Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313731613a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a313731613a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          IAm1D5+/kUfUtGBVJAW9o5dLB5Azq2TJ1jhlQ0mDyK0=
Subject key identifier:   5D:40:CE:D0:6B:D4:FE:84:EC:24:2E:25:6E:D1:EC:39:71:1D:E5:10
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       23CF86B4712B0E156F9472E3EECC94F45EEF8B6A
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313731613a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 11 Oct 2023 16:22:25 +0000
ROA not before:           Wed 11 Oct 2023 16:17:25 +0000
ROA not after:            Wed 09 Oct 2024 16:22:25 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:171a::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:cf:86:b4:71:2b:0e:15:6f:94:72:e3:ee:cc:94:f4:5e:ef:8b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Oct 11 16:17:25 2023 GMT
            Not After : Oct  9 16:22:25 2024 GMT
        Subject: CN=5D40CED06BD4FE84EC242E256ED1EC39711DE510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:de:f7:4f:6a:90:c9:24:9e:ac:ef:33:ce:c0:
                    ed:98:06:48:d7:99:55:aa:87:f4:f0:7a:69:9e:af:
                    1d:75:77:20:21:96:3f:5b:f2:1e:df:2e:89:1f:f9:
                    8a:c8:12:1d:36:27:ff:da:19:ff:84:4c:a4:9f:20:
                    82:ac:4e:b5:08:54:87:f2:00:cf:a6:88:75:16:6b:
                    86:c0:99:71:75:55:f5:14:86:b5:71:90:2a:14:ce:
                    53:14:55:d8:4e:81:99:bf:80:90:41:6c:ea:86:37:
                    29:51:5b:22:2a:a6:3a:04:96:1f:d1:aa:da:e5:4e:
                    83:a4:90:e5:d5:f6:d6:3a:38:ea:b3:ab:35:da:27:
                    f7:79:40:74:a5:c2:42:cb:00:fb:10:28:8b:40:a0:
                    fd:39:58:96:00:0b:ea:84:0d:a7:43:ff:fa:50:7b:
                    ab:6d:76:c9:05:f8:f6:31:19:fb:d8:e9:19:51:1a:
                    9e:07:a4:78:e9:f0:9d:02:51:9d:b4:63:ab:23:d5:
                    bd:8c:47:07:3e:d8:d2:73:26:9b:0d:75:2f:f0:25:
                    86:b3:88:70:d7:dc:1f:e8:cc:83:00:15:2c:78:bc:
                    c2:54:77:18:c1:16:1e:a1:fb:b9:5f:b7:58:84:6c:
                    87:cf:96:e1:68:ee:aa:f5:0d:e4:9f:85:92:4d:f4:
                    da:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:40:CE:D0:6B:D4:FE:84:EC:24:2E:25:6E:D1:EC:39:71:1D:E5:10
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313731613a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:171a::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:52:c4:c5:2e:b4:ff:9b:c7:e2:01:84:24:23:74:73:2d:e6:
         c7:af:cb:77:84:eb:e3:32:a4:2d:89:20:01:5b:ab:22:32:df:
         35:f3:80:63:31:36:5f:f9:cd:d7:86:22:06:31:18:c9:50:33:
         7e:93:fc:ba:56:53:ec:f0:79:86:86:eb:41:60:a0:ac:f5:1f:
         71:24:6c:9c:b8:d1:76:50:ba:e6:16:e9:25:f2:35:b3:ce:c5:
         f6:44:aa:f7:ec:d1:9f:35:a1:5f:a3:a3:fa:5c:ff:8b:e8:28:
         64:fb:65:3c:d0:f1:d9:7c:5f:ac:e6:2a:7f:1a:d5:1a:62:95:
         e3:1c:f1:02:60:cb:30:b0:a4:9a:cb:ee:12:69:ae:a4:f8:1f:
         99:82:12:81:4d:b5:97:82:ee:a6:d4:16:f9:13:9b:23:dd:a0:
         3a:16:e4:bb:95:30:fe:98:ab:bc:c6:b6:6d:c1:f9:b2:8f:3a:
         9a:7b:69:f9:87:ce:45:38:d6:f6:e6:ee:75:16:f6:7e:57:cb:
         d7:e6:cf:49:c6:4b:9a:57:0b:07:00:07:ec:4b:e3:e5:96:05:
         c8:2b:53:11:71:bf:49:2f:c8:1a:29:4e:bf:01:a7:62:4a:3b:
         d0:d9:78:14:db:ea:28:40:0f:f9:3d:c5:27:59:54:6e:73:b7:
         08:45:78:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:40 2024 by rpki-client on console-fra.rpki-client.org