Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323132373a3a2f34382d313238203d3e203532303235.roa
File: 326130353a646663343a323132373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier: g9hjy2c3LtN40F4wkmD95c20kr/W5KkF7bTW0NQ7hEw=
Subject key identifier: D6:CE:04:63:07:17:01:8B:F4:F9:C1:25:85:B7:37:74:85:18:63:4B
Certificate issuer: /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial: 22B2BD83DEA6F9162A86043844102B6590DEC61F
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323132373a3a2f34382d313238203d3e203532303235.roa
Signing time: Thu 06 Feb 2025 05:21:15 +0000
ROA not before: Thu 06 Feb 2025 05:16:15 +0000
ROA not after: Thu 05 Feb 2026 05:21:15 +0000
asID: 52025
IP address blocks: 2a05:dfc4:2127::/48 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:b2:bd:83:de:a6:f9:16:2a:86:04:38:44:10:2b:65:90:de:c6:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Validity
Not Before: Feb 6 05:16:15 2025 GMT
Not After : Feb 5 05:21:15 2026 GMT
Subject: CN=D6CE04630717018BF4F9C12585B737748518634B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:b3:65:f7:68:e9:ae:4b:a6:a5:fc:77:40:f8:
15:36:3a:92:c7:c6:c7:08:01:44:68:4b:d2:3a:8d:
7f:4b:b3:c3:51:8d:ef:10:2f:be:48:42:7e:b0:ac:
83:39:6e:40:f2:c2:be:29:85:b1:6a:42:73:f8:19:
7d:98:a7:78:b7:fe:50:16:8e:5a:3c:7a:31:d1:fd:
41:6f:a7:79:35:98:79:bc:ac:c6:31:41:38:64:13:
37:9e:c9:a6:46:c2:99:e5:55:c0:96:83:4d:ff:14:
4a:9e:25:f7:2c:de:8f:e0:15:56:f2:e9:9e:10:71:
3b:be:f7:ee:8b:6a:3c:4d:25:51:43:04:51:15:e1:
97:7b:06:20:25:3d:fd:9c:27:10:fa:68:39:af:1b:
5b:09:c7:0f:97:14:61:17:ab:10:ea:6b:62:41:97:
8f:d8:c6:98:32:87:4a:e8:95:1b:fe:12:b9:0e:a5:
ce:62:9a:f1:ba:0f:4d:9f:5b:1e:d8:d4:cc:f1:0c:
1f:50:74:ca:b3:62:03:f8:96:31:50:6e:db:14:7a:
e0:aa:bc:83:79:5e:56:f4:2a:a8:f8:c3:03:c6:61:
42:c8:d4:b0:9d:4f:b7:f8:64:4a:37:ed:20:66:2e:
42:68:0c:69:b7:44:34:ac:48:ab:9e:ef:b7:a5:39:
2c:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:CE:04:63:07:17:01:8B:F4:F9:C1:25:85:B7:37:74:85:18:63:4B
X509v3 Authority Key Identifier:
keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323132373a3a2f34382d313238203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:2127::/48
Signature Algorithm: sha256WithRSAEncryption
2e:89:e8:e1:67:89:10:b1:7c:6e:8a:b7:55:f1:ec:ed:a5:ce:
f8:29:75:08:3e:9d:b1:c1:d4:84:a6:41:fd:13:d9:d8:63:01:
b2:9e:32:14:6a:11:cc:ac:70:f3:6a:d9:7f:16:25:13:ad:4d:
59:a8:04:f5:0e:5a:7c:95:5d:21:fd:31:33:dd:bd:dd:9a:e6:
39:1e:a5:bb:dd:c0:5d:b2:af:47:f4:bb:2d:79:eb:ce:a5:c2:
8a:45:95:0b:26:40:29:7a:d4:52:7d:ed:35:f9:21:5b:51:07:
31:01:67:65:01:be:a7:74:b6:3f:e1:b1:88:e9:37:77:88:22:
02:3f:f4:c8:aa:bf:6b:a1:ef:ff:fa:48:1c:7b:31:29:d1:1c:
68:0c:d3:bc:dc:55:89:9f:83:c2:50:0c:b7:80:ca:82:99:f1:
68:64:f1:ff:00:db:f6:9e:1a:48:ce:9d:45:3d:f6:ab:3d:20:
d4:90:17:40:6c:65:06:48:33:d9:ea:db:d5:36:bb:d0:40:18:
b0:28:5f:a7:b7:ea:c6:58:68:3a:a1:af:a7:27:fb:65:a2:78:
7c:cf:88:19:68:df:ef:24:4e:1e:e1:32:9c:77:b2:13:c3:5a:
e5:4d:1b:50:2e:a3:c2:bf:f2:64:36:4a:29:00:42:42:cc:70:
f8:ec:84:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:22:06 2025 by rpki-client