Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/3138352e3139352e3233382e302f32342d3332203d3e203532303235.roa
File: 3138352e3139352e3233382e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier: sbJY0Vt5Xoo6Jb0Poi9UpJDNEHwJkGgwnHmLDuJkZQo=
Subject key identifier: 6A:3C:83:6E:EA:19:D3:DA:27:7A:FF:25:8C:EF:FB:79:D0:86:45:B6
Certificate issuer: /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial: 4E1F49B32C89411A815BAC73D8CB96E53FAA5DDB
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/3138352e3139352e3233382e302f32342d3332203d3e203532303235.roa
Signing time: Tue 26 Dec 2023 04:23:58 +0000
ROA not before: Tue 26 Dec 2023 04:18:58 +0000
ROA not after: Tue 24 Dec 2024 04:23:58 +0000
asID: 52025
IP address blocks: 185.195.238.0/24 maxlen: 32
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:1f:49:b3:2c:89:41:1a:81:5b:ac:73:d8:cb:96:e5:3f:aa:5d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Validity
Not Before: Dec 26 04:18:58 2023 GMT
Not After : Dec 24 04:23:58 2024 GMT
Subject: CN=6A3C836EEA19D3DA277AFF258CEFFB79D08645B6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:57:4a:38:dc:2d:3f:ce:22:66:65:65:00:05:
1e:86:b1:49:9a:4d:1e:f0:6d:4c:63:b2:ff:9f:0f:
d0:98:4d:ee:0f:6a:7b:28:fa:f2:38:a0:a7:1c:03:
55:9a:36:67:74:e1:b2:ba:0f:d7:bb:94:0f:8e:cd:
92:e9:34:c7:b2:db:1d:c6:f6:e6:7e:3a:7e:fb:fc:
15:d6:7e:21:0f:a3:cf:9b:0f:ba:bd:d4:b9:d4:5f:
d7:a0:78:47:9c:de:f8:63:f9:0a:97:00:7b:79:ed:
c9:99:11:5b:87:6f:55:98:ca:72:82:52:f0:ec:dd:
17:a8:77:98:d3:53:9c:1a:75:c6:a1:b9:d5:aa:15:
c8:8b:ea:e3:ed:6d:dd:f0:e9:29:cf:9d:8c:bc:a5:
bd:43:4f:3a:98:4f:53:9d:25:23:65:b3:3f:6a:a7:
de:73:23:b3:dd:00:75:1a:5f:7e:1a:c5:eb:11:79:
ea:c8:b4:a8:cf:6e:54:5a:7c:bb:7a:30:26:2f:0c:
0d:9f:3a:f8:5d:a9:cf:d6:23:a4:66:b2:cf:ca:a4:
7d:f8:2a:2b:31:9f:7a:6e:b9:38:a1:62:4b:77:54:
09:bb:84:0a:42:32:c3:ff:25:74:1c:7d:d1:9d:40:
74:90:a9:7d:73:53:03:69:d4:dc:f9:a1:3e:a8:2c:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:3C:83:6E:EA:19:D3:DA:27:7A:FF:25:8C:EF:FB:79:D0:86:45:B6
X509v3 Authority Key Identifier:
keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/3138352e3139352e3233382e302f32342d3332203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.195.238.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:b1:29:56:19:60:cc:d2:8e:4c:20:fd:e3:56:67:75:9d:2a:
73:1b:c0:09:6d:a3:70:e9:d2:7f:5c:74:e9:3d:12:41:a0:d8:
0e:df:54:fc:9a:1b:6f:65:dd:ad:de:79:66:2d:e3:7f:d2:57:
43:4c:13:f1:fa:a2:5e:29:d7:7e:a8:56:fe:c1:5f:d0:ca:bd:
fc:2f:18:22:b8:0b:14:6d:f2:56:03:c7:4b:d0:23:be:3d:61:
fc:df:7a:61:ed:02:7f:f1:a7:d1:a7:87:80:b5:8e:07:f3:08:
15:b4:40:99:2b:c0:33:b4:7e:79:c9:b7:f7:c0:64:2f:66:02:
eb:d6:1b:fe:fb:d1:54:22:af:b9:4b:04:81:32:03:82:e2:65:
40:50:f1:d3:59:b0:b2:8f:a5:e1:e9:0f:29:45:9a:b9:cc:48:
f9:71:8d:b5:b3:66:c4:39:e4:ad:8d:90:f6:19:19:87:ec:46:
12:b4:64:9a:70:cf:17:76:2e:16:32:8c:9e:17:f8:48:f8:8e:
c5:3f:47:2a:2f:be:d4:99:11:21:9f:57:16:b2:52:fd:ae:e6:
8f:5e:2d:7c:ac:ff:47:7b:02:d0:87:67:59:45:3c:3e:b6:f6:
d3:c9:29:26:92:f2:16:3d:b0:bf:2b:88:3a:50:29:dd:8c:9f:
9c:3f:09:da
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgIUTh9JsyyJQRqBW6xz2MuW5T+qXdswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yMzEyMjYwNDE4NThaFw0yNDEyMjQwNDIzNThaMDMxMTAvBgNV
BAMTKDZBM0M4MzZFRUExOUQzREEyNzdBRkYyNThDRUZGQjc5RDA4NjQ1QjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClV0o43C0/ziJmZWUABR6GsUma
TR7wbUxjsv+fD9CYTe4Panso+vI4oKccA1WaNmd04bK6D9e7lA+OzZLpNMey2x3G
9uZ+On77/BXWfiEPo8+bD7q91LnUX9egeEec3vhj+QqXAHt57cmZEVuHb1WYynKC
UvDs3Reod5jTU5wadcahudWqFciL6uPtbd3w6SnPnYy8pb1DTzqYT1OdJSNlsz9q
p95zI7PdAHUaX34axesReerItKjPblRafLt6MCYvDA2fOvhdqc/WI6Rmss/KpH34
Kisxn3puuTihYkt3VAm7hApCMsP/JXQcfdGdQHSQqX1zUwNp1Nz5oT6oLDxtAgMB
AAGjggIhMIICHTAdBgNVHQ4EFgQUajyDbuoZ09onev8ljO/7edCGRbYwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBiQYIKwYBBQUHAQsEfTB7MHkGCCsGAQUFBzALhm1y
c3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtzLzIv
MzEzODM1MmUzMTM5MzUyZTMyMzMzODJlMzAyZjMyMzQyZDMzMzIyMDNkM2UyMDM1
MzIzMDMyMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUH
AQcBAf8EEDAOMAwEAgABMAYDBAC5w+4wDQYJKoZIhvcNAQELBQADggEBAJqxKVYZ
YMzSjkwg/eNWZ3WdKnMbwAlto3Dp0n9cdOk9EkGg2A7fVPyaG29l3a3eeWYt43/S
V0NME/H6ol4p136oVv7BX9DKvfwvGCK4CxRt8lYDx0vQI749YfzfemHtAn/xp9Gn
h4C1jgfzCBW0QJkrwDO0fnnJt/fAZC9mAuvWG/770VQir7lLBIEyA4LiZUBQ8dNZ
sLKPpeHpDylFmrnMSPlxjbWzZsQ55K2NkPYZGYfsRhK0ZJpwzxd2LhYyjJ4X+Ej4
jsU/RyovvtSZESGfVxayUv2u5o9eLXys/0d7AtCHZ1lFPD629tPJKSaS8hY9sL8r
iDpQKd2Mn5w/Cdo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:08:24 2025 by rpki-client