Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313031323a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a313031323a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          IKyQF0EGP1ztzvM5PbzpYtewUTfL6RP4B3qckq8mM1M=
Subject key identifier:   34:BC:05:D7:2C:01:95:FD:51:8C:09:4E:E8:10:60:4D:76:F3:92:B4
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2C2E4BE0CD618DEE7672D957DE83AD67FA5AC245
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313031323a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 16 Aug 2023 04:12:25 +0000
ROA not before:           Wed 16 Aug 2023 04:07:25 +0000
ROA not after:            Wed 14 Aug 2024 04:12:25 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1012::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:2e:4b:e0:cd:61:8d:ee:76:72:d9:57:de:83:ad:67:fa:5a:c2:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 16 04:07:25 2023 GMT
            Not After : Aug 14 04:12:25 2024 GMT
        Subject: CN=34BC05D72C0195FD518C094EE810604D76F392B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:25:c2:7d:0b:0e:04:11:5d:02:b9:d2:36:b6:
                    eb:a5:b6:08:52:8d:d6:85:30:d2:94:71:df:9b:70:
                    be:91:fd:f5:3f:43:c8:02:cd:35:a5:1b:62:db:5c:
                    82:8c:f8:ee:e0:00:3b:bb:3a:a7:85:e9:c9:7f:94:
                    ba:5f:35:26:5c:66:1b:94:ad:95:07:db:ae:a6:67:
                    db:0a:04:18:4a:50:40:d3:a5:df:cd:70:d4:3c:42:
                    f8:13:9a:4c:a9:00:4e:ae:8a:f5:a2:ef:6b:b4:30:
                    c4:3b:8e:b6:1b:fe:08:0c:45:15:e5:ad:9d:1c:d7:
                    8c:ca:d2:94:49:f9:4b:51:54:fb:dd:ed:0e:97:92:
                    6b:bb:41:a3:b5:87:67:fc:b6:e9:27:f1:90:db:27:
                    3e:d8:9a:3c:5b:f3:8f:43:a6:7a:67:7e:63:4a:ba:
                    ed:b1:04:0f:25:e8:36:3e:0c:9b:aa:08:68:76:48:
                    0b:f3:fc:ff:98:8c:a9:b2:82:e5:22:52:3a:0a:18:
                    7a:ed:71:c1:a5:86:40:66:9b:18:30:d1:5c:26:6c:
                    98:d5:cb:76:62:08:10:e1:b6:a5:6c:fd:b4:cb:c9:
                    0f:ac:6d:20:f9:5f:5b:a9:3c:8e:42:c4:a3:f7:35:
                    be:e9:cf:42:c1:03:34:4c:0c:f8:98:1e:84:30:0c:
                    cd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BC:05:D7:2C:01:95:FD:51:8C:09:4E:E8:10:60:4D:76:F3:92:B4
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313031323a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1012::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:53:2b:b5:dc:dc:48:84:1b:cb:5d:e3:79:5a:ac:57:1d:e8:
         4e:24:f1:11:6b:db:46:a2:aa:78:11:09:49:af:b9:dc:18:94:
         7b:46:ad:55:2d:2d:a1:0e:7c:32:0d:be:20:86:94:f3:95:ba:
         65:8e:d7:bc:95:88:90:e3:19:9d:b0:d4:4b:99:e1:ed:b7:31:
         39:07:7c:03:81:91:5a:ea:24:b7:af:e5:7a:cc:dd:a9:5c:04:
         7e:34:9e:aa:0d:6e:0d:92:ee:63:cc:e6:ae:17:54:2f:a1:4d:
         12:36:1a:95:de:2e:91:f1:f6:87:27:eb:cc:5b:d8:fb:e5:13:
         0a:01:18:1f:03:3a:c2:d7:61:db:1f:b7:28:ec:f3:d3:c0:2b:
         0d:d8:7d:0e:74:d0:33:b3:d7:4d:57:7a:49:c2:ac:03:de:b0:
         0e:81:f6:da:71:69:38:4a:44:01:fa:48:7d:0a:01:d8:b8:7f:
         94:e0:59:52:35:6c:a0:0c:79:b7:21:06:5c:f7:cb:5b:30:7c:
         30:12:91:85:f3:a3:4f:3d:ef:4d:2a:5f:ee:16:c9:0d:13:f5:
         f1:9a:54:44:a5:1b:91:13:e7:19:28:9f:9c:b4:9a:dc:62:7b:
         b3:c3:ac:89:c6:2c:e7:f0:49:d3:d7:84:8d:8d:c1:e8:32:92:
         c8:cf:c8:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:40 2024 by rpki-client on console-fra.rpki-client.org