Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa
File:                     326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (raw, json)
Hash identifier:          SdUWKy5XLtVze0/Rv2RArh0H5JOIA7HiiOgtZpo8YWw=
Subject key identifier:   9A:70:F5:67:DC:90:43:BC:F7:2F:77:9A:6B:08:BB:0F:5C:A4:08:99
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       4670117A2C51022A93499E7B24A0D43F7BAACB74
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 22:47:13 +0000
ROA not before:           Thu 10 Aug 2023 22:42:13 +0000
ROA not after:            Thu 08 Aug 2024 22:47:13 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 May 2024 09:31:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:70:11:7a:2c:51:02:2a:93:49:9e:7b:24:a0:d4:3f:7b:aa:cb:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug 10 22:42:13 2023 GMT
            Not After : Aug  8 22:47:13 2024 GMT
        Subject: CN=9A70F567DC9043BCF72F779A6B08BB0F5CA40899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:32:a1:23:da:68:9e:b9:51:62:d0:1e:a7:
                    16:20:5f:e9:4d:9f:67:d3:71:01:6a:5e:b8:0f:91:
                    6f:75:65:04:c6:d3:85:41:01:7f:0f:ab:ac:f5:9b:
                    c0:73:55:9f:a5:41:56:d2:51:48:b9:62:5e:80:f1:
                    1d:d0:be:d5:8f:a7:5c:bb:31:ac:33:19:71:fe:a4:
                    77:2d:f2:c3:87:94:3d:3a:b3:8e:29:d2:44:06:4a:
                    7f:9a:f5:c7:7e:62:af:5c:31:6d:dc:e6:2b:7a:5b:
                    81:f8:0f:7c:98:87:dc:23:ff:bd:3d:5f:2f:21:5b:
                    0d:88:70:d0:15:e3:0f:97:fe:cd:60:dd:00:c5:cd:
                    8e:f3:83:ca:86:f5:ab:09:2c:bb:38:7d:1d:4d:ab:
                    24:5b:c2:6a:9f:af:f5:0e:bb:bf:52:7e:24:cd:e9:
                    4d:dc:42:0d:9e:ed:8b:89:3e:b1:62:4f:3c:74:7e:
                    0b:94:8a:99:01:fa:18:03:17:57:f0:49:33:dd:b2:
                    d8:63:37:a2:b2:20:db:b7:26:d8:67:ba:98:0d:18:
                    83:86:04:f4:8f:65:3d:bb:92:49:e0:30:d4:ec:ac:
                    40:96:09:db:ea:85:7f:9b:b1:fe:e0:7d:69:58:cb:
                    88:28:36:d3:82:a4:1f:d8:05:63:a1:f9:81:75:a3:
                    7d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:70:F5:67:DC:90:43:BC:F7:2F:77:9A:6B:08:BB:0F:5C:A4:08:99
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:c4:01:11:34:aa:50:ea:80:8a:e9:68:63:ef:83:94:71:bd:
         6d:89:a3:54:29:b2:13:21:cb:82:59:95:ea:7b:76:41:af:f7:
         41:0c:62:e6:22:4c:65:09:e6:c8:f4:2a:4f:52:cd:4a:bc:93:
         9e:6e:6b:18:a8:9f:5c:be:f7:b3:cd:58:43:8d:dd:b1:4a:50:
         27:68:48:a8:a6:d2:fd:d5:fc:ff:cc:35:f4:bd:62:e9:ff:68:
         b2:b1:63:b7:25:bf:f5:5a:c3:d5:62:9e:16:7c:ee:67:e5:fe:
         9f:49:44:9a:3f:05:f9:0e:15:31:7f:6f:28:32:9b:f0:49:c4:
         c1:78:53:ae:dc:37:db:77:cd:34:6a:ea:90:ca:76:98:bf:82:
         f3:86:2d:29:f4:88:b7:46:ce:aa:e8:5f:53:c5:cf:2b:70:5e:
         b0:67:4c:00:c2:f0:c0:1c:ea:8a:bf:c2:0d:4e:66:57:30:4c:
         01:a0:47:18:d7:85:e3:0a:0b:65:99:27:96:7b:58:f2:5c:c6:
         61:9c:46:1b:cf:25:a8:78:3c:81:7d:ca:39:9f:6c:a3:06:ef:
         43:e1:05:6b:d2:73:68:11:8c:bb:82:be:03:80:b4:48:f4:0b:
         2b:64:e9:3d:96:4c:9e:b5:c2:80:05:0d:64:c6:1b:23:41:26:
         64:44:17:fc
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIURnAReixRAiqTSZ57JKDUP3uqy3QwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0M1RkU5RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0Ex
Q0RCMkE1NjAeFw0yMzA4MTAyMjQyMTNaFw0yNDA4MDgyMjQ3MTNaMDMxMTAvBgNV
BAMTKDlBNzBGNTY3REM5MDQzQkNGNzJGNzc5QTZCMDhCQjBGNUNBNDA4OTkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB/zKhI9ponrlRYtAepxYgX+lN
n2fTcQFqXrgPkW91ZQTG04VBAX8Pq6z1m8BzVZ+lQVbSUUi5Yl6A8R3QvtWPp1y7
MawzGXH+pHct8sOHlD06s44p0kQGSn+a9cd+Yq9cMW3c5it6W4H4D3yYh9wj/709
Xy8hWw2IcNAV4w+X/s1g3QDFzY7zg8qG9asJLLs4fR1NqyRbwmqfr/UOu79SfiTN
6U3cQg2e7YuJPrFiTzx0fguUipkB+hgDF1fwSTPdsthjN6KyINu3JthnupgNGIOG
BPSPZT27kkngMNTsrECWCdvqhX+bsf7gfWlYy4goNtOCpB/YBWOh+YF1o32TAgMB
AAGjggIOMIICCjAdBgNVHQ4EFgQUmnD1Z9yQQ7z3L3eaawi7D1ykCJkwHwYDVR0j
BBgwFoAUPF/p1qj967zY771AKAsoehzbKlYwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMS8zQzVGRTlENkE4RkRFQkJDRDhFRkJENDAyODBCMjg3QTFD
REIyQTU2LmNybDB6BggrBgEFBQcBAQRuMGwwagYIKwYBBQUHMAKGXnJzeW5jOi8v
Y2xvdWRpZS1yZXBvLnJwa2kuYXBwL3JlcG8vQ0xPVURJRS1SUEtJLzAvM0M1RkU5
RDZBOEZERUJCQ0Q4RUZCRDQwMjgwQjI4N0ExQ0RCMkE1Ni5jZXIwgY4GCCsGAQUF
BwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsv
cmVwby9wYXJhZG94bmV0d29ya3MvMS8zMjYxMzAzNTNhNjQ2NjYzMzEzYTM1MzAz
MDNhM2EyZjM0MzAyZDM0MzAyMDNkM2UyMDM1MzIzMDMyMzUucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMA4EAgACMAgDBgAq
Bd/BBTANBgkqhkiG9w0BAQsFAAOCAQEAs8QBETSqUOqAiuloY++DlHG9bYmjVCmy
EyHLglmV6nt2Qa/3QQxi5iJMZQnmyPQqT1LNSryTnm5rGKifXL73s81YQ43dsUpQ
J2hIqKbS/dX8/8w19L1i6f9osrFjtyW/9VrD1WKeFnzuZ+X+n0lEmj8F+Q4VMX9v
KDKb8EnEwXhTrtw323fNNGrqkMp2mL+C84YtKfSIt0bOquhfU8XPK3BesGdMAMLw
wBzqir/CDU5mVzBMAaBHGNeF4woLZZknlntY8lzGYZxGG88lqHg8gX3KOZ9sowbv
Q+EFa9JzaBGMu4K+A4C0SPQLK2TpPZZMnrXCgAUNZMYbI0EmZEQX/A==
-----END CERTIFICATE-----
Generated at Tue May 28 17:49:19 2024 by rpki-client on console-fra.rpki-client.org