Route Origin Authorization

$ rpki-client -vvf rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3761303a3a2f34342d3438203d3e20313531313934.roa
File:                     326131343a373538303a3761303a3a2f34342d3438203d3e20313531313934.roa (raw, json)
Hash identifier:          v7tYrBh9RxsZvBc7m0GxV1MdZxGgG2JNUp+3vYrTBHQ=
Subject key identifier:   9A:35:39:07:6A:3A:47:4C:C5:8B:8C:DE:02:14:94:2B:71:EE:51:7C
Certificate issuer:       /CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
Certificate serial:       0C4CAA83DD1ABBA114297B8215709F7F481FB2C7
Authority key identifier: F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
Subject info access:      rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3761303a3a2f34342d3438203d3e20313531313934.roa
Signing time:             Sat 30 Aug 2025 10:31:56 +0000
ROA not before:           Sat 30 Aug 2025 10:26:56 +0000
ROA not after:            Sat 29 Aug 2026 10:31:56 +0000
asID:                     151194
IP address blocks:        2a14:7580:7a0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl
                          rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 09 Sep 2025 01:55:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4c:aa:83:dd:1a:bb:a1:14:29:7b:82:15:70:9f:7f:48:1f:b2:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378
        Validity
            Not Before: Aug 30 10:26:56 2025 GMT
            Not After : Aug 29 10:31:56 2026 GMT
        Subject: CN=9A3539076A3A474CC58B8CDE0214942B71EE517C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a7:a5:cb:82:81:c8:86:e0:18:23:98:63:d1:
                    2d:f2:3f:ba:78:46:c9:f0:e4:23:db:cd:b5:fa:ee:
                    b0:fe:f9:4c:09:c0:74:47:5e:87:a9:b4:c6:8a:33:
                    9d:d8:b3:28:de:6f:a3:65:fb:13:fb:11:fe:a8:3e:
                    0c:b5:fd:50:d1:b7:a8:ea:8d:79:29:28:90:3d:76:
                    8e:26:16:cd:8b:e1:7f:81:bf:ad:0b:a3:2c:67:45:
                    3d:6d:e0:c0:35:95:e5:20:b8:0e:83:d4:d0:90:a9:
                    7c:00:e5:4b:de:22:a9:37:a7:79:70:13:80:4f:1f:
                    0b:c3:08:f9:c2:48:16:3e:b1:78:18:ce:8d:9b:ac:
                    71:64:6c:02:f1:6b:5a:46:ab:10:42:5e:fa:e9:68:
                    63:ae:3a:b0:db:03:b3:1f:7c:71:08:24:6d:40:0b:
                    7d:93:08:c8:4f:e6:a1:21:29:10:1f:09:f5:75:d6:
                    d0:96:88:6b:a8:e4:08:4c:dd:94:7c:2f:ff:78:f5:
                    13:27:42:5c:f0:be:cc:80:a5:18:57:2d:47:04:1d:
                    41:6e:ad:df:0b:92:7a:f8:dd:8d:90:72:97:01:68:
                    bd:47:01:c3:17:c1:0a:b1:a3:16:97:5a:d3:de:90:
                    ff:23:bb:95:4b:27:e5:43:96:93:ab:7b:86:e4:f6:
                    20:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:35:39:07:6A:3A:47:4C:C5:8B:8C:DE:02:14:94:2B:71:EE:51:7C
            X509v3 Authority Key Identifier:
                keyid:F6:DE:6F:C7:AC:46:7F:10:B5:70:5E:60:B8:FD:DA:02:FF:FD:73:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F6DE6FC7AC467F10B5705E60B8FDDA02FFFD7378.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.axivora.net/repo/Axivora-Net/2/326131343a373538303a3761303a3a2f34342d3438203d3e20313531313934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:7580:7a0::/44

    Signature Algorithm: sha256WithRSAEncryption
         6f:4a:4c:8e:5e:e0:cf:99:25:35:12:2d:67:df:94:a7:1e:f4:
         f3:e9:8c:2e:61:23:d3:6e:52:10:39:a6:2b:e9:10:5f:03:50:
         2a:2d:c6:6d:72:03:22:4c:21:1f:62:bb:9b:b6:53:35:d2:9b:
         eb:97:af:71:e2:fd:2c:5d:fa:d1:6a:18:c5:a4:df:b2:ab:fb:
         f9:58:17:3c:ed:f0:16:f9:f9:b4:29:ec:bd:70:d2:1b:9b:be:
         af:b2:2c:70:75:d9:79:e9:e3:11:d8:b1:73:5b:a8:54:97:21:
         ac:cc:be:c0:70:d9:4e:4d:d6:3e:64:21:a9:c6:94:c0:41:15:
         10:b6:82:e9:1a:aa:db:91:b3:4f:6d:c8:0c:31:0b:35:21:e8:
         e2:c8:14:0b:6a:c7:14:15:a2:f6:ec:53:a2:b0:55:e0:fd:71:
         bc:64:36:e3:0f:4e:4d:a7:8f:e7:d5:8c:71:03:ac:36:a1:a6:
         4c:5a:ea:f0:07:82:bb:5e:ad:c5:24:88:e8:7e:9c:db:3d:b2:
         8c:14:7e:63:7f:b5:96:42:5a:2e:57:3b:1f:c7:a1:7b:72:4a:
         07:59:31:48:b2:f2:e9:d0:d8:45:79:bb:75:5a:37:cc:06:0d:
         05:b3:e0:d4:04:43:17:0e:a6:ee:d9:33:1f:53:13:e6:8e:29:
         bb:f9:a7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 16:58:14 2025 by rpki-client