Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          O4RuPLBSA2cVoXCuC7QHfyGtDgrbPs6PyTOUSTBXOys=
Subject key identifier:   5C:31:B4:41:6D:42:74:27:BD:87:E8:97:7D:ED:A4:1D:BD:3B:F7:0D
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       269C4BBA904061C1CAAFB7110B4E2E2742F9AB64
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:57:04 +0000
ROA not before:           Thu 23 May 2024 12:52:04 +0000
ROA not after:            Thu 22 May 2025 12:57:04 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1214::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:9c:4b:ba:90:40:61:c1:ca:af:b7:11:0b:4e:2e:27:42:f9:ab:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:52:04 2024 GMT
            Not After : May 22 12:57:04 2025 GMT
        Subject: CN=5C31B4416D427427BD87E8977DEDA41DBD3BF70D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e6:19:e5:91:bc:77:e7:2a:6a:36:6c:8b:0f:
                    dc:d4:14:d1:e5:25:12:54:1f:89:72:28:64:b5:56:
                    49:b4:35:7a:a5:9b:85:24:0f:f4:e0:d6:fd:c2:2f:
                    9d:e2:27:6b:56:52:4c:e1:b9:ca:04:72:ab:21:c1:
                    4b:f5:be:51:a2:29:3a:42:ff:d8:1d:ba:8a:ed:f3:
                    bf:f5:43:e8:0c:13:b8:b8:1a:df:a3:83:59:1c:eb:
                    e6:a3:f1:bf:1e:80:21:69:a5:77:3b:0e:8b:bd:5e:
                    86:5f:26:66:c4:21:67:4a:eb:c5:84:7a:13:34:c4:
                    6f:3d:53:fc:ca:59:dc:a8:44:27:ea:19:8b:68:7e:
                    f1:0e:89:81:69:c7:69:5f:9b:6d:e7:d9:e8:94:20:
                    80:ed:81:cd:fc:d9:a2:98:9e:44:d2:b5:4d:0c:38:
                    82:be:0c:d6:c1:d3:75:df:f9:1d:71:32:b4:10:ee:
                    29:b7:bc:75:31:50:a8:4f:6e:15:42:37:d2:d4:d9:
                    97:53:6b:61:02:94:77:4e:1d:33:92:5d:7e:1d:00:
                    71:e8:5d:e2:8c:b5:a1:1c:3c:5e:89:af:83:de:5d:
                    54:76:b7:fe:9c:d9:9f:95:13:37:16:1b:73:a9:63:
                    22:c4:8d:c2:5b:6e:31:37:24:10:5e:b6:42:90:7f:
                    44:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:31:B4:41:6D:42:74:27:BD:87:E8:97:7D:ED:A4:1D:BD:3B:F7:0D
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313231343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1214::/48

    Signature Algorithm: sha256WithRSAEncryption
         64:0a:55:c8:99:ae:a4:70:aa:01:a8:db:f9:69:84:1b:f8:8f:
         de:2f:2b:a2:5c:d9:81:40:d0:eb:54:a8:53:d5:42:2c:dd:9c:
         c5:f4:0f:5d:6d:b0:c7:31:28:33:e0:01:17:60:71:68:89:fe:
         86:ee:0c:9d:b0:e5:00:31:cd:a6:b7:c0:8e:0c:b0:08:4b:30:
         29:6d:bc:60:5e:45:78:6c:df:4f:67:b3:b0:d6:84:69:1d:d3:
         70:4f:3f:b0:ee:cf:2a:9d:d8:13:a0:71:df:3a:4a:9b:4a:9f:
         fb:03:dd:16:d2:7b:20:fc:ed:cd:d7:ab:c3:f7:8b:49:07:1d:
         a9:83:21:5e:1e:92:ed:29:ce:a7:d6:93:f6:39:64:ab:4a:79:
         b6:11:7f:7b:7e:3f:3e:93:1e:d1:e6:02:90:fc:21:20:8b:99:
         cd:a1:ed:8b:0c:45:ce:81:89:3a:d8:57:5a:73:e8:a7:93:ff:
         72:8a:35:28:9d:b8:92:fb:eb:2c:0d:a7:a5:5d:11:e3:9b:5d:
         8b:ea:2b:ad:79:3a:13:89:05:59:7f:30:8e:02:17:9d:d3:80:
         1b:4b:27:c4:4f:ef:08:e1:36:2e:cd:a9:b3:b9:41:b6:f0:bd:
         04:7a:2a:46:4f:a2:bb:f5:d0:72:8d:5b:3a:98:0d:12:31:cc:
         2b:88:df:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:32 2024 by rpki-client on console-ams.rpki-client.org