Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31313a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a31313a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          eA6Dp/bdQXA9PjXkpeLcCc1truJUaX4dEtp6yDI0lt0=
Subject key identifier:   79:40:9A:1F:2A:21:47:0C:11:92:07:F8:A9:56:70:38:FC:7E:8F:7A
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2D89A14EC512FD951C9861577AE968E845EFAFDD
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31313a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:56:36 +0000
ROA not before:           Thu 23 May 2024 12:51:36 +0000
ROA not after:            Thu 22 May 2025 12:56:36 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:11::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 06:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:89:a1:4e:c5:12:fd:95:1c:98:61:57:7a:e9:68:e8:45:ef:af:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:51:36 2024 GMT
            Not After : May 22 12:56:36 2025 GMT
        Subject: CN=79409A1F2A21470C119207F8A9567038FC7E8F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:39:bb:95:c5:2e:20:6a:a0:ad:ff:98:05:
                    2b:94:af:02:a1:69:4e:66:8a:34:4c:ca:73:ed:83:
                    c2:aa:96:37:b1:d0:bd:41:28:5a:57:c9:0d:cb:19:
                    0c:7f:f9:53:ec:68:d5:22:82:8b:97:e9:2c:de:5b:
                    ec:a4:4b:29:27:c9:61:56:ab:ae:ad:32:9f:dd:2c:
                    1a:6f:4d:0b:06:fc:69:e0:3c:ff:5a:bd:1c:c2:83:
                    20:25:f7:3d:d4:e2:9e:a8:20:b7:69:d8:d9:90:d1:
                    8d:97:3e:05:3a:6b:72:46:6e:19:75:03:fa:31:b9:
                    b1:92:88:5d:a7:51:2d:07:b7:eb:e1:a0:71:bd:38:
                    78:b9:57:71:4f:ff:32:c7:01:67:18:d2:6a:9e:46:
                    bd:be:dd:e7:9c:cf:b4:54:a8:e3:d5:8a:cc:9c:cf:
                    de:77:f1:05:24:d8:fa:be:04:22:ff:ae:75:1e:91:
                    04:9d:35:2a:41:91:02:0a:d3:30:98:37:66:a0:39:
                    a6:cc:93:f8:62:39:35:82:58:9d:b3:e5:a3:3a:34:
                    45:16:bd:97:6b:90:f1:ce:07:e6:e0:08:b6:34:a6:
                    5c:b5:91:b0:3e:4a:1f:28:58:26:f9:3a:bd:56:eb:
                    e3:97:e2:89:e4:b3:f3:0a:41:8d:dc:ea:97:4a:f8:
                    26:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:40:9A:1F:2A:21:47:0C:11:92:07:F8:A9:56:70:38:FC:7E:8F:7A
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31313a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         42:98:10:6d:d4:60:f1:27:91:8a:23:74:ad:83:52:f0:54:5d:
         ce:b3:0f:40:ae:77:3d:56:2a:aa:0c:ef:2a:9a:3b:13:20:8a:
         89:31:e9:16:db:0c:80:d4:d9:f5:5a:07:38:41:37:59:6d:d3:
         fe:1a:20:64:72:93:82:c1:28:e6:70:cd:7d:0d:7b:ab:27:ee:
         6e:79:3e:a8:a9:d6:bc:3d:ff:90:d0:17:7c:36:36:8f:ff:9e:
         47:8b:77:24:dd:10:fc:1a:29:1c:cf:49:8b:4f:2e:3d:fe:1e:
         56:63:15:d5:44:b1:71:a0:3b:76:16:48:7b:53:b4:a9:16:f6:
         6a:c1:b3:7e:c1:cf:e0:ae:ec:0e:24:8d:ff:da:d7:da:3a:48:
         58:61:1d:4a:09:3d:09:59:91:63:b6:27:34:74:86:bb:06:0a:
         b1:e5:92:66:58:97:7b:aa:1a:19:20:e4:0d:47:d6:63:c6:7d:
         1c:86:98:2d:12:db:b1:5e:60:dc:69:fc:39:0e:b1:e3:cc:b2:
         43:a2:9e:f9:9a:0a:92:08:32:86:8a:97:4b:e0:af:ef:1d:37:
         91:07:06:47:d6:ae:c9:f6:10:c4:e0:11:7b:d2:08:83:03:c4:
         9e:da:fa:49:3a:7c:83:79:61:5b:3e:ea:be:c0:52:0d:d5:66:
         6d:be:37:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:17:43 2024 by rpki-client on console-fra.rpki-client.org