Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          FS2N7KxO43wiKX0bSYemzQQYQ7bMnJzO8oAAU2Sn0fw=
Subject key identifier:   F7:E2:87:3C:15:CB:EB:C7:00:E1:DD:7B:BE:AA:D9:24:0C:E8:1B:83
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       052311617037DED47EA651E0D15DF17479C08A05
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 22:48:31 +0000
ROA not before:           Thu 10 Aug 2023 22:43:31 +0000
ROA not after:            Thu 08 Aug 2024 22:48:31 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:11f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:23:11:61:70:37:de:d4:7e:a6:51:e0:d1:5d:f1:74:79:c0:8a:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 10 22:43:31 2023 GMT
            Not After : Aug  8 22:48:31 2024 GMT
        Subject: CN=F7E2873C15CBEBC700E1DD7BBEAAD9240CE81B83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9c:ab:37:14:c6:d1:ac:50:be:f7:74:9b:fe:
                    74:c0:a7:5a:9e:2d:23:e1:ec:5f:8e:5b:56:ea:3b:
                    56:63:f0:04:eb:fb:55:14:37:87:6f:17:f1:dd:81:
                    c3:9e:11:6f:b5:8e:45:d4:a7:cd:9e:05:37:fb:7d:
                    6b:40:14:b7:9c:5b:d3:8c:70:40:72:bc:a1:91:d9:
                    3e:a4:02:ef:0f:14:59:2a:bc:13:08:ce:60:2d:b5:
                    45:76:a9:b4:a6:3e:7a:2b:b0:a2:c5:ba:bd:97:82:
                    6f:aa:e3:ba:f3:6b:d2:4e:30:89:41:73:7c:67:03:
                    17:73:bc:c8:12:3e:e7:26:cc:7c:6b:21:eb:de:be:
                    e9:d2:a5:7e:c3:3a:90:9f:38:8f:d1:9f:7c:2c:2d:
                    c8:cc:24:80:1c:0d:68:49:6a:c6:c3:bf:80:db:ec:
                    8d:7c:7c:c7:bf:1f:10:c9:bf:66:86:e8:3b:85:24:
                    3c:ca:f9:75:81:68:7b:85:ce:bf:2b:dc:d3:56:e9:
                    d0:06:64:99:dc:4c:32:34:2a:03:7f:de:8d:93:84:
                    52:3a:9e:76:6e:cf:0a:ef:9c:06:43:fb:04:f1:58:
                    4c:f8:2a:5c:ff:e6:71:00:61:0d:1d:14:b0:0c:0f:
                    a5:59:70:6f:db:71:82:f1:59:8e:f5:3a:50:f4:f5:
                    46:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:E2:87:3C:15:CB:EB:C7:00:E1:DD:7B:BE:AA:D9:24:0C:E8:1B:83
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3131663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:11f::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:7e:9d:85:a7:80:dc:e3:19:e9:38:cb:84:a2:4d:fa:65:18:
         fa:fc:97:dd:51:73:d8:5e:ca:e4:14:12:00:df:e5:a3:e3:9e:
         62:b7:cd:7f:71:fe:7e:b3:c9:04:3c:59:a2:13:1d:f9:83:46:
         a5:9f:dd:31:f4:1c:0e:9b:8d:a9:08:93:40:e5:8e:57:ca:ba:
         4d:24:ae:11:8b:b2:dd:37:82:1f:c9:93:68:30:70:fb:0e:48:
         be:d7:80:18:fa:83:fd:81:83:98:02:7c:ba:e3:0b:56:72:cc:
         18:c2:d9:65:84:78:a9:4a:0b:69:44:f6:79:9b:4d:04:c5:17:
         a5:6f:e7:3c:11:1e:9a:17:0a:ea:52:40:02:d3:7d:b0:6e:07:
         bd:bc:88:8c:e0:91:dc:17:9e:fe:ec:4b:0c:1b:f0:cd:f1:20:
         89:b0:7d:d8:e0:e2:68:2c:68:a6:c3:66:74:b1:71:14:4a:bb:
         92:f4:e9:37:2d:bc:06:a7:f5:50:84:62:7b:6f:22:57:b0:e0:
         71:9f:85:41:b4:fd:79:3b:1a:f0:6f:26:f7:8e:ce:e9:b6:03:
         47:88:7b:4f:27:5b:6a:85:0e:48:07:55:7d:a9:3b:31:1d:25:
         0a:2e:32:00:30:fe:e7:5d:4d:cb:1e:77:7d:09:02:d7:0c:91:
         0b:3b:76:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:40 2024 by rpki-client on console-fra.rpki-client.org