Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a32343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a32343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          9GYb4w+Gxh+XS3NfbE2n+ROETuO7yPWa42zSSCpe/Fk=
Subject key identifier:   C0:58:26:B2:A7:65:5A:13:3B:43:E6:72:3F:DE:C9:0B:7D:4D:A1:98
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       74F303FD44AE35C34E169D43F3EDEDB3369BE79C
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a32343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 11 Jul 2024 23:16:49 +0000
ROA not before:           Thu 11 Jul 2024 23:11:49 +0000
ROA not after:            Thu 10 Jul 2025 23:16:49 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:24::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f3:03:fd:44:ae:35:c3:4e:16:9d:43:f3:ed:ed:b3:36:9b:e7:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jul 11 23:11:49 2024 GMT
            Not After : Jul 10 23:16:49 2025 GMT
        Subject: CN=C05826B2A7655A133B43E6723FDEC90B7D4DA198
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:87:24:0c:a4:ec:eb:09:b7:45:9e:c2:55:
                    4b:9b:bd:0a:47:57:83:8c:27:73:a2:8b:65:04:53:
                    b9:25:a1:f9:7a:15:8d:b0:4b:8f:dc:97:6e:07:56:
                    07:42:60:cf:e9:31:56:5c:ca:38:c8:e1:61:b9:74:
                    bc:32:0c:37:22:d5:46:ef:2f:44:b9:77:8c:8a:6a:
                    b6:43:14:0b:b5:63:40:14:2d:a2:5f:df:81:3c:95:
                    f8:44:71:8e:ea:29:4b:8f:46:27:91:55:a1:fb:a9:
                    92:2b:a2:03:65:72:13:0c:82:2e:65:da:7c:18:04:
                    8d:c0:65:6d:a3:04:34:70:ba:93:45:29:10:78:ea:
                    2d:2a:70:05:d3:3f:09:a4:f0:9b:9f:7b:4a:db:b9:
                    87:61:5a:2d:ad:b1:7c:30:64:27:5c:16:6b:1f:34:
                    a5:2e:06:5f:f4:f2:89:0a:e3:00:76:33:92:cd:83:
                    57:31:33:4d:66:ce:af:0e:2f:0e:03:7a:cf:33:b4:
                    5c:b2:f3:99:74:60:f8:b6:7d:06:8a:32:86:f9:e2:
                    28:e0:70:2d:a3:5a:18:70:de:fe:11:07:41:33:0b:
                    7a:09:dc:83:d7:45:f8:35:ee:b1:f2:72:ce:95:2b:
                    80:6d:14:49:49:85:59:31:b2:51:e3:ce:74:b3:bc:
                    7c:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:58:26:B2:A7:65:5A:13:3B:43:E6:72:3F:DE:C9:0B:7D:4D:A1:98
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a32343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:41:16:bc:ec:83:3c:40:94:e8:38:d8:16:ce:22:36:be:0e:
         5e:7b:5b:76:7d:30:3b:0f:23:4b:fc:0a:9f:5c:0a:42:5e:2c:
         f0:9e:aa:8b:51:f8:c5:ab:e9:19:6d:3c:51:5b:e0:73:5a:3e:
         28:37:f7:20:3a:48:fb:92:6a:85:9d:c4:4d:a7:f1:ee:4a:12:
         9a:26:98:32:e7:7d:8d:b7:45:63:0a:53:c1:b7:43:a5:94:6a:
         bf:8e:46:d3:32:78:e3:28:b8:80:34:86:c0:4e:b5:22:8c:bb:
         26:e5:72:64:c2:b6:df:81:68:4a:10:b1:fd:39:2e:b3:bb:91:
         f9:53:e2:f3:f7:01:00:4b:69:dc:3e:b4:95:aa:7b:7d:e4:a0:
         c1:d6:85:63:4e:a5:2c:b4:fd:a5:27:28:51:7b:f9:a1:dc:01:
         50:23:e8:be:e4:09:d8:a1:5d:19:15:de:b7:60:56:ce:2a:1b:
         03:40:70:77:59:05:e5:68:95:67:28:fa:2a:25:e0:ba:83:77:
         7b:86:d5:db:16:24:de:94:93:f6:e4:2f:88:fa:26:19:cb:42:
         b5:73:33:bb:02:ac:9d:b7:6a:69:1c:c5:f6:20:12:48:e6:48:
         d6:63:f1:98:d3:52:28:d1:5b:3d:00:6e:f1:2a:38:46:ac:11:
         1c:17:ff:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:46 2024 by rpki-client on console-fra.rpki-client.org