Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/3139352e3138342e3234362e302f32342d3332203d3e203532303235.roa
File:                     3139352e3138342e3234362e302f32342d3332203d3e203532303235.roa (raw, json)
Hash identifier:          Scg1FwxQbabGv6e6bAIp5w31PSnncV0Pv1unm1EpWys=
Subject key identifier:   E3:6A:4C:09:6A:14:24:F6:10:FD:23:C8:EB:9C:33:B2:EA:38:B8:DA
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       5BC8CA133F37802EE401EE0450E675C8A95FCA2F
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/3139352e3138342e3234362e302f32342d3332203d3e203532303235.roa
Signing time:             Wed 07 Feb 2024 21:42:21 +0000
ROA not before:           Wed 07 Feb 2024 21:37:21 +0000
ROA not after:            Wed 05 Feb 2025 21:42:21 +0000
asID:                     52025
IP address blocks:        195.184.246.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:c8:ca:13:3f:37:80:2e:e4:01:ee:04:50:e6:75:c8:a9:5f:ca:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Feb  7 21:37:21 2024 GMT
            Not After : Feb  5 21:42:21 2025 GMT
        Subject: CN=E36A4C096A1424F610FD23C8EB9C33B2EA38B8DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:f2:17:fc:67:c5:00:2b:82:3e:50:71:a6:
                    6e:b2:d3:14:8a:1c:32:a3:f4:50:0a:62:ff:5a:1d:
                    99:9e:9e:66:ed:9b:c2:c7:f0:a6:cd:06:59:89:68:
                    94:a6:c2:24:5e:7b:ec:cd:dd:31:c3:4e:d9:df:8b:
                    40:de:a3:a9:e1:35:78:e8:2b:bc:27:98:ea:c0:f4:
                    f0:77:47:ac:27:c6:5a:ea:ea:93:fe:9d:3c:fe:5e:
                    a7:bc:72:05:4b:97:e8:5d:2e:36:90:73:58:48:a5:
                    04:d8:5c:43:bf:4a:72:30:80:d9:eb:41:dd:68:6b:
                    bb:2a:8f:f1:4a:85:f6:f1:2a:92:e5:51:d2:37:e0:
                    37:24:1b:82:b5:25:c2:30:88:34:3e:1c:62:d4:0b:
                    08:92:38:ab:7e:61:b0:26:28:b2:4e:65:a4:ba:a0:
                    a8:2a:91:1a:3a:a4:86:07:4e:42:aa:72:1c:f9:74:
                    5d:45:ef:fb:54:ef:65:44:58:8d:42:60:d1:ff:11:
                    04:37:25:c2:4d:7e:fd:e4:14:5c:a1:c9:a8:ce:95:
                    c6:ae:eb:12:43:05:49:b9:4a:6d:b8:47:3e:47:6c:
                    31:5b:b7:b5:cd:d4:24:3c:93:85:c1:fb:4b:ab:ce:
                    87:7c:4f:fe:36:e9:57:4e:53:50:da:cd:c7:06:9c:
                    61:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6A:4C:09:6A:14:24:F6:10:FD:23:C8:EB:9C:33:B2:EA:38:B8:DA
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/3139352e3138342e3234362e302f32342d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  195.184.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:99:55:c9:9d:7c:0d:03:1d:6b:4e:5e:a1:6e:64:2e:93:c9:
         76:64:00:0b:2c:eb:49:c8:4a:16:ae:0e:2d:f3:ec:ea:80:a6:
         6b:cd:1c:fb:9f:a7:ad:18:7e:0e:62:10:d3:dc:2d:32:d4:4d:
         dc:96:0f:b9:b3:b2:33:9a:5e:9c:d3:f4:da:a8:68:74:51:70:
         d0:fa:b3:90:fe:12:92:62:6a:5c:c7:72:08:8c:f3:47:a3:d0:
         f8:93:e4:ab:44:43:6e:2d:a2:71:50:75:85:3d:23:0f:97:dd:
         0d:fa:73:4b:d0:fd:ef:53:7e:92:d3:8a:77:41:3a:1f:1b:ef:
         73:eb:b1:36:f5:0c:c9:35:83:be:1b:e3:2a:c2:62:cb:dd:c8:
         d3:9c:c1:f3:b2:26:d4:ae:03:e3:40:bd:ee:2a:84:c9:ad:f8:
         01:09:91:c4:79:db:20:08:12:a0:9b:e4:af:76:cf:ba:0b:da:
         6b:ab:4b:7c:a2:64:f6:1c:10:e7:51:9f:e9:59:8c:99:93:ab:
         b7:8a:3e:e1:86:b1:be:0b:71:95:32:bc:6b:d9:46:bf:b1:02:
         f6:8a:28:58:5e:55:a0:23:d2:7b:98:5a:bb:d0:59:41:24:5c:
         b3:a6:92:d1:9f:ae:22:c6:6d:ee:88:e2:fc:44:e7:d6:52:b5:
         29:6d:49:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:40 2024 by rpki-client on console-fra.rpki-client.org