Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313131333a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          SunfjdF20k90LhZARaDRq/lfcmrhychLtN89UUMfjoU=
Subject key identifier:   F5:2C:5D:B8:9C:DF:0E:5D:65:24:76:37:F1:45:5D:88:E0:96:ED:C8
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2F4B6D74A8576E04480EC29F3AB9221A91A773A5
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:58:05 +0000
ROA not before:           Thu 23 May 2024 12:53:05 +0000
ROA not after:            Thu 22 May 2025 12:58:05 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1113::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:4b:6d:74:a8:57:6e:04:48:0e:c2:9f:3a:b9:22:1a:91:a7:73:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:53:05 2024 GMT
            Not After : May 22 12:58:05 2025 GMT
        Subject: CN=F52C5DB89CDF0E5D65247637F1455D88E096EDC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0a:8b:78:4b:40:58:e0:df:c4:e4:56:32:30:
                    50:50:58:a8:77:a1:be:66:d1:05:c0:96:c1:2d:3f:
                    eb:2e:88:81:0c:61:84:8f:59:10:11:b8:c7:a0:ff:
                    1c:94:df:f4:39:93:7d:e5:89:b8:78:80:05:c0:0c:
                    45:38:97:55:05:9d:5c:ff:0d:96:68:c4:b5:36:5a:
                    d9:83:ab:ce:34:e6:7d:f2:49:ab:fc:a0:6a:3b:2d:
                    38:29:bb:2b:a3:90:50:e3:2c:b6:9b:f5:06:c6:73:
                    a2:ca:76:ea:ca:48:95:bc:02:6d:42:75:e7:32:ab:
                    01:b6:6c:29:c5:01:81:6e:0a:18:05:5c:e6:4c:f8:
                    7a:95:32:c2:39:e2:9b:96:d6:a1:75:ee:c8:93:68:
                    cd:14:cc:4c:1e:d4:ac:e0:d3:63:21:cc:c1:cc:6a:
                    de:fe:2b:e6:b2:9e:27:04:a2:88:a0:4c:e5:30:df:
                    a9:65:5d:2a:f7:7f:92:d2:d8:ad:ee:66:12:fb:e0:
                    75:8b:6f:29:4e:3f:f7:7e:d1:05:79:18:49:b8:cb:
                    c6:3b:d9:61:fc:97:8c:e0:69:b4:5c:dc:cc:4e:75:
                    ae:32:bf:92:20:eb:c1:09:2d:4e:11:09:52:bf:62:
                    31:6c:2b:db:80:bf:9c:23:37:8f:24:c9:7c:a0:fe:
                    50:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:2C:5D:B8:9C:DF:0E:5D:65:24:76:37:F1:45:5D:88:E0:96:ED:C8
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1113::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:7a:0a:c2:17:8a:d2:e9:e0:24:2f:df:e5:1c:cc:20:8c:11:
         ca:9b:ee:af:58:e1:91:e8:1d:1b:96:32:f2:77:5c:8f:d7:4b:
         c6:25:ee:02:64:f7:8a:c2:8c:45:bb:e7:0f:12:b8:d9:a4:5d:
         ab:00:c8:7a:ab:a0:27:de:26:2d:18:ad:f3:b7:c0:d2:97:8a:
         e4:13:bf:64:7e:fe:9e:42:d4:44:b2:eb:8f:9f:5c:6d:92:22:
         dc:63:0d:5a:bf:1a:5b:57:a4:56:61:d0:9e:c2:2d:8a:ea:f1:
         09:00:21:cf:a1:99:84:2c:9b:01:ef:a1:76:06:a4:02:f9:d3:
         99:40:89:84:59:25:08:32:82:28:6d:d3:fa:aa:80:3e:a5:11:
         5c:cd:8b:3f:07:a4:0d:05:15:b0:69:ca:50:68:c6:b1:ac:d6:
         4c:1b:bd:37:c1:c1:3d:75:57:d3:31:09:23:c6:6c:de:b5:1a:
         c6:3c:5d:d7:ec:a8:26:3e:79:5b:0e:1c:03:c8:34:00:cb:cc:
         df:00:26:c5:ee:09:e8:68:43:81:91:49:6c:ac:16:d1:0d:3f:
         7b:37:e7:f1:f0:e6:11:4f:45:04:3b:52:17:aa:98:6c:0a:71:
         d9:3b:f0:bb:9b:f6:a0:2a:b0:00:6e:73:99:0c:86:2b:c2:c9:
         e2:79:17:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:32 2024 by rpki-client on console-ams.rpki-client.org