Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3730303a3a2f34342d3438203d3e20313938303235.roa
File:                     326131343a373538303a3730303a3a2f34342d3438203d3e20313938303235.roa (raw, json)
Hash identifier:          sSL0VU16xArt9OmoVrCdfMg+348//+wOGHLbIsC6bAs=
Subject key identifier:   09:93:43:10:93:73:28:70:66:A1:5F:AD:A9:CB:30:0E:AC:81:5C:B0
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       4547AFAAEF4FBA2F673E99511B8407624A7D30C2
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3730303a3a2f34342d3438203d3e20313938303235.roa
Signing time:             Sat 30 Aug 2025 10:31:56 +0000
ROA not before:           Sat 30 Aug 2025 10:26:56 +0000
ROA not after:            Sat 29 Aug 2026 10:31:56 +0000
asID:                     198025
IP address blocks:        2a14:7580:700::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:47:af:aa:ef:4f:ba:2f:67:3e:99:51:1b:84:07:62:4a:7d:30:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Aug 30 10:26:56 2025 GMT
            Not After : Aug 29 10:31:56 2026 GMT
        Subject: CN=099343109373287066A15FADA9CB300EAC815CB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:60:a7:b7:03:07:e8:b2:94:36:d1:84:c0:76:
                    07:a4:01:36:27:30:85:f1:56:e5:7a:c0:72:f7:dc:
                    2f:3e:e5:1d:cf:72:ce:01:f6:43:3b:d7:c4:4f:a3:
                    16:13:38:ed:d6:74:ca:86:af:d9:11:1c:10:a0:68:
                    5c:dd:56:b5:76:42:d8:0b:f1:61:31:20:a8:16:69:
                    5c:d6:e9:60:aa:2e:9b:37:78:9c:15:6f:29:87:b5:
                    22:2a:34:06:e5:e2:51:21:f2:14:4d:d2:5e:5c:07:
                    f2:ac:65:83:c9:ff:2e:ec:f9:0e:3e:5b:f9:7f:e5:
                    f3:7b:2e:a6:9b:7c:2b:01:0d:f1:4c:59:88:88:ff:
                    6c:cc:f2:23:dd:75:50:3d:f1:ea:43:01:b3:c7:a6:
                    1d:aa:6f:62:ba:96:04:c0:ac:97:38:26:34:29:b5:
                    26:ed:6e:10:ed:09:3a:12:50:36:d0:77:47:05:d8:
                    e1:6a:70:b0:56:86:81:48:f6:ca:ae:45:c1:7d:b8:
                    68:ab:51:c2:cc:4b:f0:9f:bb:75:71:b0:f6:48:82:
                    10:0f:3f:6a:6d:0a:34:0d:23:b1:a4:c1:f8:ae:72:
                    e4:c9:a8:a9:a3:5a:e4:fc:66:de:cd:3d:ad:57:10:
                    03:21:04:27:57:04:0f:2c:5b:eb:f4:3e:50:d8:cd:
                    4e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:93:43:10:93:73:28:70:66:A1:5F:AD:A9:CB:30:0E:AC:81:5C:B0
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3730303a3a2f34342d3438203d3e20313938303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:700::/44

    Signature Algorithm: sha256WithRSAEncryption
         c6:30:fa:e4:70:a4:55:0f:f2:9b:92:d1:b8:c6:11:ef:2f:93:
         7b:21:c9:94:08:99:48:50:a6:01:35:8d:aa:d8:b8:8e:cb:85:
         96:08:68:a4:67:5d:e3:41:c0:a9:0f:85:ea:89:7e:89:bb:8c:
         41:14:3e:a6:7e:06:de:28:56:f2:1d:c5:47:87:80:33:c4:b6:
         3a:17:82:f3:73:7f:f4:07:da:38:f1:34:fd:0e:25:4f:c7:e9:
         ef:00:a4:80:e3:fa:f5:4b:20:30:2f:a2:7b:c9:6d:24:74:57:
         18:0e:04:83:34:ac:db:86:56:4c:57:5d:37:15:bd:b9:9d:53:
         3c:c0:76:9a:41:b4:d8:6f:89:c7:b1:b3:f0:0d:db:ef:92:1d:
         d8:3e:8b:81:8a:28:83:63:7d:26:8b:d3:2c:79:f1:8c:ac:b2:
         5d:a6:07:0d:39:73:a3:60:e2:9d:e4:ad:8d:f3:5f:bc:2f:87:
         fc:bf:be:19:af:3a:40:ec:8c:45:ae:1f:69:6b:3e:3e:24:9e:
         3c:c8:c9:65:7d:a7:48:5d:ad:bc:0b:42:22:07:28:cb:0c:38:
         9d:f0:cb:3a:55:7b:60:f1:59:39:76:42:87:e6:1b:42:38:15:
         d4:fd:7c:9d:a0:7c:f9:6a:15:3d:8d:00:82:f8:3d:ec:03:59:
         5d:68:03:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:58:15 2025 by rpki-client