Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a313131333a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          8hGXzkMhil5M8/IeA91jRUfT+FyMrC2eXuIKyNVwOEg=
Subject key identifier:   59:E7:34:F3:3F:83:26:4B:A2:D1:F1:C0:2B:48:3A:BC:BD:40:08:46
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       7CDA7890645C3461075442C35430CC883F4B31B0
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 10 Apr 2024 14:03:24 +0000
ROA not before:           Wed 10 Apr 2024 13:58:24 +0000
ROA not after:            Wed 09 Apr 2025 14:03:24 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1113::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:da:78:90:64:5c:34:61:07:54:42:c3:54:30:cc:88:3f:4b:31:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 10 13:58:24 2024 GMT
            Not After : Apr  9 14:03:24 2025 GMT
        Subject: CN=59E734F33F83264BA2D1F1C02B483ABCBD400846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8b:7f:4e:e5:82:58:6e:99:a4:30:f8:1c:a9:
                    e8:10:56:54:dd:87:f3:8d:2d:5a:22:70:81:a4:31:
                    fc:d9:a4:79:78:7e:ee:ad:7a:b0:1b:e6:50:92:54:
                    50:2b:ed:11:1f:d3:fb:c3:ca:8f:e4:e7:c9:59:21:
                    bf:bd:73:4f:5d:bf:b3:d5:f2:7c:33:66:fb:80:a3:
                    a7:95:13:9f:b7:05:11:aa:bb:9e:76:1d:94:ee:b5:
                    74:99:24:e3:16:64:4c:40:20:60:9b:78:a6:d5:5a:
                    a9:38:6e:75:a2:63:99:89:58:38:6a:c0:ea:4c:e7:
                    d1:16:63:65:5c:be:fc:d5:5e:91:58:41:7f:12:66:
                    bf:52:b0:4a:4e:44:0e:ba:f0:a6:3c:9f:79:2b:3e:
                    da:b8:75:d9:23:65:5f:c2:47:61:2c:26:a7:5b:b4:
                    3b:48:4a:bd:f0:b0:61:b0:04:30:5c:6e:a0:b5:1e:
                    a3:c1:1a:18:f5:f3:c8:2a:59:25:37:b4:49:90:ce:
                    1a:a6:c3:4a:c6:91:d3:a2:d4:6c:a3:e6:21:54:48:
                    17:2f:6d:3e:ba:23:b3:ae:43:86:c2:ea:83:f8:b5:
                    e0:37:1e:e6:33:1f:c3:74:1b:d3:a9:ed:1a:da:40:
                    69:76:b3:35:34:ae:0d:9f:83:33:5b:6a:dd:16:5e:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:E7:34:F3:3F:83:26:4B:A2:D1:F1:C0:2B:48:3A:BC:BD:40:08:46
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313131333a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1113::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:ef:ee:33:4b:24:7d:28:14:60:db:98:8e:2c:b1:7f:0a:62:
         c1:2a:1c:ac:8d:b5:44:72:0a:b5:c5:31:84:1e:e7:a9:6d:c1:
         ac:37:9a:41:d3:b4:3d:6d:3a:27:0e:3e:42:b8:89:df:e4:a7:
         49:d8:5d:54:20:cb:4c:a6:e0:34:e3:e4:aa:4e:fc:9a:d2:fe:
         c0:48:c0:b1:c7:65:b1:0d:69:4e:5e:32:15:03:6b:ff:1b:17:
         c7:41:40:81:c6:b3:d5:f0:59:e0:72:21:13:c5:95:eb:7f:b1:
         d8:ea:af:5a:74:5e:45:27:9d:ff:ea:c5:e4:9c:16:4e:c2:3c:
         a4:47:01:6c:8a:b2:d7:f7:7b:db:a4:9d:0b:7c:d4:b2:2c:de:
         b0:45:06:23:19:85:02:1f:13:45:51:c2:b4:70:20:c8:e4:a8:
         21:ad:c9:3a:9d:ff:07:dd:9a:2c:b5:50:1d:77:0d:36:35:6a:
         62:19:7b:0f:a3:af:d2:5a:72:07:0c:34:22:c0:0a:ab:c8:1b:
         e7:03:40:7c:77:fd:49:08:0c:c7:0c:f9:38:5c:1c:aa:19:76:
         6f:ea:48:b8:69:89:6b:0c:4a:de:15:ef:5c:de:ff:a9:b3:69:
         b7:13:0a:8e:3d:0a:9f:25:37:4d:c2:ed:61:8b:8b:2f:e2:88:
         88:b9:81:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:40 2024 by rpki-client on console-fra.rpki-client.org