Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/3138352e3139352e3233382e302f32342d3332203d3e203532303235.roa
File:                     3138352e3139352e3233382e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          sbJY0Vt5Xoo6Jb0Poi9UpJDNEHwJkGgwnHmLDuJkZQo=
Subject key identifier:   6A:3C:83:6E:EA:19:D3:DA:27:7A:FF:25:8C:EF:FB:79:D0:86:45:B6
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       4E1F49B32C89411A815BAC73D8CB96E53FAA5DDB
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/3138352e3139352e3233382e302f32342d3332203d3e203532303235.roa
Signing time:             Tue 26 Dec 2023 04:23:58 +0000
ROA not before:           Tue 26 Dec 2023 04:18:58 +0000
ROA not after:            Tue 24 Dec 2024 04:23:58 +0000
asID:                     52025
IP address blocks:        185.195.238.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:1f:49:b3:2c:89:41:1a:81:5b:ac:73:d8:cb:96:e5:3f:aa:5d:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Dec 26 04:18:58 2023 GMT
            Not After : Dec 24 04:23:58 2024 GMT
        Subject: CN=6A3C836EEA19D3DA277AFF258CEFFB79D08645B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:57:4a:38:dc:2d:3f:ce:22:66:65:65:00:05:
                    1e:86:b1:49:9a:4d:1e:f0:6d:4c:63:b2:ff:9f:0f:
                    d0:98:4d:ee:0f:6a:7b:28:fa:f2:38:a0:a7:1c:03:
                    55:9a:36:67:74:e1:b2:ba:0f:d7:bb:94:0f:8e:cd:
                    92:e9:34:c7:b2:db:1d:c6:f6:e6:7e:3a:7e:fb:fc:
                    15:d6:7e:21:0f:a3:cf:9b:0f:ba:bd:d4:b9:d4:5f:
                    d7:a0:78:47:9c:de:f8:63:f9:0a:97:00:7b:79:ed:
                    c9:99:11:5b:87:6f:55:98:ca:72:82:52:f0:ec:dd:
                    17:a8:77:98:d3:53:9c:1a:75:c6:a1:b9:d5:aa:15:
                    c8:8b:ea:e3:ed:6d:dd:f0:e9:29:cf:9d:8c:bc:a5:
                    bd:43:4f:3a:98:4f:53:9d:25:23:65:b3:3f:6a:a7:
                    de:73:23:b3:dd:00:75:1a:5f:7e:1a:c5:eb:11:79:
                    ea:c8:b4:a8:cf:6e:54:5a:7c:bb:7a:30:26:2f:0c:
                    0d:9f:3a:f8:5d:a9:cf:d6:23:a4:66:b2:cf:ca:a4:
                    7d:f8:2a:2b:31:9f:7a:6e:b9:38:a1:62:4b:77:54:
                    09:bb:84:0a:42:32:c3:ff:25:74:1c:7d:d1:9d:40:
                    74:90:a9:7d:73:53:03:69:d4:dc:f9:a1:3e:a8:2c:
                    3c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:3C:83:6E:EA:19:D3:DA:27:7A:FF:25:8C:EF:FB:79:D0:86:45:B6
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/3138352e3139352e3233382e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.195.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:b1:29:56:19:60:cc:d2:8e:4c:20:fd:e3:56:67:75:9d:2a:
         73:1b:c0:09:6d:a3:70:e9:d2:7f:5c:74:e9:3d:12:41:a0:d8:
         0e:df:54:fc:9a:1b:6f:65:dd:ad:de:79:66:2d:e3:7f:d2:57:
         43:4c:13:f1:fa:a2:5e:29:d7:7e:a8:56:fe:c1:5f:d0:ca:bd:
         fc:2f:18:22:b8:0b:14:6d:f2:56:03:c7:4b:d0:23:be:3d:61:
         fc:df:7a:61:ed:02:7f:f1:a7:d1:a7:87:80:b5:8e:07:f3:08:
         15:b4:40:99:2b:c0:33:b4:7e:79:c9:b7:f7:c0:64:2f:66:02:
         eb:d6:1b:fe:fb:d1:54:22:af:b9:4b:04:81:32:03:82:e2:65:
         40:50:f1:d3:59:b0:b2:8f:a5:e1:e9:0f:29:45:9a:b9:cc:48:
         f9:71:8d:b5:b3:66:c4:39:e4:ad:8d:90:f6:19:19:87:ec:46:
         12:b4:64:9a:70:cf:17:76:2e:16:32:8c:9e:17:f8:48:f8:8e:
         c5:3f:47:2a:2f:be:d4:99:11:21:9f:57:16:b2:52:fd:ae:e6:
         8f:5e:2d:7c:ac:ff:47:7b:02:d0:87:67:59:45:3c:3e:b6:f6:
         d3:c9:29:26:92:f2:16:3d:b0:bf:2b:88:3a:50:29:dd:8c:9f:
         9c:3f:09:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:40 2024 by rpki-client on console-fra.rpki-client.org