Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa
File:                     326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa (raw, json)
Hash identifier:          n2IQUsbHX/JQ0j5zhGtX2lreLVvqFQqO5uiLeYoHr9o=
Subject key identifier:   2E:1B:EB:6D:62:B7:B5:06:4B:F8:DA:FB:FA:6B:45:F5:6F:C5:29:B3
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       09A2D66CF0ADB602CC66A247DBE56F6DA4555444
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa
Signing time:             Thu 11 Jul 2024 23:16:52 +0000
ROA not before:           Thu 11 Jul 2024 23:11:52 +0000
ROA not after:            Thu 10 Jul 2025 23:16:52 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:500::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 08:27:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:a2:d6:6c:f0:ad:b6:02:cc:66:a2:47:db:e5:6f:6d:a4:55:54:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Jul 11 23:11:52 2024 GMT
            Not After : Jul 10 23:16:52 2025 GMT
        Subject: CN=2E1BEB6D62B7B5064BF8DAFBFA6B45F56FC529B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:0b:72:c6:46:40:0a:08:90:e0:6e:ad:fb:41:
                    65:15:1b:ff:e1:e8:45:56:7c:3c:f0:d8:5b:94:41:
                    2c:fd:fc:c1:7f:4f:3a:a3:8c:57:58:b6:ac:ed:8d:
                    e8:37:62:ab:71:ea:c2:71:d1:34:7f:59:58:c3:61:
                    7f:f5:4b:32:67:79:58:cd:a4:3c:5a:91:44:5a:45:
                    6c:ea:8f:98:df:60:8a:4f:61:b0:9a:3d:3c:76:4c:
                    40:b1:e7:ab:5f:11:c3:3f:89:96:4f:d3:5c:e6:c6:
                    5c:2f:23:ff:27:bc:21:5e:8d:c6:8d:6d:2b:4b:c4:
                    82:2b:bd:ac:46:54:fd:1f:26:f9:22:86:20:b3:d4:
                    94:78:71:2a:a4:85:33:d4:f0:71:6e:4c:4c:9d:c5:
                    39:59:54:e1:62:2c:b4:b2:8b:96:f7:41:29:97:27:
                    35:c5:25:63:07:cd:44:97:ed:e8:9f:dc:e4:eb:c5:
                    a6:e1:cc:66:c0:f9:9d:90:86:a6:ea:3c:4a:9c:f9:
                    2b:63:2d:c6:f3:09:32:7d:26:01:4a:be:5e:0d:17:
                    7d:10:86:47:49:09:3d:91:e1:d6:96:9e:09:e2:30:
                    4d:7a:2b:45:b2:48:f5:c5:a6:1a:a7:6b:7d:10:76:
                    95:62:29:3f:5f:26:03:56:92:ea:1e:cc:23:28:58:
                    f8:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1B:EB:6D:62:B7:B5:06:4B:F8:DA:FB:FA:6B:45:F5:6F:C5:29:B3
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3530303a3a2f34302d3430203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         35:d9:46:db:05:93:a6:a4:24:39:99:c7:8f:a9:ea:80:a0:23:
         83:65:4a:de:f9:0f:31:5f:2f:4d:55:12:80:73:d9:20:a5:78:
         69:a2:9e:a1:2d:fe:fa:a3:a6:29:e9:73:b8:bc:f3:6c:c7:c2:
         c8:ec:0a:37:e8:bb:e2:ab:1f:64:a5:fc:b4:9f:b6:19:48:12:
         97:6c:3d:d1:60:fa:8f:34:0c:96:5c:49:b1:c1:d6:f6:e9:f5:
         48:02:dc:56:c9:10:ae:98:3a:ed:57:1a:a6:d4:24:1d:8e:14:
         7f:2d:d9:d4:c4:87:c9:84:7a:a2:9b:e5:77:05:f3:21:0b:54:
         37:f8:02:24:49:c4:8d:21:28:7e:c2:19:1e:cb:94:a9:0c:4d:
         f9:db:d2:5b:b2:0e:c1:d5:0a:2a:62:37:d4:d7:c5:0a:d4:1f:
         35:8c:39:5b:98:48:84:4e:50:33:fa:73:34:cb:bd:c5:0d:21:
         aa:2e:da:85:fc:10:11:1e:a9:20:7f:e4:45:6e:17:96:53:81:
         4a:92:26:a6:f1:47:9c:84:72:ab:27:ab:05:db:20:3f:21:71:
         32:00:9a:93:c0:a5:c4:d8:95:58:c0:82:d7:6f:bb:6e:4e:d0:
         25:b6:1f:d1:f3:bc:70:bd:cf:31:62:fa:4b:fd:bf:37:4d:ae:
         c1:a5:3b:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:31:47 2024 by rpki-client on console-fra.rpki-client.org