Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316331653a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a316331653a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          J8JnOQ1mLOgb6TkSdgGgQLy601Ek8srDv3Ia8/Ds+yU=
Subject key identifier:   E7:15:0C:6A:2C:7D:8D:85:87:68:91:90:69:8F:D5:B3:12:20:F6:1D
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       5307F863756B7C1396D7DC91311B49549A20C66A
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316331653a3a2f34382d3438203d3e203532303235.roa
Signing time:             Sun 26 Nov 2023 20:14:50 +0000
ROA not before:           Sun 26 Nov 2023 20:09:50 +0000
ROA not after:            Sun 24 Nov 2024 20:14:50 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1c1e::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:07:f8:63:75:6b:7c:13:96:d7:dc:91:31:1b:49:54:9a:20:c6:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Nov 26 20:09:50 2023 GMT
            Not After : Nov 24 20:14:50 2024 GMT
        Subject: CN=E7150C6A2C7D8D8587689190698FD5B31220F61D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:04:fa:52:65:64:bd:2a:5c:39:fa:3d:b0:9b:
                    6c:ae:3c:a6:28:83:7b:d7:21:eb:f2:e6:37:b3:94:
                    07:68:3f:6c:1a:33:f0:70:98:50:06:7b:21:8e:1d:
                    2d:ac:b2:ba:39:02:12:ad:3a:79:57:be:b9:6a:f9:
                    89:2d:d5:80:43:76:74:8e:cb:4a:38:95:ce:0b:57:
                    e0:42:f8:8a:61:64:dc:11:58:91:67:0b:22:46:82:
                    7c:53:83:c9:ee:42:84:ef:3e:1c:51:fe:49:8c:96:
                    16:ca:83:31:52:0c:4c:5a:5e:00:40:fc:3b:98:ec:
                    13:b6:22:c6:58:dc:c1:b4:99:0b:b2:ea:4b:78:4b:
                    c6:bc:64:13:60:1d:6f:3c:05:0a:5f:b4:8d:09:09:
                    94:96:7f:75:13:1d:80:e1:8c:5b:4d:28:78:2d:07:
                    fa:d5:74:eb:62:34:52:51:2e:64:1d:3c:96:21:a2:
                    05:a5:8c:41:ee:29:71:b3:93:c8:2f:eb:09:fe:94:
                    db:66:26:6e:68:51:ff:27:9b:21:0f:12:b7:b5:4f:
                    14:a8:da:7b:f4:78:a6:cd:94:d7:c9:83:8f:28:13:
                    c6:0c:b4:2a:06:74:fd:51:66:8a:c2:2b:ae:cc:91:
                    46:7b:ab:e3:40:a4:2f:1e:a4:5d:9d:6a:28:48:6c:
                    2b:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:15:0C:6A:2C:7D:8D:85:87:68:91:90:69:8F:D5:B3:12:20:F6:1D
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316331653a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1c1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         20:a7:77:95:0c:38:0a:e7:72:8c:04:8f:bf:b6:b8:a0:49:ca:
         5a:65:c4:60:e5:e3:16:5b:6d:4e:4d:f1:cb:8c:78:d7:91:b6:
         c6:1e:64:08:e2:2b:ea:6d:f0:fe:91:a7:32:0b:25:46:ab:67:
         b7:94:be:59:a0:c6:62:3a:59:c2:04:66:d5:6a:74:c4:c5:2f:
         b4:2c:b6:1a:24:3a:02:0c:35:83:2c:34:7f:83:ad:e1:f7:73:
         00:28:c5:85:8e:ec:0e:66:47:f2:97:16:e3:c5:5e:e9:d7:85:
         ae:18:63:4f:38:0f:b5:bc:74:72:8c:02:cc:2d:87:c1:80:6a:
         a9:f7:55:67:a4:d1:b9:6a:43:50:71:70:ea:95:9c:7e:07:13:
         1d:1b:55:5b:80:dc:5f:4c:a5:10:63:52:d0:f8:bd:5f:69:53:
         bb:cc:05:87:5e:70:05:3b:e3:c6:a5:ab:04:21:e5:e5:49:bf:
         96:ce:d0:45:ab:ac:f6:9d:c2:6e:1e:98:40:b4:8c:8b:c5:93:
         b6:24:55:c8:03:8a:5b:3f:ea:b1:5c:b2:ff:80:b1:55:da:c4:
         03:ce:2a:12:6c:85:5a:3a:8d:75:12:f9:c0:13:49:87:e4:5f:
         a2:a8:52:8e:a0:4d:df:ca:83:ad:fd:2e:8c:20:26:92:a6:2f:
         63:78:6e:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:41 2024 by rpki-client on console-fra.rpki-client.org