Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa
File:                     326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa (raw, json)
Hash identifier:          XcTN7EZNbD4mrI90MMncgWZDMze4HuL/sckFXEE2qWo=
Subject key identifier:   9C:30:ED:DB:09:49:C2:86:8E:52:58:26:4A:C1:7F:FC:5A:30:3E:00
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       3E454457BCC4D862AF1AB2F52C4A30C864B86146
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa
Signing time:             Sat 30 Aug 2025 10:31:56 +0000
ROA not before:           Sat 30 Aug 2025 10:26:56 +0000
ROA not after:            Sat 29 Aug 2026 10:31:56 +0000
asID:                     213891
IP address blocks:        2a14:7580:770::/44 maxlen: 44
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:45:44:57:bc:c4:d8:62:af:1a:b2:f5:2c:4a:30:c8:64:b8:61:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Aug 30 10:26:56 2025 GMT
            Not After : Aug 29 10:31:56 2026 GMT
        Subject: CN=9C30EDDB0949C2868E5258264AC17FFC5A303E00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9d:e8:30:36:01:e8:76:69:ed:a2:93:e6:b6:
                    f3:52:92:ba:ff:18:af:22:95:28:da:bc:30:a0:89:
                    1d:2e:e8:59:69:b3:d5:e1:1b:6e:b6:31:88:75:83:
                    7d:d1:98:71:25:20:86:d5:49:23:ac:4a:7e:63:78:
                    06:89:6d:ab:45:51:b6:2f:e3:4e:47:db:d9:7d:35:
                    4c:dd:5f:d5:4d:05:3a:e4:ef:08:5a:d4:f1:6c:df:
                    00:c9:e4:f0:b0:67:1d:64:03:96:44:23:02:1c:7b:
                    36:b0:8f:75:c1:6e:e5:53:8f:86:41:8d:a7:37:da:
                    14:70:b3:79:c6:65:fb:f1:cc:a7:68:47:02:00:0b:
                    2f:a3:e7:0d:cf:bb:3e:6f:28:4a:c3:70:bc:e6:05:
                    51:32:16:ef:b6:af:7f:5c:b4:6f:d4:ac:f5:f6:5b:
                    5f:c9:6b:3c:ad:b0:8b:94:fb:35:9c:06:94:15:9b:
                    a0:33:5f:46:ad:d7:88:d5:aa:54:e1:c8:5b:f6:e5:
                    5f:8e:dc:1f:b2:4e:ec:74:30:82:de:70:d1:bb:e4:
                    cc:6f:4d:e1:9f:39:b2:19:d0:d2:1a:7f:be:68:1b:
                    6a:da:8f:91:ec:b5:96:d0:0a:90:48:02:af:54:17:
                    94:b7:b0:ad:b7:8a:e8:f9:4d:a0:7b:50:a5:15:38:
                    60:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:30:ED:DB:09:49:C2:86:8E:52:58:26:4A:C1:7F:FC:5A:30:3E:00
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3737303a3a2f34342d3434203d3e20323133383931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:770::/44

    Signature Algorithm: sha256WithRSAEncryption
         5a:74:b2:36:5f:a9:72:94:cd:d1:c8:d2:9d:6d:91:d9:53:ac:
         69:d9:28:3c:ca:0e:bc:3b:df:95:d7:fb:44:99:42:fc:3f:8b:
         98:b1:6e:8c:3c:05:68:5f:f1:c4:94:50:14:b0:3f:f4:e5:4c:
         a5:16:89:1a:14:26:02:8c:5b:5f:13:09:bc:f8:10:de:db:a3:
         f1:00:97:cb:cc:43:a6:97:11:36:0e:8e:92:b7:8c:e5:53:05:
         f9:f3:74:6d:75:0f:fb:51:0e:4c:76:0b:cc:7e:67:f0:65:db:
         1d:78:36:5d:96:19:97:e1:c7:f3:f5:b7:f0:9d:b8:e9:21:13:
         77:ad:09:f5:59:e9:4f:35:b4:bb:7e:fa:20:3b:93:b5:1d:03:
         06:0f:fd:a7:84:af:5c:c6:2a:6d:65:51:95:6b:9b:88:36:88:
         0c:f2:9f:d5:e9:fb:94:d2:c5:6e:ec:29:b8:5b:44:a3:5b:05:
         a2:5d:34:98:aa:fd:66:58:72:3a:11:de:fd:19:f9:ca:16:4b:
         10:1b:f8:08:c8:91:fd:66:59:cc:61:88:65:6e:3e:24:20:b5:
         da:36:35:7f:0e:b2:75:8b:9f:03:a1:07:6a:0c:78:69:a2:a9:
         b3:a1:35:20:fa:57:70:15:cb:cd:55:4d:cb:63:b8:8b:99:67:
         9d:7a:3e:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:58:15 2025 by rpki-client