Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          q0ZU15pqMCV7y6Pl/kXenEluVv4EO3325PJBii1W+Ak=
Subject key identifier:   C4:08:D4:B0:BA:4A:95:73:C7:1E:F2:72:08:16:B1:2C:45:37:74:84
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2D1C8D770707D24EC53A23E120159C15A3318A86
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:58:14 +0000
ROA not before:           Thu 23 May 2024 12:53:14 +0000
ROA not after:            Thu 22 May 2025 12:58:14 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1e20::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 06:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:1c:8d:77:07:07:d2:4e:c5:3a:23:e1:20:15:9c:15:a3:31:8a:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:53:14 2024 GMT
            Not After : May 22 12:58:14 2025 GMT
        Subject: CN=C408D4B0BA4A9573C71EF2720816B12C45377484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:87:dc:99:28:26:a7:b4:b7:26:12:ec:7c:6c:
                    23:3f:bf:12:8f:76:37:6f:fb:a2:a0:48:68:21:7d:
                    94:3f:d5:93:be:02:93:96:65:75:c8:c7:54:c7:e4:
                    f6:5c:6d:05:e8:ab:8f:97:42:8a:10:c9:7e:4a:cd:
                    94:83:5b:f4:21:89:8a:84:15:f6:12:f8:1b:4f:b3:
                    af:89:dd:03:f2:9a:40:b7:57:fa:7b:1f:b5:c3:70:
                    ef:66:c7:2e:55:6a:36:72:4d:f6:d0:9a:00:5c:76:
                    c9:18:d5:88:cc:7b:e5:7f:c1:d1:99:4f:e3:1b:e5:
                    2b:43:bc:0e:55:91:a2:9f:b1:8b:87:19:88:3c:8d:
                    b6:63:e1:e9:79:7d:75:3f:65:02:e5:b2:3f:b7:56:
                    f6:d4:a7:fc:4e:10:1f:c5:ce:cb:6e:3e:71:6e:23:
                    95:66:30:49:6d:82:dd:65:6d:bc:b4:64:8a:1d:6e:
                    c6:31:f9:a5:22:2a:df:ec:e6:2c:d8:2c:ae:26:2a:
                    f7:47:3b:56:f8:85:2d:ac:c2:ed:49:c1:b6:62:3f:
                    c6:7a:80:d9:dd:d5:19:e4:ab:52:01:fe:16:a0:3b:
                    37:d8:3b:61:2e:6f:c2:12:5f:54:4d:4e:04:17:07:
                    09:f0:e9:6d:f0:ee:ca:87:93:e3:b8:8b:bb:3e:f4:
                    65:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:08:D4:B0:BA:4A:95:73:C7:1E:F2:72:08:16:B1:2C:45:37:74:84
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a316532303a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1e20::/48

    Signature Algorithm: sha256WithRSAEncryption
         ca:f1:a7:ec:ad:03:c9:41:63:eb:85:cd:ae:ca:12:9c:b7:be:
         4f:71:8d:07:b7:8b:a2:c3:df:c6:04:1d:c3:4c:30:26:44:c3:
         53:24:83:31:f6:04:f3:c5:c8:bf:80:73:14:09:ec:52:70:44:
         ef:a5:54:fe:82:13:16:0b:64:a6:45:35:2e:b4:e9:11:d8:5d:
         78:82:18:a4:25:78:ac:0a:1d:5c:6b:19:31:0f:14:00:22:b8:
         2e:1e:56:ea:4d:c1:6d:9a:d3:26:51:06:61:ad:61:eb:41:77:
         38:e3:6d:24:5e:17:b5:8f:91:93:12:eb:f2:a7:b9:c5:19:ef:
         5f:5a:21:a7:5c:e6:85:30:74:57:79:b9:f4:e6:46:84:32:48:
         a7:2b:fc:f9:19:2f:53:80:8b:36:b8:68:31:dc:97:49:42:eb:
         a9:1c:fa:14:c9:81:ac:17:68:63:58:15:16:57:dd:a8:54:3b:
         85:d2:51:52:c5:75:ba:38:95:01:ab:be:20:b7:46:b8:74:04:
         ef:53:8b:22:3a:dd:56:fe:19:98:92:eb:20:42:3d:e3:13:76:
         05:39:e8:b1:d6:82:2c:e0:a9:e8:70:b2:a5:95:d3:8e:27:14:
         36:07:ea:1c:0e:42:75:2e:75:83:7a:ae:fe:e7:48:f0:5b:5a:
         4b:13:a0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:17:43 2024 by rpki-client on console-fra.rpki-client.org