Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323032353a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323032353a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          ZLYNtT/pQTw9B0CgRXBjnNX9DuLTXS/+5QaHWV7pEmo=
Subject key identifier:   19:C2:54:BC:AE:DA:01:FE:32:40:C1:C2:74:81:64:29:0C:59:92:8E
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6648806FEE06BFE510A47C966DEF87DD51F2F4BB
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323032353a3a2f34382d313238203d3e203532303235.roa
Signing time:             Sat 03 Aug 2024 13:24:06 +0000
ROA not before:           Sat 03 Aug 2024 13:19:06 +0000
ROA not after:            Sat 02 Aug 2025 13:24:06 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2025::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:48:80:6f:ee:06:bf:e5:10:a4:7c:96:6d:ef:87:dd:51:f2:f4:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug  3 13:19:06 2024 GMT
            Not After : Aug  2 13:24:06 2025 GMT
        Subject: CN=19C254BCAEDA01FE3240C1C2748164290C59928E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1f:9a:e0:9e:ed:22:b3:ee:6a:cd:5c:ac:f0:
                    d8:3e:89:9e:df:30:bd:cd:6f:8e:c4:ce:54:d4:75:
                    ba:a9:1c:2a:d6:7c:74:b1:26:62:06:d9:07:e8:26:
                    42:d8:75:44:d7:f2:6c:ec:54:a8:a7:93:3a:2e:43:
                    ef:f4:c3:54:95:03:c1:68:73:93:26:0f:d7:6c:63:
                    e2:36:fb:58:c2:e1:2d:9f:5c:2b:d5:f9:e1:17:cf:
                    df:e4:3d:15:03:d6:b7:5c:21:03:07:7d:45:b4:ea:
                    9b:c8:f7:37:67:1d:d0:26:a8:dc:17:93:bf:d1:b8:
                    bb:49:26:98:d9:3a:7b:04:f2:0c:aa:a8:0b:f4:df:
                    f3:24:50:35:f5:62:ff:e7:57:20:fe:94:9d:04:f5:
                    56:bf:86:13:0b:57:86:67:e6:e4:c5:66:f2:d0:3f:
                    f6:4c:c8:fb:8c:69:4a:95:54:f7:37:02:03:40:0f:
                    68:26:f2:24:9f:8d:70:8a:1f:b5:f9:95:fa:67:f1:
                    00:37:b8:d1:2a:52:e3:5e:cb:cd:76:3e:19:79:a8:
                    c6:9b:c9:f6:cc:f8:6c:cf:e7:bd:a1:e2:2a:21:4c:
                    95:66:e2:94:77:bf:89:8f:eb:55:22:c2:92:20:c6:
                    7a:67:fd:00:84:4d:5b:15:c2:01:24:6d:6d:71:d1:
                    97:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C2:54:BC:AE:DA:01:FE:32:40:C1:C2:74:81:64:29:0C:59:92:8E
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323032353a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2025::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:d2:5e:85:ad:af:4c:24:c4:0b:3e:8d:6b:a3:19:6c:66:fa:
         74:51:ff:8e:d2:fb:a0:14:3c:c3:20:fb:4e:cf:7c:a3:7a:85:
         4f:70:90:dc:6b:4e:e8:6b:03:58:16:7b:97:1b:91:18:ab:20:
         86:6a:3a:23:72:c1:18:6e:aa:3c:bf:8c:3a:7b:ac:4a:0a:8f:
         78:98:c4:ec:20:81:e7:58:7b:18:21:bf:06:8b:e8:49:5f:af:
         d2:e2:12:37:ab:fe:12:a0:26:f4:87:72:f2:4d:6f:d7:d6:57:
         fd:cf:23:fd:06:48:de:a9:59:cf:64:71:0e:db:2e:bd:15:c0:
         cc:c9:78:2a:74:4b:19:51:f5:11:0d:0c:fd:5d:a1:b7:7c:64:
         80:43:e1:ee:b7:fe:87:4e:57:e9:a8:6b:8c:a1:bd:9e:8a:56:
         e1:67:12:e6:aa:83:90:41:24:6a:cb:c3:cf:99:f4:28:2b:d1:
         62:15:38:bf:19:ee:d3:5a:d6:fd:25:4b:a8:28:ec:5c:17:30:
         71:25:7a:c6:9d:54:20:a5:e0:34:81:22:6f:5d:5e:44:2d:bc:
         8e:2a:5b:6a:72:77:73:e0:49:e7:43:8a:45:2a:fc:98:c7:82:
         62:bf:09:60:a0:2c:ae:05:65:5d:5e:fb:32:a6:40:df:7c:b5:
         2e:69:c9:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:48 2024 by rpki-client on console-fra.rpki-client.org