Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3739303a3a2f34342d3438203d3e20323136303536.roa
File:                     326131343a373538303a3739303a3a2f34342d3438203d3e20323136303536.roa (raw, json)
Hash identifier:          YLqop/WOuAN60nAYpEpMSeBo3PMtjuqeni1FzwnlcqE=
Subject key identifier:   3B:C9:ED:96:29:2A:0E:EA:D4:1F:43:10:82:14:61:A7:38:73:33:E9
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       7E9AD3E042266C741A217D909B226DB68AE5B6D4
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3739303a3a2f34342d3438203d3e20323136303536.roa
Signing time:             Sat 30 Aug 2025 10:31:56 +0000
ROA not before:           Sat 30 Aug 2025 10:26:56 +0000
ROA not after:            Sat 29 Aug 2026 10:31:56 +0000
asID:                     216056
IP address blocks:        2a14:7580:790::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 08 Sep 2025 09:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:9a:d3:e0:42:26:6c:74:1a:21:7d:90:9b:22:6d:b6:8a:e5:b6:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Aug 30 10:26:56 2025 GMT
            Not After : Aug 29 10:31:56 2026 GMT
        Subject: CN=3BC9ED96292A0EEAD41F4310821461A7387333E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f7:26:a6:12:7a:16:a8:3a:e8:53:93:3c:5e:
                    35:b9:8f:cc:12:79:ad:df:ed:62:95:42:29:4f:4a:
                    cc:3f:80:65:8a:e1:4e:62:3b:7d:22:72:d5:3c:6d:
                    51:d9:0a:10:05:b3:86:87:00:9a:30:b4:43:0f:04:
                    cb:02:0f:c2:56:60:3c:24:91:31:16:85:35:65:a9:
                    a0:aa:cc:9c:6d:6e:2e:61:e8:76:d8:6f:a3:af:2f:
                    2f:2e:c5:09:5d:78:93:3a:87:9e:be:2e:25:42:75:
                    64:59:73:92:e3:b1:06:91:b6:27:eb:b2:27:3e:b2:
                    5f:74:b0:05:6c:08:39:15:35:b8:0a:e1:27:1f:9f:
                    af:fb:b9:f8:4b:06:04:fe:16:5e:43:0c:a6:a0:fa:
                    a8:2d:8c:e9:3a:fb:21:2f:b8:2d:a6:4b:15:9d:d0:
                    c2:89:65:67:55:c0:5b:10:4d:1c:c7:69:b1:51:f5:
                    b2:eb:12:00:ff:f6:10:a5:df:20:83:4a:ef:43:27:
                    ed:84:de:60:04:a5:2f:9b:b5:39:e6:d6:36:a2:f5:
                    1a:41:bc:82:31:9c:28:c9:a8:0a:88:3b:76:93:a4:
                    5b:1d:f0:22:71:3c:aa:07:db:ed:4e:d8:c9:9c:b6:
                    42:46:86:1b:8c:2e:5d:64:be:ab:61:67:d4:04:9e:
                    7f:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C9:ED:96:29:2A:0E:EA:D4:1F:43:10:82:14:61:A7:38:73:33:E9
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3739303a3a2f34342d3438203d3e20323136303536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:790::/44

    Signature Algorithm: sha256WithRSAEncryption
         1e:5d:a3:a8:61:10:97:cd:69:e5:dc:58:36:13:8f:4a:a0:e4:
         03:90:d5:0e:72:2a:37:c6:c5:f8:bb:30:aa:4e:57:b9:a5:81:
         84:46:63:36:32:62:aa:0d:02:68:c5:ff:98:cc:06:56:b4:99:
         fa:0f:57:5b:a9:41:e8:88:43:86:11:ee:f6:08:5e:55:fd:97:
         e9:69:09:d8:c6:5d:03:ae:3e:6c:7f:12:1f:27:e8:40:f2:8e:
         7a:06:11:6a:ae:15:65:5b:dd:9e:20:af:9c:d7:ec:0f:14:26:
         22:82:bb:3b:22:e5:4a:fc:9a:75:e7:20:03:af:d9:f0:13:de:
         88:df:2e:ed:ac:fb:17:d4:6e:63:1b:09:0b:e4:38:5c:cd:b3:
         65:64:d0:3c:64:8e:0a:42:a0:6d:3b:d1:25:5c:c5:4e:bc:d1:
         7a:e5:42:62:43:6a:22:ad:63:89:31:f0:5e:d7:c7:aa:80:39:
         ff:3e:34:18:5f:77:a7:3d:2c:15:4b:0a:e7:97:7e:10:b0:57:
         09:13:bc:dc:d6:d0:f4:b1:f7:70:c5:31:b2:b0:ba:59:10:d1:
         f3:49:a7:ab:6d:4f:26:c4:73:69:fd:95:32:fb:3f:a0:b5:ab:
         81:87:96:4e:2b:30:f0:32:c9:8f:88:ac:5c:86:69:34:06:ab:
         94:23:44:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 7 18:18:50 2025 by rpki-client