Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          oZ2MOb0uP/dfiZEkOtmJbeAWaP7bfrGjHoQUXay+4lI=
Subject key identifier:   FB:26:03:98:CE:AF:52:15:78:6E:E6:B2:E7:DA:3C:C0:9E:73:55:30
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       38D90FD7A751EC2B1B61A03B284608206659B0B7
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:49:01 +0000
ROA not before:           Thu 23 May 2024 12:44:01 +0000
ROA not after:            Thu 22 May 2025 12:49:01 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:12f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:d9:0f:d7:a7:51:ec:2b:1b:61:a0:3b:28:46:08:20:66:59:b0:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:44:01 2024 GMT
            Not After : May 22 12:49:01 2025 GMT
        Subject: CN=FB260398CEAF5215786EE6B2E7DA3CC09E735530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:9e:63:5f:e4:96:a6:36:75:37:3d:85:09:94:
                    6d:20:9e:7b:10:47:cc:77:8c:d9:76:05:5f:e7:fc:
                    bb:51:ae:66:71:cf:e4:1a:51:da:ac:77:5c:82:0b:
                    ea:73:e8:68:79:25:56:6c:db:61:31:ef:c0:46:39:
                    ae:a3:18:67:fc:7a:63:e7:41:81:5e:93:03:62:02:
                    7b:17:78:81:e8:2d:f2:cc:38:32:95:9f:cf:80:e9:
                    b7:f0:1a:1a:33:78:e4:47:65:f7:41:a3:b8:e6:0c:
                    d9:fa:62:2d:eb:62:ca:22:6c:e3:b8:95:23:16:05:
                    f4:4e:c0:53:d2:87:c6:fb:e0:e5:16:44:66:00:88:
                    de:be:b6:e2:38:eb:9b:08:fe:12:4d:a4:92:40:b4:
                    09:65:fd:73:1c:71:b6:17:69:64:fb:a6:f0:d4:9a:
                    31:9f:fd:e4:8d:c0:d0:5f:e0:f4:1f:d3:bd:e5:a3:
                    64:b9:31:bf:88:d6:7f:31:57:55:d7:c2:bc:a9:26:
                    20:ae:94:ae:c9:23:66:b9:8f:ec:f9:17:8d:97:ba:
                    56:5c:38:87:e8:3b:71:6d:18:fe:7a:95:dc:c8:55:
                    a0:b5:c9:04:0d:1f:ae:b6:7f:8f:6c:4f:25:f8:bd:
                    2f:96:9b:ee:a0:de:17:5c:07:5d:63:0a:64:3d:dc:
                    8b:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:26:03:98:CE:AF:52:15:78:6E:E6:B2:E7:DA:3C:C0:9E:73:55:30
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3132663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:12f::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:54:de:a5:a8:90:3e:ea:94:77:6d:46:3a:01:d4:a8:28:a9:
         d9:53:72:ee:7b:ee:69:5a:50:e4:e2:ec:65:f5:66:37:85:c3:
         43:e3:9d:c1:93:20:cd:d2:7a:7f:4d:d3:79:b4:8b:ed:8f:be:
         94:2a:d9:c9:17:81:eb:5e:37:ae:b3:91:39:1c:80:3f:8e:48:
         cb:6b:a1:25:cf:28:f3:bc:c5:28:6d:5b:70:7f:bc:b1:ff:2f:
         e6:93:74:92:a1:b6:e7:1d:b5:76:a9:e6:53:65:b1:f7:d9:ee:
         50:5e:fe:cd:ee:37:fe:51:d2:aa:8f:ea:db:da:e4:ba:56:fe:
         29:f7:1e:02:f0:cb:32:32:8b:b1:8c:1a:d1:c9:17:74:18:58:
         3b:2d:58:09:cb:0a:34:c0:5e:60:60:35:6b:63:3e:75:c7:fa:
         f5:c6:6d:2f:ea:16:c7:e3:61:b6:ed:a4:1a:41:bf:7e:6a:18:
         63:d1:a9:c6:3f:71:b5:2a:d4:62:c3:2a:d8:de:7c:2d:80:27:
         e3:5f:9c:be:31:1d:d6:33:fc:bf:c7:4a:b4:bc:42:52:4b:89:
         c8:24:45:24:e8:37:9d:34:55:cd:93:ef:1c:92:a9:8a:c3:01:
         01:65:e8:cb:48:17:a0:b9:6e:d0:61:33:96:90:79:ce:2f:37:
         89:bc:ab:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:48 2024 by rpki-client on console-fra.rpki-client.org