Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316131643a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a316131643a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          Qy/1pwDeR2Ad1AhFySdok8KvRkCHBEzTbkJI5poOOBI=
Subject key identifier:   89:82:12:34:08:8E:D4:63:ED:90:01:25:B5:7B:14:5D:E0:F4:23:00
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2752A86CDD74463E1E6F02B5CCDC0A8F9E47D38E
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316131643a3a2f34382d3438203d3e203532303235.roa
Signing time:             Sun 26 Nov 2023 20:14:51 +0000
ROA not before:           Sun 26 Nov 2023 20:09:51 +0000
ROA not after:            Sun 24 Nov 2024 20:14:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1a1d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:52:a8:6c:dd:74:46:3e:1e:6f:02:b5:cc:dc:0a:8f:9e:47:d3:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Nov 26 20:09:51 2023 GMT
            Not After : Nov 24 20:14:51 2024 GMT
        Subject: CN=89821234088ED463ED900125B57B145DE0F42300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:25:97:cf:33:8a:2b:bf:15:6d:da:58:11:cc:
                    20:76:7f:2f:ab:28:7e:d5:b7:2f:79:39:66:bb:91:
                    8d:57:35:40:5f:ea:8f:c6:cf:d8:79:e1:e0:ef:b3:
                    df:6d:aa:df:38:15:88:d5:cb:64:cf:e7:6f:d3:76:
                    60:8b:a8:38:ab:7c:18:ef:04:28:fc:c5:1f:6c:53:
                    af:ab:ff:2d:4f:7e:13:bc:90:14:7c:bf:25:19:3c:
                    76:65:56:1e:7a:3b:e3:cd:07:91:f4:6d:86:63:48:
                    33:87:b6:4b:c5:7f:5b:98:ed:ca:4c:6e:64:e5:e7:
                    0c:89:53:6d:41:27:bb:83:8d:08:02:87:4b:9b:e8:
                    6c:bf:4c:33:91:25:b5:3b:b1:cb:2d:3a:60:c6:0c:
                    33:37:5d:a5:19:f5:ac:eb:0e:40:30:a3:f2:df:9b:
                    50:22:b9:d0:36:fd:b1:70:60:7b:98:2c:0d:d4:6d:
                    85:e9:4f:01:0a:4d:a8:26:b3:ec:f4:95:c1:dd:63:
                    fa:70:56:d4:b9:97:49:94:e3:39:75:bd:67:30:d4:
                    b4:13:58:c2:d9:00:c9:d9:c3:74:26:dc:2f:42:65:
                    77:07:f5:53:69:64:b2:1a:02:b1:b5:1c:24:97:ee:
                    fc:57:d1:2d:95:90:82:0c:d4:b1:42:e0:3e:8e:c9:
                    8d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:82:12:34:08:8E:D4:63:ED:90:01:25:B5:7B:14:5D:E0:F4:23:00
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316131643a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1a1d::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:c5:95:46:2e:36:9b:11:9a:57:44:07:96:ec:c1:26:70:5e:
         63:dc:7e:28:b1:19:dc:e0:a9:c8:d2:e4:7c:8b:2f:17:be:10:
         d6:68:b5:7b:ad:60:7e:16:cf:1c:53:ff:61:b6:d4:40:81:b6:
         b0:f2:6e:39:89:c5:ad:da:a6:94:f6:73:a9:4c:1d:fa:d1:72:
         25:e8:13:64:b9:47:a0:94:5b:ec:9b:1c:2e:71:af:a0:2f:93:
         ba:d0:db:1a:3d:9c:cc:ac:ac:51:44:3a:07:a6:d8:cb:d6:b4:
         75:da:0c:86:d9:a4:c9:5f:e1:67:a1:78:bc:fd:8b:5b:29:68:
         47:eb:72:58:2f:43:92:61:01:ca:93:8b:58:be:1b:4e:c1:7a:
         e0:bb:ea:fb:31:fd:8d:81:34:be:14:dd:d0:64:07:f3:1d:da:
         22:a8:05:b5:f3:2c:75:c0:e9:84:9f:27:f2:f8:ea:c1:ca:5f:
         3f:4a:bc:fb:9d:fe:ca:40:af:43:53:26:40:5a:45:29:4e:07:
         4a:8f:00:a7:8f:43:9f:0b:1a:e9:ff:f0:63:56:ce:8b:29:20:
         ec:28:c3:0a:b8:ca:60:11:6d:ee:f9:15:0b:eb:f2:79:fe:b5:
         5b:c5:6e:b3:b2:46:17:c9:4b:4c:69:90:71:e1:ed:b3:7e:8d:
         62:c9:c1:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:40 2024 by rpki-client on console-fra.rpki-client.org