Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313431353a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a313431353a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          0Ne+y40pq2fJsEiAdpUPBHqysSCrCTnPRZbt9Fi0l78=
Subject key identifier:   D0:00:F5:7C:D9:77:72:9C:FB:DD:F3:B3:78:46:74:6A:DE:F3:06:FA
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       7D09F93B1CE69E516B8D053A40B99C531292C2AA
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313431353a3a2f34382d3438203d3e203532303235.roa
Signing time:             Sun 14 Apr 2024 12:47:51 +0000
ROA not before:           Sun 14 Apr 2024 12:42:51 +0000
ROA not after:            Sun 13 Apr 2025 12:47:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1415::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:09:f9:3b:1c:e6:9e:51:6b:8d:05:3a:40:b9:9c:53:12:92:c2:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr 14 12:42:51 2024 GMT
            Not After : Apr 13 12:47:51 2025 GMT
        Subject: CN=D000F57CD977729CFBDDF3B37846746ADEF306FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e0:0a:49:2c:43:83:64:2f:5c:cf:d3:58:b7:
                    40:66:4f:72:e7:f1:e9:79:49:d0:c2:38:9a:5d:08:
                    f7:62:1d:3c:92:0e:4e:ef:be:c3:0c:fe:51:1c:f9:
                    ee:9a:6a:8b:ee:6c:c6:ef:a6:60:c1:c0:36:6e:76:
                    d1:71:e4:da:63:fb:24:94:5a:3b:3c:b7:28:02:bf:
                    dc:75:d9:74:05:7f:6e:b3:26:06:29:dd:a6:d9:a7:
                    3a:92:07:ab:a7:a6:c7:f6:b3:ad:82:b8:c6:05:15:
                    26:8b:23:55:2b:89:2f:0e:30:66:a0:0d:f9:44:f2:
                    b8:f0:11:ac:f2:7a:94:81:59:df:e3:c8:44:73:ca:
                    38:29:bd:76:7f:7b:9f:ed:88:14:a5:34:73:bf:1e:
                    bb:b7:a2:51:2d:89:42:d1:4e:44:8d:b6:50:13:68:
                    5a:6a:61:00:54:b4:65:39:04:02:7b:b0:ce:d7:bd:
                    52:60:6d:94:09:d9:b2:96:c5:1b:3a:ac:d7:3d:a8:
                    da:96:1f:17:0b:27:d0:d4:cf:e2:5d:79:6f:a0:e5:
                    ad:ab:f0:9e:78:ca:c7:e7:aa:b7:1f:b2:04:9a:ed:
                    91:ec:93:59:06:8b:63:a5:b2:d5:bb:11:ae:a5:83:
                    8c:c0:14:f8:2f:70:19:3a:84:36:e5:f3:f6:7a:bd:
                    bd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:00:F5:7C:D9:77:72:9C:FB:DD:F3:B3:78:46:74:6A:DE:F3:06:FA
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313431353a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1415::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:6f:04:c8:c5:bd:77:64:e1:ee:5b:20:a9:c6:eb:16:d3:1d:
         1b:fa:f5:f9:ec:5c:24:0b:a1:96:58:5b:cb:b3:d7:23:d6:47:
         a6:4e:04:9d:4b:12:d9:8a:59:f3:65:c2:9a:77:02:b2:ba:cd:
         d9:15:23:b8:c4:88:7f:55:17:c1:b4:43:5d:1c:32:ff:d7:3a:
         e3:d7:8b:17:74:4f:df:7c:e1:c6:fc:23:f0:2f:c0:77:36:87:
         a5:bd:c5:1e:b1:b8:02:cf:f2:d3:6c:05:3e:40:44:c9:40:86:
         d9:ec:71:57:12:cd:bd:b0:6c:7e:88:4b:cf:be:cd:c0:0f:21:
         73:35:4b:84:7f:17:b0:46:9a:c7:e4:9f:2a:bb:80:73:9a:ea:
         bf:f8:92:a6:e1:8c:f2:3e:8c:29:d0:b0:65:f8:6e:b5:92:a8:
         5b:94:6a:a1:49:49:19:ac:6f:b5:d2:96:79:7a:96:b5:db:ba:
         99:53:05:b8:a1:73:36:93:56:3c:61:47:b3:53:1e:3b:67:e1:
         3a:6f:f5:f4:b1:e7:99:fb:ec:8e:0f:c6:4d:7c:00:d2:58:4c:
         be:35:4d:f4:6b:de:5a:a5:bc:84:6b:34:82:28:8b:5c:07:9c:
         93:53:ee:0b:e0:c9:74:50:6d:23:a6:04:f1:4f:3b:6b:96:68:
         5c:f0:e7:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:40 2024 by rpki-client on console-fra.rpki-client.org