Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313031323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313031323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          EAsrf+HuWOINQmetrOP6vWwnxF2MX6UkKzirvwOkQHw=
Subject key identifier:   C8:16:50:92:68:0C:13:DC:61:7B:EC:B4:F2:D4:B2:17:22:61:66:70
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       44B01E2BA885C91279E2EB14D32599025B39FA11
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313031323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:58:03 +0000
ROA not before:           Thu 23 May 2024 12:53:03 +0000
ROA not after:            Thu 22 May 2025 12:58:03 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1012::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:b0:1e:2b:a8:85:c9:12:79:e2:eb:14:d3:25:99:02:5b:39:fa:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:53:03 2024 GMT
            Not After : May 22 12:58:03 2025 GMT
        Subject: CN=C8165092680C13DC617BECB4F2D4B21722616670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:5a:54:52:f3:dc:f4:9b:8b:1b:fb:80:bc:82:
                    7c:b3:3e:cd:5c:ce:f6:5e:f8:a7:05:a3:21:3b:93:
                    71:f4:5a:ed:56:14:30:6e:87:a7:f1:09:88:9d:61:
                    1c:f8:84:41:41:f0:e6:0d:86:38:a9:27:b6:a5:95:
                    15:95:1f:6c:66:ea:e7:93:36:ab:d9:10:db:65:7d:
                    06:3f:90:1a:f5:70:05:79:40:28:ba:26:01:f6:3a:
                    b2:cd:cf:03:e4:05:c1:bf:18:ef:0e:45:46:b9:9a:
                    5d:7f:d9:c6:48:6b:42:ee:24:5b:f8:ea:69:53:25:
                    68:7e:15:a9:78:c5:5a:a3:17:8d:eb:50:75:bf:fc:
                    e4:b3:7a:12:3f:f9:fe:9f:06:0b:83:6a:a4:37:70:
                    00:48:98:76:a3:41:95:ab:26:bf:31:39:a4:33:ee:
                    5d:b8:d0:00:63:f7:af:b4:d9:5b:51:60:b9:49:17:
                    12:37:4b:5d:4d:f4:6d:b8:f9:d8:cc:4e:20:13:41:
                    35:4a:91:72:0a:c4:c1:8d:b1:55:15:f2:4b:2e:f3:
                    12:92:41:0d:14:63:0c:3a:d4:c7:2d:a4:3a:bc:08:
                    12:7f:00:13:f4:de:c1:b5:07:c7:19:5c:5b:2d:e6:
                    7f:da:d3:5a:bd:9f:83:6a:d8:38:57:28:de:dc:ea:
                    bc:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:16:50:92:68:0C:13:DC:61:7B:EC:B4:F2:D4:B2:17:22:61:66:70
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313031323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1012::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:7b:37:d8:38:1d:89:c2:af:61:04:35:b0:82:cb:cb:3d:17:
         4f:15:6d:51:ea:d0:45:70:ba:0f:63:d2:f5:64:76:87:e8:64:
         32:94:56:66:fa:e2:94:8d:03:e7:95:80:4c:31:61:cc:c3:77:
         9d:74:38:d3:d5:cb:43:1d:ab:41:48:86:d8:9a:fc:b1:88:1c:
         f4:54:ef:45:d6:d2:3c:d0:16:a9:88:5a:b7:61:03:d7:e9:27:
         b2:cf:c4:66:25:fd:9e:7c:99:3d:90:73:da:d6:ae:ff:8c:82:
         84:37:6d:70:bc:fb:5f:99:66:90:e1:e6:2d:fe:c7:d3:71:0e:
         79:b8:8f:3f:73:f2:09:a5:12:9e:04:ec:60:51:51:6f:9b:d2:
         8c:bc:e8:64:b6:4f:15:59:7b:01:47:2e:d9:c2:3b:10:b2:94:
         b6:be:a8:d9:9e:9c:91:60:b0:4c:d9:55:a3:05:e1:81:c0:02:
         14:e7:9c:a4:a0:ec:db:78:2d:f9:96:89:34:99:ac:74:f4:69:
         ee:4d:f3:93:fd:a6:0a:97:f9:1b:42:e4:34:ed:39:0a:37:51:
         05:6f:fe:60:23:ef:68:d8:a2:f1:ea:5c:d2:f8:24:74:ff:33:
         9e:92:b6:60:8b:a7:13:99:68:2f:fa:2c:2b:69:af:f2:6e:9b:
         21:59:bf:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:32 2024 by rpki-client on console-ams.rpki-client.org