Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          ML5EyAR9bMeMuOBmOQFBGFlkFqPpkd3yXXFTcz0CvOo=
Subject key identifier:   00:EA:6C:03:89:ED:A6:C0:1D:25:88:15:43:19:9B:C1:92:26:A2:D3
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       53A798456832017464A50B4CA9AD75682CADF27F
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Wed 05 Feb 2025 15:39:04 +0000
ROA not before:           Wed 05 Feb 2025 15:34:04 +0000
ROA not after:            Wed 04 Feb 2026 15:39:04 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:2126::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 03 Apr 2025 21:50:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:a7:98:45:68:32:01:74:64:a5:0b:4c:a9:ad:75:68:2c:ad:f2:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Feb  5 15:34:04 2025 GMT
            Not After : Feb  4 15:39:04 2026 GMT
        Subject: CN=00EA6C0389EDA6C01D25881543199BC19226A2D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:3f:87:98:ff:bf:3e:f8:ca:83:3d:8b:a5:8c:
                    3d:0a:9d:d5:9b:6c:b2:12:d5:62:76:88:03:ed:fa:
                    c1:8c:33:6a:5c:c0:e9:84:67:89:03:be:d4:56:a3:
                    d5:fa:2f:c5:77:7e:15:4e:01:d6:8c:e7:90:7e:b5:
                    b4:a4:e6:2e:e0:73:78:bf:9d:28:0d:5f:be:6e:81:
                    52:eb:61:06:35:01:14:73:d6:78:a3:53:5b:75:e1:
                    3d:29:71:08:8f:a9:56:56:12:39:d1:18:8d:c1:01:
                    13:0e:71:36:1c:25:2a:de:45:71:4a:06:ff:2c:fe:
                    4e:b6:93:76:69:2b:e2:0e:fa:21:29:03:ae:76:15:
                    f7:70:f9:f1:e2:50:f6:fc:8f:8a:d2:de:28:2c:1d:
                    78:a2:81:1b:28:fa:fe:85:00:3a:99:34:5a:e8:c1:
                    cd:ab:ec:a7:20:85:b3:c9:28:88:7c:b8:40:74:48:
                    23:63:c5:46:78:1a:2b:e9:f3:0d:6b:58:31:90:e2:
                    be:63:02:1a:b2:11:81:2c:fa:56:b1:c8:61:96:a4:
                    25:61:1c:ca:31:9f:9d:95:c2:e6:25:a4:a5:4f:41:
                    8a:db:ab:3c:ac:e9:7b:ab:61:fa:ef:ff:4d:0a:66:
                    22:e0:79:47:0f:a1:d6:e9:2b:2e:94:d8:d6:e0:07:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:EA:6C:03:89:ED:A6:C0:1D:25:88:15:43:19:9B:C1:92:26:A2:D3
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323132363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:2126::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:d0:9f:d8:37:1d:cc:a0:95:96:30:b3:f0:d2:7a:59:39:6d:
         c6:bb:4a:f4:22:43:c3:8f:59:5f:e5:8f:f1:7a:25:21:32:4b:
         47:91:a0:8b:e5:e6:f2:96:a1:a1:aa:1b:a4:58:28:89:50:b5:
         36:b2:fb:81:ef:d7:a3:f0:ad:5b:bd:df:3d:1b:15:e8:b2:51:
         98:72:c1:14:c8:ba:7d:8a:ae:d4:54:8d:7d:aa:bd:de:16:92:
         fe:8d:83:2c:08:b5:b1:02:b8:b7:e9:cd:9d:a6:5d:a5:28:1e:
         bb:b2:08:1b:2b:2d:e3:39:e8:af:12:33:75:fa:05:4e:98:8e:
         8c:be:42:44:d0:09:28:2a:1f:69:60:05:17:40:72:57:74:a5:
         eb:6f:ef:ba:88:3d:54:4c:b8:74:46:b5:e4:b3:d2:a4:71:4b:
         51:e3:bc:6a:d6:6b:fc:67:75:7c:42:83:53:b9:5b:e9:d6:a5:
         a8:3e:25:90:6e:ab:75:7e:b9:70:3e:8a:9c:11:41:84:8b:73:
         28:c3:2c:5d:d5:9c:9d:68:56:a5:e9:61:d3:fd:a6:dd:07:c7:
         d7:31:e0:d4:54:16:cc:88:e9:06:a8:53:30:72:16:1f:5d:d9:
         62:38:a4:06:23:da:ba:a8:bd:12:86:a6:44:2d:0d:bc:41:af:
         b0:58:7b:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:22:52 2025 by rpki-client