Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313831393a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a313831393a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          FeDFOkVP7oBejRPeZgV/Vt4NadAJ2ySixvi7gsnSfVI=
Subject key identifier:   8B:0A:E3:DA:D7:95:85:04:30:CB:1D:9E:E9:37:EE:09:EA:73:3B:F8
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       22B6DCC71FCB1468750706B9492FD47DA395A15D
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313831393a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 11 Oct 2023 16:22:23 +0000
ROA not before:           Wed 11 Oct 2023 16:17:23 +0000
ROA not after:            Wed 09 Oct 2024 16:22:23 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1819::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b6:dc:c7:1f:cb:14:68:75:07:06:b9:49:2f:d4:7d:a3:95:a1:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Oct 11 16:17:23 2023 GMT
            Not After : Oct  9 16:22:23 2024 GMT
        Subject: CN=8B0AE3DAD795850430CB1D9EE937EE09EA733BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c6:ad:2c:d2:0b:70:8b:ac:72:3a:f2:33:a3:
                    77:c6:80:b2:d1:7d:82:0a:42:fe:02:46:ec:07:af:
                    ff:e9:5c:a1:86:1a:64:a7:f8:3b:4e:b9:50:93:af:
                    69:00:e2:19:ee:8c:24:c3:9e:55:9d:ff:ac:8b:66:
                    02:4d:24:b5:78:af:cf:dd:a3:be:7d:ca:05:3e:e6:
                    72:fb:e0:59:ab:c0:e4:aa:91:4c:23:b4:02:53:71:
                    3e:d2:f5:80:73:27:ef:8e:74:e2:54:14:df:62:95:
                    08:b6:7f:7f:5c:6c:9c:df:9b:f3:1a:aa:52:78:11:
                    6d:85:0b:4a:b5:b1:ab:d2:56:ca:99:17:54:d8:06:
                    2e:d0:f0:8b:93:1f:84:fc:ef:89:77:2c:a9:05:00:
                    89:f5:cb:b9:1c:ba:4c:92:8d:1a:b6:c6:e1:7a:f8:
                    8f:bb:6e:52:92:da:2c:a8:36:93:71:46:83:ff:74:
                    81:28:b3:65:88:74:37:15:ca:f4:d1:73:d3:b2:eb:
                    04:fe:10:06:c8:76:5a:6b:18:fb:69:f6:ee:6b:6d:
                    48:93:e5:53:b6:fc:f1:35:7b:aa:ee:8f:c9:b5:d6:
                    ee:bd:e7:57:35:69:24:21:f5:98:bc:89:28:56:98:
                    50:61:a8:b2:99:29:99:0b:2d:e7:f6:29:73:71:56:
                    94:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:0A:E3:DA:D7:95:85:04:30:CB:1D:9E:E9:37:EE:09:EA:73:3B:F8
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a313831393a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1819::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:c2:d1:bb:a0:2a:45:59:43:16:16:8e:78:41:bf:ea:d0:44:
         59:33:b7:42:55:8e:a0:c4:87:17:c7:0d:d0:de:e7:da:bd:48:
         c0:79:5b:e1:c4:e3:2d:f4:ab:1b:41:e6:75:5f:ff:3e:3f:34:
         b7:bd:38:b5:d7:7d:39:22:95:35:10:74:5b:29:34:ce:d4:27:
         42:43:ec:cb:0d:83:da:49:51:87:12:7a:dd:6f:5e:0a:54:e7:
         bb:5c:b6:cd:d1:8e:bf:db:37:4c:d4:42:13:a5:7c:8c:29:da:
         97:51:9f:f2:53:52:eb:65:53:5f:18:00:d1:47:fa:6a:19:07:
         a7:57:2b:66:34:06:27:2a:6f:29:4b:71:35:40:82:c1:9d:69:
         78:bb:2f:0c:d6:5a:79:80:4f:ff:5d:b1:b6:94:21:7e:83:4e:
         9e:7b:d4:ab:13:fb:f9:6c:1b:f2:59:7e:cf:bb:58:fb:14:18:
         1a:bf:26:7b:11:f2:ab:88:6b:66:5d:58:01:f9:08:4d:a5:6b:
         23:92:87:56:7f:33:a9:6e:f6:eb:cb:56:0d:d9:77:4c:17:ba:
         09:1a:6d:3d:64:54:0e:6d:31:9b:10:42:f3:96:01:ad:59:8e:
         2c:c0:c9:5d:df:84:11:5a:ed:1c:93:73:58:e3:4d:ff:17:bc:
         71:f6:38:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:40 2024 by rpki-client on console-fra.rpki-client.org