Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31313a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a31313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          SEnK9BIzhvfU3R5Vc7sDtbFisT7jamT6LwlnzxZc2ts=
Subject key identifier:   11:91:AB:EB:11:10:92:D5:3D:55:62:36:31:A9:D5:A4:B9:59:B7:68
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       065C21A96007C87861FEDE04AB8C7A8AFE0C01EE
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 22:47:48 +0000
ROA not before:           Thu 10 Aug 2023 22:42:48 +0000
ROA not after:            Thu 08 Aug 2024 22:47:48 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:5c:21:a9:60:07:c8:78:61:fe:de:04:ab:8c:7a:8a:fe:0c:01:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 10 22:42:48 2023 GMT
            Not After : Aug  8 22:47:48 2024 GMT
        Subject: CN=1191ABEB111092D53D55623631A9D5A4B959B768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:b5:b4:da:72:38:5c:86:ca:09:05:55:04:7b:
                    bc:47:9a:d9:9b:10:12:aa:29:66:98:25:09:d9:ad:
                    34:e8:b3:5d:6f:d6:f2:dd:b5:65:74:29:7a:6d:0e:
                    aa:a1:53:03:52:79:6c:e5:a4:3f:14:0d:67:22:98:
                    97:47:31:d7:4a:ce:f4:a9:69:2f:fd:53:a2:ef:a4:
                    31:3e:83:99:9f:32:50:00:98:29:51:9b:8c:19:b5:
                    1c:4c:12:d6:88:d5:9b:1e:fe:8f:ad:3d:47:68:96:
                    37:67:39:05:96:bb:0f:de:c2:68:c8:3b:7f:9e:fe:
                    b9:73:e8:d6:17:93:91:70:b1:f1:82:25:7c:e8:79:
                    ae:36:59:6f:2f:5f:3d:b9:28:bc:df:f3:87:9f:d0:
                    f4:d9:2f:57:e8:67:0f:b3:b3:4f:f9:88:3e:f5:a1:
                    23:43:4e:bc:a2:00:09:88:20:49:4a:18:10:42:10:
                    2c:1c:a1:18:23:3c:bf:d0:f2:f9:2f:9f:5c:68:20:
                    63:ca:5c:a6:d0:79:8c:b2:e3:4a:14:f0:b2:c0:9f:
                    7f:2a:02:36:8f:07:10:37:bc:69:6f:2b:e8:b7:64:
                    c1:29:34:07:e1:cd:a8:4f:2a:63:1b:f3:2b:f2:a3:
                    4c:23:28:0f:1e:3b:13:ae:88:dd:8d:dc:91:d9:f5:
                    79:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:91:AB:EB:11:10:92:D5:3D:55:62:36:31:A9:D5:A4:B9:59:B7:68
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:11::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:fb:1a:ad:5b:39:fe:5c:32:92:6a:6b:7b:60:47:c5:0f:3a:
         b8:2d:94:42:6f:8e:bd:4b:bb:48:6a:ad:6b:da:f0:a0:d5:fe:
         15:a5:c5:3c:12:63:a1:b8:f9:e9:96:24:47:f7:5b:7b:71:87:
         e4:6b:96:e9:94:c2:e8:8e:43:2b:f5:88:5d:61:d0:08:fc:6f:
         97:13:fd:f6:8a:a5:21:f5:20:a9:a7:55:50:b2:29:49:ad:38:
         e1:e1:1d:6a:43:c5:06:fd:c3:7d:e1:a2:b9:93:cd:82:eb:43:
         df:57:0f:1d:59:0f:64:a4:8f:f7:ee:5e:b3:83:36:da:e8:da:
         23:7b:ff:a7:bf:66:fc:6b:2f:23:28:e9:6f:a5:f8:01:63:c4:
         b2:92:04:72:f2:e1:4c:1e:cb:cc:ca:f6:d7:96:99:2b:57:51:
         69:1c:a8:a2:62:f5:81:17:39:2f:c0:b2:1c:0f:b0:55:30:a3:
         46:80:9f:b6:dc:12:1d:c2:c6:22:f6:28:74:74:22:ea:c7:e0:
         6d:53:63:28:e8:e6:22:25:93:8e:51:7f:19:fc:5e:49:f4:c0:
         d5:1d:83:ab:05:36:74:9f:ff:d5:62:ce:05:da:2b:c3:b0:84:
         54:db:a9:e7:57:56:3a:b3:83:bc:61:b5:13:19:0f:80:9b:ed:
         3c:0b:12:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:05:13 2024 by rpki-client on console-ams.rpki-client.org