Route Origin Authorization
$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323332643a3a2f34382d3438203d3e203532303235.roa
File: 326130353a646663343a323332643a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier: CScVoDBGFOYyqre7OAHGjRDHL+D80Qq57dhD+dL4aUk=
Subject key identifier: 29:79:F3:86:49:9C:9A:40:97:6F:94:FC:7E:AC:31:A4:2D:EF:B9:4A
Certificate issuer: /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial: 743A185863B4E1C9032E56B5674FC58D20FBEE68
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access: rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323332643a3a2f34382d3438203d3e203532303235.roa
Signing time: Thu 06 Mar 2025 08:05:00 +0000
ROA not before: Thu 06 Mar 2025 08:00:00 +0000
ROA not after: Thu 05 Mar 2026 08:05:00 +0000
asID: 52025
IP address blocks: 2a05:dfc4:232d::/48 maxlen: 48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:3a:18:58:63:b4:e1:c9:03:2e:56:b5:67:4f:c5:8d:20:fb:ee:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Validity
Not Before: Mar 6 08:00:00 2025 GMT
Not After : Mar 5 08:05:00 2026 GMT
Subject: CN=2979F386499C9A40976F94FC7EAC31A42DEFB94A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:cf:75:85:37:d9:2c:50:89:9b:5e:1c:27:ba:
ea:4a:66:f7:25:66:8b:6d:46:88:5b:7a:ff:80:bf:
64:53:95:0f:8f:35:d6:bd:2f:ea:2c:2d:1c:5a:40:
c4:3b:1b:18:71:35:74:f7:a6:df:da:c3:4e:6b:2b:
0d:dc:b9:10:ba:0f:dc:4b:3e:3e:7c:1a:07:fb:6f:
06:d6:fe:85:7d:9c:07:6a:4a:58:bd:4a:e8:6e:6b:
a3:eb:05:78:19:3f:14:ab:cd:d5:80:96:51:ca:df:
ef:38:70:e6:bf:a0:d3:ac:40:29:26:80:50:60:1b:
0e:01:01:4e:9d:07:8e:9e:8d:3c:13:cf:a5:11:d7:
d6:29:05:4f:0a:85:da:90:0f:2c:d6:7b:f6:06:72:
9d:52:d0:a9:57:0f:17:e9:1b:06:d9:1a:5a:11:a2:
01:79:30:14:e6:1b:72:1b:50:2e:03:49:ef:8d:d5:
71:04:67:4e:6a:0b:d6:25:c3:30:f9:7e:ff:0a:b1:
42:5e:5c:6c:ad:e8:a7:65:a6:d2:2a:80:79:b1:9b:
db:21:ab:7a:d5:47:98:d1:1a:e8:96:d3:c8:79:77:
cc:be:08:48:28:9e:6b:1a:db:59:fb:39:94:b7:f4:
27:7c:23:ac:27:1f:62:f0:5b:74:af:bb:d9:1d:10:
45:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:79:F3:86:49:9C:9A:40:97:6F:94:FC:7E:AC:31:A4:2D:EF:B9:4A
X509v3 Authority Key Identifier:
keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a323332643a3a2f34382d3438203d3e203532303235.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:dfc4:232d::/48
Signature Algorithm: sha256WithRSAEncryption
5c:9f:5c:ca:86:08:ba:8e:c1:a5:b8:6a:de:8d:92:97:67:76:
38:86:2c:39:9e:98:5c:70:e1:c8:94:90:29:e8:4a:1a:7c:ab:
d7:ad:11:57:84:17:6a:0a:9d:e9:33:2d:3c:e4:be:8f:c2:29:
ba:78:b0:cb:aa:e2:24:d3:de:f5:a8:7b:92:0c:9a:c9:09:16:
ee:2a:2e:5a:32:81:ec:54:7f:92:a7:61:86:30:29:5b:d0:fe:
c0:15:95:2f:44:34:a3:df:fa:dd:e3:fc:ea:a9:67:2b:b4:b0:
a6:5d:88:33:4c:bf:ef:ba:d2:e4:4e:26:f3:7c:39:79:13:ed:
d0:0e:20:b4:70:e0:95:7f:01:66:71:f7:14:f0:98:4f:cc:e5:
d6:8d:c6:b6:3c:11:dc:55:90:09:f7:6d:e4:11:c6:a7:6e:e1:
b7:fd:20:5f:94:8a:f6:5b:db:68:33:b9:10:87:87:09:94:ec:
ed:9f:23:02:79:4b:c5:7b:6d:04:c2:8a:cc:d1:b4:d0:66:4f:
80:b1:1e:ea:ea:2d:26:b1:f0:80:f4:86:1e:ba:d7:29:cf:b3:
da:e6:f3:8e:ba:54:fd:ce:6c:fe:b9:b1:18:e6:2e:c3:9e:67:
58:74:e3:01:9e:a8:6e:aa:e7:bb:fa:6d:82:11:5b:41:f1:2f:
4d:a4:c4:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 07:17:21 2025 by rpki-client