Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3732313a3a2f34382d3438203d3e20313938303235.roa
File:                     326131343a373538303a3732313a3a2f34382d3438203d3e20313938303235.roa (raw, json)
Hash identifier:          3s9yOhfor+/2+DoiB4wZMRTY5CEsrzaFRiVfzDJFmag=
Subject key identifier:   C7:8F:B9:56:3D:DF:29:BD:A7:BE:AB:54:08:6B:B0:89:95:23:54:08
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       3EBC53ECD7889A152683C34FF4B9A0F252AFD893
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3732313a3a2f34382d3438203d3e20313938303235.roa
Signing time:             Sat 30 Aug 2025 10:31:56 +0000
ROA not before:           Sat 30 Aug 2025 10:26:56 +0000
ROA not after:            Sat 29 Aug 2026 10:31:56 +0000
asID:                     198025
IP address blocks:        2a14:7580:721::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bc:53:ec:d7:88:9a:15:26:83:c3:4f:f4:b9:a0:f2:52:af:d8:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Aug 30 10:26:56 2025 GMT
            Not After : Aug 29 10:31:56 2026 GMT
        Subject: CN=C78FB9563DDF29BDA7BEAB54086BB08995235408
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e2:3c:1a:f5:02:76:a2:d4:6a:b5:6e:79:fc:
                    ac:80:59:f8:7a:c2:f8:9c:c3:41:7b:f7:ed:8c:f3:
                    3e:84:aa:aa:1e:ec:ec:27:18:ea:9a:39:1c:29:58:
                    d2:6b:db:01:7b:12:d2:f3:55:e9:bd:5d:ec:bc:6f:
                    bd:26:65:bb:19:fa:cd:d7:64:5f:21:d9:0c:d0:d1:
                    c8:0a:2c:34:db:ad:f5:66:7e:25:5f:3c:30:86:cc:
                    a1:86:42:ee:4c:79:d0:e7:12:70:8d:76:14:ef:b0:
                    bc:f0:12:60:a6:31:c3:ee:82:fb:6b:61:e1:f8:58:
                    cb:02:fc:94:62:b5:ff:33:76:cf:3d:cf:10:8c:be:
                    e8:38:6a:a0:09:55:ba:e0:ca:39:96:0b:52:73:6f:
                    66:a6:b9:9f:31:f9:18:83:14:a4:03:38:33:27:62:
                    c9:ae:8a:6e:d7:22:eb:b8:2c:d9:57:5d:e1:65:af:
                    6e:d2:06:80:78:e7:64:a3:2d:d5:02:f9:dd:02:43:
                    7c:fb:7b:b6:a3:55:fd:89:c2:9c:4a:27:16:0b:40:
                    b7:52:80:2b:54:10:ac:a4:34:e1:9b:89:8c:95:38:
                    f3:ba:c5:58:26:69:34:cf:42:c8:fc:55:7c:e1:d4:
                    28:59:9b:fc:fb:2a:d3:94:e9:6c:89:5e:bf:07:16:
                    f2:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:8F:B9:56:3D:DF:29:BD:A7:BE:AB:54:08:6B:B0:89:95:23:54:08
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3732313a3a2f34382d3438203d3e20313938303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:721::/48

    Signature Algorithm: sha256WithRSAEncryption
         4c:b2:12:9b:4d:cf:8a:9a:15:e9:28:8e:4e:95:e9:5f:f6:18:
         41:a8:51:cc:67:75:2b:e6:64:ea:77:06:ae:db:76:9e:97:a1:
         63:86:1b:08:b7:45:3b:4b:e1:55:d1:c5:5c:d9:24:af:54:6e:
         ec:fa:17:89:b0:71:f7:9e:e0:62:99:51:97:16:6b:87:6c:26:
         3e:c9:ab:48:5a:6e:5a:87:00:c9:38:f3:6c:7d:0e:f3:2c:15:
         b4:7b:c2:11:4c:73:c1:b6:8f:8f:91:67:59:fe:29:34:af:99:
         28:ae:8e:53:25:7f:62:42:d1:60:ce:9c:a1:9c:8e:09:6e:ed:
         54:ff:ca:b7:d9:62:46:b1:bc:41:f4:6e:92:f5:b3:e4:65:68:
         53:24:b7:d5:4a:4b:05:b4:56:05:32:48:f6:33:d4:11:93:e4:
         81:45:b0:6f:54:70:99:8e:7e:59:8b:9e:38:0f:7f:87:a9:7a:
         64:78:d4:e0:5c:09:47:bc:15:01:48:11:e5:e3:d1:ec:7f:e3:
         6c:de:65:c4:bf:5f:54:97:dc:23:64:1d:f9:6a:14:de:a3:b2:
         7f:6d:58:33:ac:74:0e:10:d4:b4:32:14:cc:00:3e:3d:2c:49:
         cb:28:bc:f6:3e:8c:1d:6c:ec:89:2d:bd:d8:47:71:50:7c:dd:
         af:d9:32:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:57:25 2025 by rpki-client