Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3733303a3a2f34342d3434203d3e20323038373534.roa
File:                     326131343a373538303a3733303a3a2f34342d3434203d3e20323038373534.roa (raw, json)
Hash identifier:          6fb57Veu0xfGp/lsDPbJbrrMMIerNBULiahv14AoClk=
Subject key identifier:   99:F2:BB:93:4E:7B:97:61:DA:3C:DE:4B:0F:38:A7:68:8E:AB:C7:FE
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       2C48B797B78A6DA6E1C03BA2BC99713FA98BAD85
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3733303a3a2f34342d3434203d3e20323038373534.roa
Signing time:             Sat 30 Aug 2025 10:31:55 +0000
ROA not before:           Sat 30 Aug 2025 10:26:55 +0000
ROA not after:            Sat 29 Aug 2026 10:31:55 +0000
asID:                     208754
IP address blocks:        2a14:7580:730::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:48:b7:97:b7:8a:6d:a6:e1:c0:3b:a2:bc:99:71:3f:a9:8b:ad:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Aug 30 10:26:55 2025 GMT
            Not After : Aug 29 10:31:55 2026 GMT
        Subject: CN=99F2BB934E7B9761DA3CDE4B0F38A7688EABC7FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4f:c4:b3:89:c0:2f:aa:77:0c:42:eb:85:2c:
                    e0:99:41:7b:10:b3:33:89:f3:8d:31:c6:a8:52:29:
                    37:3f:8d:d1:2d:4c:15:bf:0a:ac:c5:6e:49:89:35:
                    8a:46:60:66:b7:71:30:a1:d6:92:28:53:e3:85:74:
                    09:58:ab:78:68:9f:27:45:c6:6d:23:d5:de:dd:2c:
                    d2:08:80:e1:98:e0:93:90:0d:f8:6b:28:84:de:a8:
                    7d:5c:d7:fe:f0:32:0c:f1:7f:2d:9e:1b:cf:94:e7:
                    75:5a:03:f4:7b:3f:44:77:6c:b8:59:cb:d3:1c:33:
                    7e:a8:88:63:1e:ff:0b:f0:50:19:92:b5:99:79:ad:
                    99:5b:21:28:ef:d9:d7:1e:b3:78:ec:88:31:bb:7f:
                    b4:40:e0:aa:df:a4:68:a7:f5:32:48:2c:b2:db:eb:
                    16:3c:77:79:bf:89:38:54:e1:2b:9a:ef:05:ba:e1:
                    2e:3d:46:4d:a9:f5:af:ee:93:01:82:ac:11:cb:67:
                    35:b1:eb:2b:0b:0a:8d:7c:37:b5:41:b1:39:91:94:
                    0f:37:41:1d:ff:ca:97:58:d2:67:de:13:4d:65:69:
                    f2:f7:c3:ff:7c:b3:66:9f:9d:41:9b:14:74:b4:68:
                    15:37:ae:9f:71:32:b4:50:df:71:4e:c2:0c:64:74:
                    7e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:F2:BB:93:4E:7B:97:61:DA:3C:DE:4B:0F:38:A7:68:8E:AB:C7:FE
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3733303a3a2f34342d3434203d3e20323038373534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:730::/44

    Signature Algorithm: sha256WithRSAEncryption
         33:e1:a5:ae:da:dc:07:aa:41:fc:fc:7b:d8:f8:56:09:bf:3c:
         87:33:26:9e:ee:69:b7:b3:7e:dd:35:50:f4:ae:46:bf:ad:7a:
         83:f6:70:cb:76:01:8f:eb:c9:82:19:63:5f:70:9e:1d:5a:82:
         8f:f6:16:3e:56:84:69:93:5d:f5:0c:bf:b0:bd:20:c9:0f:ea:
         a3:a0:98:66:ab:7f:47:29:19:bf:0b:b7:d0:8c:4b:e9:1d:16:
         d8:5b:8e:06:28:14:48:c4:94:0a:2f:7d:a7:fc:e9:47:64:3f:
         15:1d:6e:cd:59:17:aa:81:b3:06:2d:20:7c:6a:45:fe:7f:f6:
         7f:53:88:91:a5:d0:a6:d5:85:38:a5:13:8e:4e:ed:9c:b6:ce:
         4f:41:56:48:7b:71:b6:50:7b:02:3f:d7:f3:6f:b1:2e:2b:15:
         3e:23:14:2e:05:e4:ff:f5:1a:8b:de:bd:8e:99:27:f0:18:3d:
         d0:5d:bc:64:80:70:33:7b:3a:86:ed:c0:01:27:e9:37:c9:2c:
         00:da:cb:6d:a5:9f:d8:a5:81:60:99:3b:7d:80:64:4f:fb:86:
         88:5f:fc:de:ad:9c:ad:cd:37:0e:4a:be:8c:9a:1a:6f:5b:f4:
         32:24:45:01:3f:0b:32:36:40:1a:1a:14:03:c3:ce:99:39:8a:
         aa:9f:28:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:57:27 2025 by rpki-client