Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          k//owg4iFJxAGzhze9+BtLlP/KgZ9LBGREL3BHBntPQ=
Subject key identifier:   6A:92:2B:81:E4:88:BF:53:7C:48:7A:5F:CB:70:7D:56:F3:59:7B:FA
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       39990633D199EFC0D46760C5651880010C7EB57C
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:56:34 +0000
ROA not before:           Thu 23 May 2024 12:51:34 +0000
ROA not after:            Thu 22 May 2025 12:56:34 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1517::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:99:06:33:d1:99:ef:c0:d4:67:60:c5:65:18:80:01:0c:7e:b5:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:51:34 2024 GMT
            Not After : May 22 12:56:34 2025 GMT
        Subject: CN=6A922B81E488BF537C487A5FCB707D56F3597BFA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a7:93:53:25:b6:18:b6:cb:90:50:53:6f:51:
                    35:41:e3:b4:98:8e:6b:f9:c4:a0:4f:de:69:b3:20:
                    1f:75:cc:fa:52:f4:c7:aa:89:f2:b4:ec:28:87:89:
                    82:e9:04:70:74:c7:34:b9:d4:bc:9a:f3:1d:82:2a:
                    9c:30:f6:24:e9:47:ef:b3:4a:47:ed:0f:3d:f9:af:
                    be:bd:3c:47:90:47:f8:d2:d3:99:2c:f6:b5:cb:a3:
                    72:4b:88:3c:39:bf:c0:a0:f2:27:77:df:42:b7:cf:
                    90:46:4b:62:4d:ac:d3:df:86:05:83:91:65:ba:1e:
                    a9:a3:62:d2:9d:0e:06:56:60:26:6d:38:73:bc:3b:
                    f7:b5:de:21:cf:bb:ed:fe:2b:28:7b:77:98:5c:4f:
                    6f:fb:96:ba:02:c4:9a:ec:98:13:21:3b:fb:89:2a:
                    7b:c2:65:2d:bc:63:0c:9f:56:2e:1f:c7:a8:2f:c3:
                    21:91:7f:fe:21:c6:5c:9f:c1:0d:8c:3b:65:b6:be:
                    8a:7e:0c:d1:2b:bc:20:ea:cc:1e:72:74:76:f6:72:
                    ce:53:f3:c5:1d:67:92:4d:3a:e7:49:b2:6a:3a:45:
                    2c:1e:06:61:bd:1e:e9:b2:99:ff:06:b9:d8:9c:3b:
                    e4:a8:fe:dd:bd:52:28:cb:90:fb:22:6b:c9:5f:89:
                    10:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:92:2B:81:E4:88:BF:53:7C:48:7A:5F:CB:70:7D:56:F3:59:7B:FA
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313531373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1517::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:19:64:fe:b5:77:94:91:28:6f:41:b5:10:2a:0b:b5:39:fd:
         9f:75:d5:b3:ba:a1:7f:64:7a:07:ca:ac:89:32:58:51:f3:e3:
         6f:b1:a6:57:2c:8d:8b:aa:ba:b1:f5:f4:78:f1:2d:2c:d5:4a:
         a6:f3:71:8a:d6:1a:e3:a0:5c:e7:a7:0b:71:99:05:9c:9d:43:
         ec:2a:f1:31:1c:dd:88:d0:89:0d:47:3f:88:b2:20:3e:38:5e:
         94:01:2e:c9:10:05:ff:32:02:73:45:68:e8:d8:e4:5f:b6:3c:
         15:8c:32:d1:8a:33:31:8f:fd:96:64:cc:5c:26:fa:6b:0d:af:
         25:fe:38:24:70:22:bf:36:a4:ee:8b:a3:3d:b8:74:5d:e1:b1:
         89:27:f7:a1:46:ee:78:84:13:2b:b1:1e:0e:74:b5:ec:be:07:
         82:ae:05:3e:b5:f9:37:68:d2:a9:23:5a:51:42:73:f5:e6:23:
         26:25:6a:5d:9a:56:c5:a1:df:bb:59:3f:ea:f4:01:13:5d:7a:
         07:0a:fe:4f:5b:23:c0:df:90:a7:f6:9a:9b:41:db:1a:42:70:
         a3:5b:e4:97:30:94:3e:24:21:ef:a1:1e:3d:57:da:03:58:9c:
         b2:75:80:8f:d5:ce:79:32:16:a2:51:14:d3:89:aa:a6:49:75:
         d2:b9:f5:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 11:56:12 2024 by rpki-client on console-ams.rpki-client.org