Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          UQtyVRp/NoIKClFp/L1r98qRluJ2VjYhOTWmvS0MSWI=
Subject key identifier:   51:0D:7E:88:2F:98:51:56:CD:B7:28:13:AF:71:29:7B:14:F5:7D:D4
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       5B1E61FDAF2C2054194B79E20866268B44B0B7CD
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:56:38 +0000
ROA not before:           Thu 23 May 2024 12:51:38 +0000
ROA not after:            Thu 22 May 2025 12:56:38 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:12::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 19:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:1e:61:fd:af:2c:20:54:19:4b:79:e2:08:66:26:8b:44:b0:b7:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:51:38 2024 GMT
            Not After : May 22 12:56:38 2025 GMT
        Subject: CN=510D7E882F985156CDB72813AF71297B14F57DD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:9d:66:77:f4:71:03:fb:db:80:25:9b:69:
                    cc:29:ea:b5:b0:35:70:53:38:00:90:e3:ee:7f:cc:
                    19:4c:2e:68:35:49:5c:2b:7d:95:7b:6f:70:4c:ee:
                    59:e7:12:10:8a:a1:36:81:f4:a5:aa:bc:41:6a:a3:
                    c2:4e:5a:5a:2c:4c:1e:33:2c:5d:e6:5f:a3:ba:08:
                    5f:90:d2:a7:4f:53:74:43:35:ef:9b:11:8d:27:d1:
                    db:1a:d7:28:ca:ab:7b:56:e6:f7:48:1f:27:1b:bb:
                    88:53:0b:02:79:55:9b:a7:63:30:e5:ce:9f:22:b2:
                    64:94:ed:66:c2:39:17:4d:5d:90:1b:ae:5f:5d:7b:
                    30:4f:d7:49:d8:8f:5f:bd:f7:fc:cc:0b:72:e0:c8:
                    1a:52:4b:eb:80:60:d4:6c:7e:d0:40:c3:21:47:c1:
                    ac:00:01:15:70:17:9c:3d:0b:05:ed:e4:39:34:4d:
                    96:7a:59:78:c3:9e:96:be:92:22:b5:c1:3a:49:89:
                    9b:1c:66:0f:27:71:ca:7b:b2:e5:cf:0d:69:e8:08:
                    4d:c4:af:8b:1b:60:67:ed:42:7b:5e:56:8a:44:40:
                    73:68:60:76:d8:9a:6c:9b:4b:bf:e4:c7:a9:f7:87:
                    e0:60:bd:02:bc:a0:96:91:2b:51:ec:13:da:44:f9:
                    0e:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:0D:7E:88:2F:98:51:56:CD:B7:28:13:AF:71:29:7B:14:F5:7D:D4
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a31323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:12::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:d9:b9:ae:74:c5:80:17:79:61:c4:37:9d:4b:81:53:37:28:
         97:97:b2:ef:d5:74:40:ef:83:59:00:56:82:09:6a:af:67:eb:
         da:c5:f3:af:56:e2:45:54:12:27:31:31:66:23:73:ff:94:8c:
         f0:09:f5:c9:dc:9d:dc:91:50:c9:2e:30:35:14:a6:9b:28:9e:
         8a:06:4b:0d:69:ff:41:14:a2:ea:f9:c0:78:56:3e:16:0d:45:
         bc:f7:df:8d:c9:06:9a:f5:7e:78:a7:06:59:f1:79:77:8a:4e:
         9a:c0:a6:d0:55:8d:d3:6d:b7:48:27:95:53:46:e6:65:b1:cc:
         da:0c:ad:fc:81:0b:28:b6:ef:55:2b:a4:8d:40:af:1c:8c:b4:
         20:16:6f:80:8c:dd:9b:64:20:21:c7:02:9b:4f:73:6a:8a:87:
         91:b3:57:b3:1e:30:21:50:e2:6f:af:09:39:b6:2f:0a:82:13:
         30:5b:38:ee:46:97:1a:f5:4a:59:23:5a:28:78:c6:5e:92:bc:
         d6:94:c0:72:b4:46:8a:a5:82:5f:5a:04:f7:76:3b:83:6b:15:
         0b:0a:8f:2c:b1:55:08:1a:dc:58:81:21:78:1f:e3:00:e6:1a:
         72:e6:58:d6:cc:d4:7b:be:77:f0:fd:2a:77:46:11:82:84:de:
         67:bc:f2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:58:09 2024 by rpki-client on console-ams.rpki-client.org