DC920BA8DA119DF9.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A6ADE8EAA224CCCD1F263E58DC920BA8DA119DF9.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 01:35:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:3b:08:76:59:d6:ad:da:6f:a2:60:d7:be:9c:6c:ee:13:1b:86:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A6ADE8EAA224CCCD1F263E58DC920BA8DA119DF9
        Validity
            Not Before: Oct 19 19:16:12 2026 GMT
            Not After : Oct 18 19:21:12 2027 GMT
        Subject: CN=B942E3B9C0FCFE65F5F3B573111ECCD990CDBC63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:17:d9:51:79:e2:57:51:a0:62:f5:f7:81:3e:
                    a9:61:fa:12:97:f5:1c:bb:90:96:2e:a5:31:87:6d:
                    71:9f:c6:e5:b1:03:8e:6e:b3:30:13:a4:a1:32:a7:
                    69:65:de:eb:a1:ec:85:6b:d9:8e:f3:9b:1d:0f:97:
                    e9:99:16:bd:d7:17:99:d6:91:e2:fb:17:fe:c9:ff:
                    c2:7f:7c:48:e3:7a:6d:24:f7:21:87:68:7a:a5:91:
                    48:f9:b5:30:55:8c:3c:35:04:78:1f:e1:b8:3d:a5:
                    d8:74:2d:8b:af:6a:c7:40:b1:96:6c:2f:80:cc:63:
                    74:b9:82:56:3f:80:18:2a:4f:69:87:d9:1d:ee:07:
                    f3:63:d3:85:07:b7:72:b6:6d:4d:a3:87:1b:c8:80:
                    ce:5c:14:e9:f1:55:83:99:f7:79:bf:94:7d:36:3a:
                    b2:5b:40:6f:0f:37:77:e2:22:52:e1:24:c1:18:05:
                    8e:a5:06:84:61:7c:04:82:32:1e:f6:30:62:2c:4a:
                    ae:d0:ca:84:4b:b8:07:bd:2b:0a:7c:7c:df:b3:ec:
                    0e:76:45:55:0f:03:5d:16:ac:88:ca:66:ca:2b:b5:
                    47:1a:ed:bb:e7:0a:10:46:de:32:f4:7c:62:e6:56:
                    72:91:43:d6:c0:1d:f3:93:5b:61:8c:ca:ac:38:a3:
                    2a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:42:E3:B9:C0:FC:FE:65:F5:F3:B5:73:11:1E:CC:D9:90:CD:BC:63
            X509v3 Authority Key Identifier:
                keyid:A6:AD:E8:EA:A2:24:CC:CD:1F:26:3E:58:DC:92:0B:A8:DA:11:9D:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.as219412.net/repo/axel-vir/0/A6ADE8EAA224CCCD1F263E58DC920BA8DA119DF9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A6ADE8EAA224CCCD1F263E58DC920BA8DA119DF9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.as219412.net/repo/axel-vir/0/326131343a373538313a336230303a3a2f34302d3430203d3e20323139343132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7581:3b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         50:ad:3e:77:2c:cd:1a:6a:42:1c:a3:2d:9d:d0:d4:41:a9:7d:
         4f:8d:19:5b:4a:21:be:2d:5e:a8:42:2b:e4:a9:37:38:19:34:
         63:13:1f:59:6a:d8:d1:16:20:87:b4:60:51:60:f6:9f:42:11:
         be:f6:cf:d7:73:79:ed:3f:ea:fb:87:32:b7:56:54:a8:eb:cb:
         c1:70:93:6c:0b:0c:f8:ed:b0:14:c3:51:be:8f:04:46:2b:d9:
         9d:3d:7a:ec:c9:4f:e4:b8:f6:3f:84:97:30:22:06:48:9f:bd:
         ba:56:82:bb:21:0f:57:77:9e:09:25:07:56:50:1f:e7:52:50:
         a6:c5:09:14:fb:ff:6c:42:ee:15:3e:6d:e8:83:a2:7d:b4:23:
         4e:a5:70:9b:1a:04:69:9c:c3:14:ef:57:90:5b:e3:04:07:61:
         b1:92:e9:48:22:1d:59:8e:1c:23:0a:be:05:17:41:d6:b7:dd:
         11:86:03:7e:aa:e1:58:09:e8:d5:12:00:f9:81:0c:48:f3:39:
         bc:41:1c:9e:ae:d5:9c:df:a4:98:ca:74:b4:d8:77:19:19:cf:
         b5:2e:66:48:00:23:2d:89:f9:e0:67:d0:f6:d5:1b:81:7d:10:
         c5:1f:f5:51:86:21:78:d5:cc:7a:a9:9c:89:00:e4:7a:1a:c5:
         d6:bc:0d:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:11:32 2026 by rpki-client