Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316432323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316432323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          jlcHTYjdeav9QqkbEU7Mcea6vsMv+gstVo75DLPvQGc=
Subject key identifier:   D4:53:24:76:5C:39:B4:87:BC:EE:0E:74:A0:38:E7:83:CF:06:18:66
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2B18C56AFD0BB8BFE84C9A6EB3F49868FB261344
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316432323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:57:36 +0000
ROA not before:           Thu 23 May 2024 12:52:36 +0000
ROA not after:            Thu 22 May 2025 12:57:36 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1d22::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:18:c5:6a:fd:0b:b8:bf:e8:4c:9a:6e:b3:f4:98:68:fb:26:13:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:52:36 2024 GMT
            Not After : May 22 12:57:36 2025 GMT
        Subject: CN=D45324765C39B487BCEE0E74A038E783CF061866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:94:16:1b:96:4f:1d:27:9e:53:05:72:61:dd:
                    ff:a7:47:ab:a3:0a:3f:87:01:7b:2b:f8:dd:3d:66:
                    3d:74:96:56:bd:b0:6b:00:f8:85:3d:a4:0d:b6:21:
                    2a:00:78:65:a0:c3:68:88:55:f2:0d:36:9e:14:dc:
                    6f:8f:27:be:08:e6:68:23:24:9f:db:ac:01:d4:06:
                    8d:3d:da:5e:a1:93:86:06:12:e8:0c:a0:0b:fc:15:
                    01:a2:1b:60:b4:4e:41:c4:8d:86:1d:81:2a:ed:0d:
                    cc:9b:2a:7d:04:81:74:0d:a5:21:19:af:28:fe:a6:
                    71:d3:71:2e:72:d9:46:0b:e7:11:b1:97:43:9c:6f:
                    50:da:67:89:07:06:ed:7b:89:36:f6:6d:e4:8f:dd:
                    5b:a8:4a:ff:e6:f3:2c:59:36:fe:73:4e:3c:4e:c2:
                    db:0e:7c:88:5f:4e:f2:47:e5:5c:79:8f:32:11:b3:
                    b8:21:1f:63:ec:47:5c:9b:a5:b7:c9:f9:7c:b6:85:
                    c9:d8:3b:f3:2a:ce:f8:fa:c7:20:e2:cf:02:18:1d:
                    52:73:53:a3:cf:b8:de:4b:ee:e7:70:d2:60:d7:53:
                    54:e4:5f:13:58:a4:60:86:82:7e:e8:c3:4b:52:df:
                    67:67:d4:ca:90:5e:f4:3d:8a:79:e9:ae:2b:3a:3d:
                    ca:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:53:24:76:5C:39:B4:87:BC:EE:0E:74:A0:38:E7:83:CF:06:18:66
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316432323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1d22::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:06:87:3d:64:49:95:d8:37:ac:3c:a3:9b:2b:97:b0:ce:8b:
         8d:bc:87:45:ff:0e:c0:de:a0:8d:73:0b:ac:93:c2:b9:d1:4b:
         f6:c8:68:20:c5:2f:b8:57:05:a7:c0:aa:42:9a:61:b1:46:44:
         f1:b5:35:ef:d9:ca:64:30:26:5f:37:42:da:37:0c:81:7b:ed:
         0c:28:ac:d6:f4:6b:a5:0c:aa:af:aa:5f:04:5f:d2:c5:66:e2:
         bc:8a:32:9c:29:1d:a9:44:80:3a:1c:30:8a:48:7e:c6:fc:98:
         d5:04:af:9d:cb:81:6f:cb:0f:80:ea:8d:d5:5c:24:a9:a9:9a:
         57:d2:96:0f:37:57:b6:d8:5b:f1:c6:7e:86:32:0a:ce:ba:e7:
         55:9b:e7:75:38:5b:f3:20:94:14:c8:a8:65:90:fd:3b:76:0f:
         bd:f9:44:b1:82:09:93:fb:0f:bd:c1:eb:af:65:e8:b0:7e:33:
         d4:05:0f:1b:57:ae:37:c9:11:7a:cd:16:e4:a9:f9:35:bd:83:
         51:01:8d:37:ed:b5:f7:b9:5d:ee:d4:f8:09:75:0e:fc:bc:da:
         5e:e8:31:db:43:aa:44:dc:08:8e:15:29:50:bd:ed:13:79:89:
         53:b1:15:45:4b:88:36:b6:10:8d:c7:54:f7:37:af:9a:a7:68:
         9a:31:ed:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:32 2024 by rpki-client on console-ams.rpki-client.org