Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313831393a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a313831393a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          JsypuJec2QiZ5SpknGtOdpUvrgnG9xWc75ho4CPaiWw=
Subject key identifier:   9C:10:3D:31:5D:80:F7:43:D4:89:3C:00:42:AB:01:68:F4:DC:50:0D
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6DB5B094293DBDB368071A8A11D5E77106C9F736
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313831393a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:57:01 +0000
ROA not before:           Thu 23 May 2024 12:52:01 +0000
ROA not after:            Thu 22 May 2025 12:57:01 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1819::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b5:b0:94:29:3d:bd:b3:68:07:1a:8a:11:d5:e7:71:06:c9:f7:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:52:01 2024 GMT
            Not After : May 22 12:57:01 2025 GMT
        Subject: CN=9C103D315D80F743D4893C0042AB0168F4DC500D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:83:2f:24:d4:39:1b:ea:72:f0:9f:ca:63:84:
                    60:b0:ab:d7:eb:3a:c5:cf:07:8b:4e:42:dd:5a:11:
                    1d:f3:5b:17:c4:46:4e:9b:44:cf:90:dd:fa:d5:17:
                    56:15:bb:89:ff:57:b0:2f:54:0b:0d:ef:9c:3e:37:
                    51:f7:e8:70:fb:93:d7:d5:41:98:c7:80:5f:33:48:
                    7b:bc:1f:70:a9:b2:56:0f:e9:56:62:c0:a6:be:75:
                    4b:73:aa:66:04:68:2b:68:50:10:16:f8:3b:a0:31:
                    d7:51:74:ec:db:93:ea:5e:27:9c:61:d9:11:46:fb:
                    76:63:72:f6:52:83:ae:90:af:7e:09:cb:b2:3e:fa:
                    f7:81:12:30:43:3f:08:c1:82:b3:8e:d1:cd:bc:92:
                    ac:6a:c1:1b:4c:cc:aa:40:bc:e2:21:0b:c9:79:a7:
                    0e:18:4e:8f:d2:0d:ed:4d:a1:16:b6:de:f5:d6:6b:
                    07:7e:ce:15:5b:73:d1:54:47:f5:46:23:f2:36:ab:
                    3d:6d:aa:52:ba:2b:6a:bc:c7:1a:81:5a:50:3f:ed:
                    9f:63:0e:40:a8:cd:d0:8e:b0:c3:15:ee:d6:90:1d:
                    51:b8:07:87:62:ce:d1:4b:2f:67:10:e2:77:df:8a:
                    36:4d:9a:8c:ff:ea:30:8c:2f:9b:52:8e:93:ab:39:
                    57:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:10:3D:31:5D:80:F7:43:D4:89:3C:00:42:AB:01:68:F4:DC:50:0D
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313831393a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1819::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:6e:12:12:a9:14:e9:38:0c:67:0b:a0:f7:a3:4c:bc:e6:69:
         21:20:7a:fc:b4:8d:17:02:b0:2a:35:10:bb:55:ef:33:67:dd:
         c1:76:1c:ec:da:99:90:16:e6:fa:94:cd:b0:bf:51:28:fe:88:
         c0:bc:e2:d9:0a:97:e0:ca:b3:97:ef:e8:89:96:c0:26:44:8f:
         07:d9:86:47:40:2f:be:e3:88:9c:6d:36:cf:c1:88:ab:f6:5a:
         1b:16:46:90:3c:39:f2:27:f4:2a:7b:48:f1:76:ea:f0:83:3b:
         28:76:80:d9:16:30:f9:d6:e6:b1:c7:a6:4b:0f:ef:dd:21:41:
         d1:80:e4:83:1f:ce:6d:b3:b3:17:2c:bc:63:a3:66:69:5a:42:
         37:07:e0:94:64:3d:2f:f1:35:be:89:e0:67:53:c9:ce:9f:09:
         46:a5:78:61:b9:a5:57:d7:65:02:0b:b6:e0:7c:df:77:d3:6e:
         1f:81:d1:af:23:44:8f:3e:b8:4f:4b:ac:56:82:cc:09:42:cb:
         2f:be:61:ea:34:03:15:53:d2:d6:7b:d3:a7:7e:56:15:fe:43:
         85:02:6b:a6:6d:5b:f3:bc:84:7e:1c:bf:36:54:62:89:00:87:
         b9:db:13:d0:fd:f4:98:d3:12:d5:d5:46:bc:f2:ff:6b:47:93:
         db:70:f3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:48 2024 by rpki-client on console-fra.rpki-client.org