Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313631383a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313631383a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          TbcH5FYm9mTh6UC37aRWvv9n473iAIQdpFSWjvL+lFE=
Subject key identifier:   09:C0:18:E4:5B:AE:F5:B5:95:3C:53:F4:EB:D9:28:42:A8:37:2D:23
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       5F62BA9214193FE733E94981BEB0543DD7EFB1F5
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313631383a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:56:44 +0000
ROA not before:           Thu 23 May 2024 12:51:44 +0000
ROA not after:            Thu 22 May 2025 12:56:44 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1618::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 06:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:62:ba:92:14:19:3f:e7:33:e9:49:81:be:b0:54:3d:d7:ef:b1:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:51:44 2024 GMT
            Not After : May 22 12:56:44 2025 GMT
        Subject: CN=09C018E45BAEF5B5953C53F4EBD92842A8372D23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:d3:12:41:46:5d:c4:63:98:e5:ed:76:98:
                    1b:6c:de:2c:74:f4:ad:d5:9d:2f:7c:89:28:0f:29:
                    8d:19:f0:4d:3b:bf:05:61:35:09:45:44:af:9a:49:
                    f3:92:e9:b0:ea:bc:72:60:d3:d9:4d:eb:a0:e0:63:
                    4f:ac:99:83:a6:a3:b8:8a:36:15:f4:31:1f:ed:3b:
                    36:60:42:f4:0f:07:6c:c7:2a:07:54:ba:fc:1d:7d:
                    f5:cf:6e:cd:21:8b:1d:0b:2c:12:c4:66:1b:de:58:
                    89:ce:6b:ab:8c:76:aa:d8:89:8a:d9:cf:4a:03:96:
                    d1:77:0f:43:96:e4:d0:80:cf:04:76:a9:b3:35:14:
                    0b:38:a5:f0:74:e3:62:d3:9d:99:6b:c6:75:ad:26:
                    72:8c:0b:61:aa:0d:6f:ab:32:7e:e0:64:64:24:30:
                    1c:4d:fe:55:9c:e8:51:47:c5:2d:9e:43:6d:a2:92:
                    6a:1e:c4:8d:ee:c5:59:86:3d:b7:11:f9:09:5a:c0:
                    40:f1:f3:16:33:9c:e5:09:8b:dc:cb:8e:fd:4a:e7:
                    f3:57:a5:e1:a4:3e:29:b5:af:94:c0:a0:27:5f:95:
                    77:e3:48:da:e0:9d:57:0a:ac:a9:f5:25:86:55:5c:
                    1b:58:63:98:89:f9:29:c2:cf:f8:7b:9d:1a:b4:33:
                    fe:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C0:18:E4:5B:AE:F5:B5:95:3C:53:F4:EB:D9:28:42:A8:37:2D:23
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313631383a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1618::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:4f:3e:3d:3a:a7:75:51:7d:ec:be:d7:9a:45:d5:c4:b9:e1:
         49:83:36:84:2a:43:38:93:a0:66:3d:f2:b3:5d:1f:a6:75:db:
         bf:2f:b2:76:05:f6:71:a6:cd:fa:aa:53:78:4c:4b:16:a9:38:
         2b:74:aa:a4:9d:fb:1a:9d:32:5b:71:df:74:d2:dd:77:06:a2:
         50:06:25:4f:c0:10:88:8d:ab:8f:5b:c9:d6:e7:19:12:9d:2d:
         2d:6a:62:65:c0:77:09:2e:db:05:bd:54:ff:aa:97:84:75:06:
         d1:d8:9d:14:e6:d6:7b:c4:53:81:4d:dd:1a:eb:3e:cf:f1:a3:
         28:15:9a:a2:f7:74:11:bf:fc:8c:07:e3:c3:77:b2:51:11:c6:
         c3:ec:7f:f6:e5:5e:13:e1:15:71:2e:7b:e9:7b:65:96:13:28:
         f0:44:6e:0c:0f:c7:fb:f5:4c:76:cf:0b:78:a9:a6:d1:11:c3:
         25:64:e8:6c:19:ad:a0:1f:6b:18:f1:51:49:a7:4f:47:52:ea:
         a6:69:69:ab:19:d2:16:6e:b9:b3:df:7f:1f:65:97:72:4c:e9:
         7a:aa:9a:dd:b6:c4:2b:88:8c:81:97:34:37:4b:80:04:79:31:
         0c:8f:5d:ce:9d:cf:d9:06:fe:e9:f3:c1:62:c2:fb:f2:96:29:
         30:80:ec:0d
-----BEGIN CERTIFICATE-----
MIIFJTCCBA2gAwIBAgIUX2K6khQZP+cz6UmBvrBUPdfvsfUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNDA1MjMxMjUxNDRaFw0yNTA1MjIxMjU2NDRaMDMxMTAvBgNV
BAMTKDA5QzAxOEU0NUJBRUY1QjU5NTNDNTNGNEVCRDkyODQyQTgzNzJEMjMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrEdMSQUZdxGOY5e12mBts3ix0
9K3VnS98iSgPKY0Z8E07vwVhNQlFRK+aSfOS6bDqvHJg09lN66DgY0+smYOmo7iK
NhX0MR/tOzZgQvQPB2zHKgdUuvwdffXPbs0hix0LLBLEZhveWInOa6uMdqrYiYrZ
z0oDltF3D0OW5NCAzwR2qbM1FAs4pfB042LTnZlrxnWtJnKMC2GqDW+rMn7gZGQk
MBxN/lWc6FFHxS2eQ22ikmoexI3uxVmGPbcR+QlawEDx8xYznOUJi9zLjv1K5/NX
peGkPim1r5TAoCdflXfjSNrgnVcKrKn1JYZVXBtYY5iJ+SnCz/h7nRq0M/5bAgMB
AAGjggIvMIICKzAdBgNVHQ4EFgQUCcAY5Fuu9bWVPFP069koQqg3LSMwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzAL
hnVyc3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtz
LzIvMzI2MTMwMzUzYTY0NjY2MzM0M2EzMTM2MzEzODNhM2EyZjM0MzgyZDMxMzIz
ODIwM2QzZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcO
AjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QWGDANBgkqhkiG9w0B
AQsFAAOCAQEAw08+PTqndVF97L7XmkXVxLnhSYM2hCpDOJOgZj3ys10fpnXbvy+y
dgX2cabN+qpTeExLFqk4K3SqpJ37Gp0yW3HfdNLddwaiUAYlT8AQiI2rj1vJ1ucZ
Ep0tLWpiZcB3CS7bBb1U/6qXhHUG0didFObWe8RTgU3dGus+z/GjKBWaovd0Eb/8
jAfjw3eyURHGw+x/9uVeE+EVcS576XtllhMo8ERuDA/H+/VMds8LeKmm0RHDJWTo
bBmtoB9rGPFRSadPR1LqpmlpqxnSFm65s99/H2WXckzpeqqa3bbEK4iMgZc0N0uA
BHkxDI9dzp3P2Qb+6fPBYsL78pYpMIDsDQ==
-----END CERTIFICATE-----
Generated at Sat Sep 7 23:17:43 2024 by rpki-client on console-fra.rpki-client.org