Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          etBzLDAF2dTxB+D0bCcunM5bpQTOtzmXLCmMIiw6gqI=
Subject key identifier:   57:64:75:D8:F6:4E:24:1E:72:3C:4B:25:E2:93:05:DC:14:D3:7E:55
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       64685211A9DC480B548A8BD32D65CE0A4AC7474A
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:56:47 +0000
ROA not before:           Thu 23 May 2024 12:51:47 +0000
ROA not after:            Thu 22 May 2025 12:56:47 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1b1f::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 06:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:68:52:11:a9:dc:48:0b:54:8a:8b:d3:2d:65:ce:0a:4a:c7:47:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:51:47 2024 GMT
            Not After : May 22 12:56:47 2025 GMT
        Subject: CN=576475D8F64E241E723C4B25E29305DC14D37E55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:b9:e5:d5:e6:75:1f:48:82:86:1c:d0:61:
                    15:1a:b2:03:73:1e:f5:00:4d:65:b1:95:10:c4:8d:
                    d5:ad:d8:e4:77:6e:94:e4:cb:3d:92:a9:53:d1:71:
                    16:6c:6e:08:69:47:fa:b0:c6:2c:2f:eb:d6:50:e0:
                    1f:a8:5c:c6:c1:66:da:71:14:6d:c2:74:cd:95:46:
                    d5:cf:44:45:03:1b:22:30:38:95:5c:49:b5:df:50:
                    d2:d7:45:46:cc:fa:e4:2a:09:cc:49:64:21:9e:72:
                    84:03:90:ef:1a:d8:08:30:80:40:9e:b8:e2:52:68:
                    7a:46:ad:18:65:f3:2a:ed:57:7a:22:08:69:a2:e8:
                    c0:b0:60:6a:53:ee:de:48:e6:fd:a2:b1:73:f4:03:
                    e8:2c:4b:59:d1:47:f3:d2:78:2b:68:1e:7d:28:b3:
                    79:79:6a:ab:e2:fc:45:a8:85:61:26:47:78:d4:28:
                    86:d6:6f:fb:7a:22:24:51:6d:be:7e:22:e9:98:c5:
                    c7:5c:23:f7:d7:c9:62:b5:d2:71:a8:5f:a7:62:37:
                    bb:e9:e7:e2:47:4e:ec:9c:c3:e6:8d:20:fc:6d:0b:
                    0f:4d:ec:3f:d9:11:27:0e:4e:f1:a7:a8:c0:53:e4:
                    c2:82:2a:ec:bb:7c:5b:18:4e:05:68:94:57:dd:9e:
                    c1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:64:75:D8:F6:4E:24:1E:72:3C:4B:25:E2:93:05:DC:14:D3:7E:55
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316231663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1b1f::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:54:15:5a:90:e0:fc:9f:08:e0:e0:a0:9e:5f:77:eb:9c:a0:
         3a:04:79:5d:13:69:2e:c0:45:f7:97:b3:39:a2:b9:94:8c:33:
         e1:d2:fb:bb:f9:6c:2d:23:ca:49:2c:d6:d0:25:64:a9:43:d8:
         be:da:b9:fc:f9:91:f4:54:48:00:e8:cb:a2:d3:21:c0:b2:28:
         19:fd:b4:66:60:a1:30:d2:eb:83:fd:8a:ba:23:81:6e:ea:0d:
         00:d7:d8:d7:a1:a3:df:42:7f:ee:c2:e5:25:09:be:47:fb:bb:
         24:cf:f5:08:43:e2:76:89:04:4c:d4:c1:d3:5f:44:15:40:ce:
         bc:db:e2:b5:18:c7:71:50:c6:4c:16:a4:79:aa:b8:2d:51:b7:
         e9:06:4d:9f:c4:72:c3:53:fd:bd:07:d9:93:cb:86:b5:fc:9c:
         db:ef:4a:63:a0:e7:bc:1c:a6:d5:66:a5:f1:76:a8:5d:1a:64:
         33:23:65:31:ff:00:34:66:ca:81:63:4a:19:cc:9c:25:c1:37:
         5a:78:30:bf:91:80:56:ed:4c:d7:36:e3:a9:d1:94:bf:aa:76:
         d0:96:3b:0a:ad:58:87:3e:ee:91:36:a5:cd:f9:37:3e:d6:54:
         a4:ac:fc:d8:c8:9b:31:c4:df:be:70:fc:fd:cd:ea:c5:1d:c4:
         97:11:d8:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:17:43 2024 by rpki-client on console-fra.rpki-client.org