Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313432343a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313432343a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          hx+0AUuXpjowxYAK5JYxt4CM343KjnSplKbce8gntx8=
Subject key identifier:   66:B3:B8:E9:D6:DB:E0:DA:49:0F:A3:DC:1F:A8:F7:BA:D1:3B:9B:FB
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2D32C6415E497C1533C08ABF73208489BB44B222
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313432343a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:57:51 +0000
ROA not before:           Thu 23 May 2024 12:52:51 +0000
ROA not after:            Thu 22 May 2025 12:57:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1424::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:32:c6:41:5e:49:7c:15:33:c0:8a:bf:73:20:84:89:bb:44:b2:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:52:51 2024 GMT
            Not After : May 22 12:57:51 2025 GMT
        Subject: CN=66B3B8E9D6DBE0DA490FA3DC1FA8F7BAD13B9BFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:25:da:dd:b6:e7:f9:b9:bc:25:1d:4c:64:7a:
                    79:57:ac:c2:f5:90:aa:4b:de:d2:40:4a:59:9e:02:
                    95:ef:3b:bb:7e:97:18:e0:04:85:ee:46:f1:77:d7:
                    d4:84:81:17:67:f4:89:82:d6:ee:18:7d:46:ba:91:
                    61:f2:d3:69:ca:6b:f3:86:14:a8:bf:b7:8a:22:fb:
                    7c:d9:70:9e:61:00:aa:a3:e0:ed:03:b7:82:2b:3a:
                    91:88:9c:b4:a8:53:eb:8c:95:7e:4f:7d:e8:50:c1:
                    c5:2f:1c:c0:2b:4d:0f:43:f5:02:be:c4:4e:73:f7:
                    f5:ee:a4:5a:39:30:0d:92:36:30:07:83:89:e9:f5:
                    8f:0b:61:4e:98:e8:5e:c5:0d:78:70:aa:b7:12:80:
                    4f:bb:5a:94:cc:c2:2a:e1:5c:22:59:f1:0e:78:b7:
                    ac:bc:85:dc:49:ca:bd:0e:90:0c:a7:32:42:1a:cf:
                    e1:69:b9:5f:b0:6b:1f:44:b7:90:a4:e8:42:15:40:
                    2d:14:65:e1:fd:db:69:de:93:96:52:1f:b6:3e:33:
                    f7:bd:0b:67:78:7f:3c:70:0e:8e:8d:c3:d3:76:ab:
                    53:bd:db:23:af:ec:4b:0f:df:5b:48:47:7f:fc:98:
                    04:f0:7e:d4:4f:4e:ab:48:a6:71:56:18:14:7d:b6:
                    2a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:B3:B8:E9:D6:DB:E0:DA:49:0F:A3:DC:1F:A8:F7:BA:D1:3B:9B:FB
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313432343a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1424::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:08:2b:b2:8b:04:07:4f:c8:ce:2f:5c:88:d7:46:9b:47:42:
         ed:d0:89:60:b8:5a:98:96:84:87:37:44:89:48:bf:91:7d:a1:
         dd:e7:72:74:dc:bc:2f:34:22:62:82:5b:cb:8e:db:ea:b3:75:
         b6:5f:38:80:95:eb:99:ca:b0:51:79:c5:5b:a1:10:c7:b4:df:
         af:18:01:80:7d:93:ec:a2:0d:f5:8d:d5:39:64:35:33:0a:28:
         ab:29:0a:98:4d:36:c4:9a:3f:1c:bc:1c:18:0a:79:64:58:2b:
         e0:85:5f:8b:60:39:21:8a:f2:80:4f:5d:aa:cb:3b:4d:44:95:
         7f:aa:8f:f3:11:f0:64:0b:d3:04:55:af:62:3f:73:10:38:07:
         7f:40:f5:ce:bd:f1:38:fe:11:50:37:fb:92:26:0c:65:97:1d:
         a0:f2:f3:cf:e4:bb:1f:32:69:9d:d2:a2:35:64:9a:46:fc:66:
         47:8a:38:a2:11:e1:0c:c2:8e:68:b0:48:30:68:0c:f5:b5:be:
         f8:de:eb:4d:94:43:c5:05:7b:ca:f8:25:f4:53:15:a8:38:96:
         ca:ec:fc:8e:47:22:ad:14:e3:b4:91:bf:59:c8:1f:59:1b:54:
         5c:18:95:d0:36:10:fd:97:3c:04:32:1c:6b:23:b1:03:33:93:
         7f:86:bf:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:46 2024 by rpki-client on console-fra.rpki-client.org