Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa
File:                     326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (raw, json)
Hash identifier:          gBNR1az3gaFB67uY/7gHIjeyw1bIcqg6hUT6zadmDWc=
Subject key identifier:   76:6D:37:CE:9D:4E:32:C8:1F:CB:A8:77:0C:A3:6D:AD:BF:F0:72:A8
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       38ABDB9A7C2CFF4F38194EC35D67F36F055D59DD
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 22:47:28 +0000
ROA not before:           Thu 10 Aug 2023 22:42:28 +0000
ROA not after:            Thu 08 Aug 2024 22:47:28 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:400::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 13:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:ab:db:9a:7c:2c:ff:4f:38:19:4e:c3:5d:67:f3:6f:05:5d:59:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Aug 10 22:42:28 2023 GMT
            Not After : Aug  8 22:47:28 2024 GMT
        Subject: CN=766D37CE9D4E32C81FCBA8770CA36DADBFF072A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b3:e1:ad:d0:b2:42:f7:02:48:45:7f:dd:7b:
                    d5:eb:d9:e5:3a:9a:b4:f0:09:4c:bc:98:4c:14:b4:
                    15:c3:0f:a9:ff:70:d1:91:b3:94:0a:c2:94:0f:4c:
                    46:0c:60:84:7c:bb:a2:7d:3f:57:6a:25:b2:97:f5:
                    47:94:28:1a:3f:8b:08:ca:14:b8:4a:5e:f1:a0:84:
                    f1:36:83:9d:74:ef:87:f3:03:c1:2a:ef:13:46:0e:
                    8d:92:ee:b5:49:85:77:2d:df:a1:4c:2b:86:23:8e:
                    5e:ae:40:3b:96:8b:e2:7c:47:24:f9:b2:40:2a:b8:
                    65:7f:8e:81:72:cd:9d:98:44:23:39:4f:7c:02:91:
                    90:ac:db:16:45:59:44:c9:0e:f2:23:f0:23:b2:49:
                    03:1c:8d:f8:6e:bf:08:91:79:c5:88:d9:a1:c9:73:
                    2a:c9:f2:08:89:a2:54:ea:52:fe:9b:1f:47:db:8c:
                    de:89:1b:d6:d5:af:26:64:2d:d2:a5:1a:33:e0:96:
                    a2:b9:c6:93:44:64:24:ae:92:c3:63:dc:96:d7:73:
                    23:36:5e:ff:37:9f:11:5f:ee:d8:9b:68:0b:b1:ad:
                    11:c8:97:a7:bb:9b:aa:fb:09:dd:e6:09:bd:af:37:
                    36:45:14:f0:09:d7:bb:37:bc:20:9c:a9:78:fd:90:
                    1d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:6D:37:CE:9D:4E:32:C8:1F:CB:A8:77:0C:A3:6D:AD:BF:F0:72:A8
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         8b:81:b8:30:4f:51:78:06:0b:8c:e6:10:4d:33:c9:73:22:a5:
         3c:cf:c7:91:2f:98:35:51:7b:ac:67:20:d7:b9:85:06:6c:55:
         2b:1a:59:2d:c1:99:ac:73:25:fb:f5:9e:50:59:fb:eb:da:79:
         ea:66:6a:9d:51:e8:b5:1c:6a:3c:f1:5e:9b:52:6b:b3:6b:52:
         90:7e:36:3a:7a:61:73:9c:e8:92:5b:95:5e:aa:d7:a0:a4:dc:
         a7:f8:93:20:e4:ea:ef:8b:2a:0a:35:7c:19:2d:be:42:79:2c:
         f3:0f:91:b5:67:f1:5a:48:de:b5:5e:3d:61:c1:11:8e:2d:23:
         ed:cb:86:9b:7d:8d:ad:17:cf:e9:7f:29:8f:61:81:44:27:d7:
         3c:27:dc:d5:97:cd:dd:33:6b:09:9f:2e:31:74:de:f4:90:45:
         24:a8:16:55:3c:2b:88:00:7e:37:0e:d9:6f:33:24:44:ae:49:
         98:9b:c2:7b:34:32:44:c1:08:bd:6e:64:33:a6:13:3a:98:81:
         64:c7:b3:a9:4e:9f:02:92:49:59:ce:c1:1c:b3:91:cb:26:e1:
         b5:17:fa:dc:0e:72:39:c9:72:50:5e:58:87:df:9e:6f:78:fc:
         a3:84:8b:12:0c:52:bc:fd:84:a7:fa:47:b2:c6:9a:35:88:4e:
         21:88:55:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 00:09:47 2024 by rpki-client on console-fra.rpki-client.org