Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          GR77oC6ghG897fFnNZ0AxgJG28zeq2foK8V12MPvEfs=
Subject key identifier:   E8:93:69:6C:4D:3B:8D:2E:F3:45:18:87:2E:79:7F:62:8A:48:0B:0C
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       678433AB76A6F9F1CA434465BBB92F4431E9C9A2
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:56:42 +0000
ROA not before:           Thu 23 May 2024 12:51:42 +0000
ROA not after:            Thu 22 May 2025 12:56:42 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1a1d::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 19:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:84:33:ab:76:a6:f9:f1:ca:43:44:65:bb:b9:2f:44:31:e9:c9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:51:42 2024 GMT
            Not After : May 22 12:56:42 2025 GMT
        Subject: CN=E893696C4D3B8D2EF34518872E797F628A480B0C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6a:4b:e1:b1:76:b7:12:7b:69:61:24:be:d6:
                    2f:66:02:b8:60:06:ca:d7:4d:08:ea:46:18:12:c7:
                    0d:2a:fa:ca:ee:ac:82:e4:e2:af:3d:8c:f1:91:65:
                    d7:ad:bd:5e:f8:a4:6f:ab:68:2f:d6:c4:c3:65:05:
                    00:3f:ca:fd:16:ed:8b:43:c1:7d:17:c6:e8:11:dc:
                    ca:76:29:8e:df:00:35:6a:50:7d:ae:6c:e1:1e:5b:
                    79:f4:68:de:3f:6b:17:47:0d:77:4a:37:78:48:56:
                    20:be:3b:b4:95:10:0b:49:ae:e4:f2:1e:be:84:fc:
                    6a:f7:09:a4:3e:34:a1:24:5c:c4:86:ad:4f:50:b0:
                    2a:e3:9e:1a:1b:f4:01:e8:54:1e:d5:6b:47:5c:d1:
                    e6:74:72:e7:c1:81:d1:1c:f9:93:a9:d0:31:2d:81:
                    37:91:21:6d:07:ef:d7:6c:e9:41:3d:79:e8:89:30:
                    cf:8b:44:40:f3:58:56:b5:4f:10:01:f9:31:e2:49:
                    15:6b:5f:df:77:aa:d8:b1:09:82:64:7e:f6:34:2e:
                    4c:43:15:33:3e:a3:93:08:53:7b:28:ae:c2:e5:bc:
                    e3:cc:4e:05:ae:a9:ea:c1:fc:22:c6:e2:3d:2f:8b:
                    86:fa:08:13:43:39:dd:2d:2b:db:23:3e:bd:7d:17:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:93:69:6C:4D:3B:8D:2E:F3:45:18:87:2E:79:7F:62:8A:48:0B:0C
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316131643a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1a1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         a0:49:ab:3c:ab:d1:32:d2:62:61:fa:19:97:76:9c:e4:78:f8:
         f6:95:81:5b:e0:35:4d:89:9d:f8:bd:64:05:8f:ed:0d:e8:9c:
         d7:e1:be:37:c3:a8:8d:ac:f1:00:a9:c5:bc:c8:7d:98:1e:79:
         7e:46:89:f4:96:f6:22:92:5e:56:bb:4d:b1:0a:70:de:76:90:
         4e:e5:1e:11:ab:a0:85:c3:65:f2:73:c4:b0:31:3b:f2:f2:2a:
         60:ad:88:2c:ce:f4:29:cd:49:25:c5:ab:b4:59:50:4c:12:6e:
         e5:12:18:16:92:8e:d2:14:0d:0a:15:49:91:f2:4a:f5:d9:78:
         f8:ad:00:a1:f2:1e:7a:a3:d0:ff:17:ed:b2:6f:a4:de:6d:a8:
         75:a9:9d:86:65:4d:b1:43:b6:4f:4b:b6:83:85:6a:7b:93:3c:
         81:93:9f:1e:d4:6f:5a:b9:0a:1c:ef:12:cb:01:63:68:c3:2f:
         be:af:69:83:48:eb:bc:b3:c1:5b:5b:c4:95:a0:ec:af:f6:48:
         35:54:b6:73:6e:7b:69:2c:99:8e:34:a2:e8:13:9c:22:fa:58:
         95:ec:48:67:33:ce:7e:79:2a:e5:ab:2b:f8:d3:84:29:21:c3:
         bd:3d:73:66:e6:d3:cf:e9:4c:c8:56:d9:96:83:8d:f2:1c:11:
         07:d8:69:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:58:09 2024 by rpki-client on console-ams.rpki-client.org