Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          hBeDRqECHqQcioTSoSr/X5+IGEh8eBVVke5ClMIoaI8=
Subject key identifier:   9C:3E:09:74:BA:C0:50:9B:5B:1C:B0:27:7C:03:1A:CB:90:18:E5:DE
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       38F9F7FF78E0CFBD03AFC73F9E2344715AD53937
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:57:49 +0000
ROA not before:           Thu 23 May 2024 12:52:49 +0000
ROA not after:            Thu 22 May 2025 12:57:49 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1415::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 18 Oct 2024 14:45:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:f9:f7:ff:78:e0:cf:bd:03:af:c7:3f:9e:23:44:71:5a:d5:39:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:52:49 2024 GMT
            Not After : May 22 12:57:49 2025 GMT
        Subject: CN=9C3E0974BAC0509B5B1CB0277C031ACB9018E5DE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:fc:39:f8:10:cb:73:d4:bd:9d:71:b1:64:56:
                    e4:ae:94:37:37:82:2b:b8:dd:2b:d8:e7:13:5d:95:
                    f7:2b:31:81:22:77:f3:6e:f1:d8:62:4f:8a:53:af:
                    1b:00:7d:f3:69:18:16:88:95:80:ee:da:9e:a0:9c:
                    37:7d:8a:4f:b4:79:39:2b:c2:06:36:a9:d0:c9:a9:
                    3c:04:fb:3a:fd:a1:91:73:f0:05:2c:6c:f9:80:c1:
                    7b:2c:ca:0c:9a:8c:62:7e:f5:b8:ec:c5:a3:78:01:
                    c6:8c:53:9b:2e:59:de:1d:6d:61:06:1d:9e:9d:3f:
                    fb:cd:49:0a:17:3e:02:02:3f:06:b4:b9:82:57:e5:
                    c2:dc:4f:75:dc:ef:d3:10:03:98:93:12:3e:1d:a9:
                    bf:8f:e0:73:db:f7:3f:21:d0:2d:d8:7c:bd:48:6c:
                    6d:5f:7f:eb:2d:e8:6b:3f:9a:e7:69:b4:0b:7a:41:
                    97:d3:06:ce:90:b5:a6:84:a5:73:26:49:39:c1:27:
                    be:db:dc:45:55:d8:cb:77:01:1c:6c:27:a4:0c:f8:
                    95:4a:91:e2:b0:f5:e0:9d:34:06:b9:24:aa:5f:e2:
                    0a:22:c5:5c:d1:68:7e:15:5b:5d:67:55:16:04:dd:
                    35:d2:06:30:d9:78:c5:c3:3e:8b:d0:da:7e:51:ac:
                    6b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:3E:09:74:BA:C0:50:9B:5B:1C:B0:27:7C:03:1A:CB:90:18:E5:DE
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313431353a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1415::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:d4:b6:58:6f:f5:a2:64:1c:a0:bd:40:0f:12:d5:a1:e8:f6:
         3d:22:03:54:7f:ed:89:79:02:3f:57:a4:da:c9:2a:45:38:43:
         9e:2b:3c:cb:6b:dc:76:d0:08:7c:a1:5f:de:14:72:ec:64:2e:
         04:8c:68:39:2e:37:f3:7c:2d:24:98:67:eb:4b:63:0d:ac:76:
         62:ee:8e:70:0d:0f:1b:78:2d:4e:72:99:6c:69:a5:a2:4e:d9:
         64:13:b3:eb:35:7f:2b:fa:37:e2:1f:61:6c:2d:6b:ae:25:29:
         e8:e1:0c:f2:fe:e2:c6:38:ed:72:d8:7d:15:0f:d5:be:61:a0:
         f6:ba:0d:2f:37:92:3b:78:4d:35:d9:c2:7a:31:33:1e:ee:05:
         6a:11:27:69:30:2d:7e:d2:28:4c:84:ac:98:19:32:32:e9:5c:
         92:5a:59:8a:b3:90:db:6c:8a:24:52:eb:79:35:2d:4d:ab:25:
         a1:c3:50:0e:b9:47:04:8d:9d:d7:dc:63:6f:c0:af:3c:5a:b2:
         af:c9:4c:c5:47:ad:f4:4c:7b:a8:4c:82:65:6f:48:22:32:ba:
         95:b2:c9:5c:31:76:fe:9f:33:8a:6d:f4:26:75:53:f1:aa:5c:
         54:28:fe:37:15:86:ef:78:73:d7:65:31:75:d7:f4:5d:7c:88:
         7a:d3:83:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 17 21:24:40 2024 by rpki-client on console-ams.rpki-client.org