Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa
File:                     326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (raw, json)
Hash identifier:          +S9VStfSZSJqmBPGaa3iobG3lxhM+oUFG97KoEtieM4=
Subject key identifier:   17:EB:AC:B2:EA:7F:6D:54:F6:6A:90:A0:AB:C8:31:B7:62:08:74:9A
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       3F61CC8CA572870D93227F5D0C4B872F3FC7F93A
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa
Signing time:             Thu 11 Jul 2024 23:16:52 +0000
ROA not before:           Thu 11 Jul 2024 23:11:52 +0000
ROA not after:            Thu 10 Jul 2025 23:16:52 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:61:cc:8c:a5:72:87:0d:93:22:7f:5d:0c:4b:87:2f:3f:c7:f9:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Jul 11 23:11:52 2024 GMT
            Not After : Jul 10 23:16:52 2025 GMT
        Subject: CN=17EBACB2EA7F6D54F66A90A0ABC831B76208749A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:69:7b:d5:0a:16:65:f9:68:14:5b:55:a0:b1:
                    ef:44:32:7e:ce:79:49:10:c6:de:c5:07:67:9c:08:
                    ea:94:69:54:9c:d1:e5:2f:69:72:68:9f:88:9a:03:
                    27:56:0a:79:9d:64:2c:2f:9e:04:d1:ca:60:66:3b:
                    29:b2:08:62:8e:82:66:cd:00:f5:67:2d:d2:1a:45:
                    9e:67:cb:08:6a:11:33:fa:7e:4e:ec:b5:21:1d:44:
                    b1:60:76:fd:78:50:19:8c:57:15:59:7f:87:ac:42:
                    ac:df:91:2d:f5:14:7c:92:4c:e2:9e:cf:9c:7d:29:
                    0b:58:6c:30:6d:c9:97:b3:7e:78:c5:40:c9:c8:79:
                    5b:7c:7f:38:4f:f4:7d:41:83:61:55:fb:5c:ef:38:
                    df:5f:07:73:41:3e:2e:66:a3:ba:25:18:eb:ef:91:
                    52:0e:5e:ea:17:9a:92:0d:dc:5f:cb:4c:52:f9:a2:
                    2d:ca:d0:db:0d:20:6d:f0:9a:55:66:17:8d:49:c1:
                    50:4b:f8:e2:d2:aa:4d:ed:45:31:d4:80:e9:a4:4b:
                    1f:d8:bf:61:5d:98:ee:59:1e:df:1d:3d:df:20:e6:
                    5e:9f:c8:10:52:49:11:a3:b6:ee:59:c3:89:c7:31:
                    d5:46:66:25:c5:58:b5:91:75:ef:d1:89:51:6a:28:
                    a4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:EB:AC:B2:EA:7F:6D:54:F6:6A:90:A0:AB:C8:31:B7:62:08:74:9A
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:05:74:26:0a:9b:44:fc:0f:8a:85:e6:03:7d:cb:cb:fb:f6:
         f1:2c:dd:06:36:f6:18:0a:3f:f0:10:3b:ed:dd:a5:03:cd:54:
         7f:5f:f7:c1:55:5d:ca:ef:cc:9b:56:7e:d5:db:35:9d:a0:4e:
         b1:44:59:c5:6b:f0:f6:ce:17:83:d1:bc:03:4d:ee:ad:fd:4e:
         86:15:3e:59:74:8d:fb:41:98:c1:d6:4e:74:22:be:d8:81:c7:
         3f:dd:01:49:6e:9e:d8:df:54:82:b9:47:24:b2:08:d6:4b:48:
         a4:70:44:ff:f5:85:c5:f0:96:2a:72:f6:ce:54:a2:a0:02:b5:
         37:00:bc:65:33:02:c7:59:fe:81:c1:74:50:94:48:62:92:81:
         f2:25:b0:b3:4b:d4:d4:dc:ec:bf:45:20:b3:10:98:c4:bf:13:
         59:b0:86:d6:2d:23:83:7b:32:83:b5:9d:21:e8:da:1b:c0:52:
         3a:c6:51:bb:6a:cc:0a:81:5a:d9:93:97:ab:ee:9f:43:09:0d:
         3d:9d:0a:1f:9a:75:73:98:8a:98:e0:cf:22:41:34:c9:7e:e7:
         50:f9:b5:6a:16:ee:fd:97:38:f9:75:9b:bf:be:e2:b9:24:14:
         1e:69:ba:91:93:d5:af:d8:20:96:48:59:a2:c1:21:ce:3b:2f:
         6d:68:8f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 23:52:24 2024 by rpki-client on console-ams.rpki-client.org