Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          lOF0duECyKutXcfaZQzAgBzHcpmOsr4vHt40RMdYQAg=
Subject key identifier:   41:BA:98:9A:B5:DE:29:BB:8C:7E:82:A5:91:01:2A:DF:EC:1B:5C:FB
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       63D9327D8EC70F7792232854958F07565E9C5E70
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:57:58 +0000
ROA not before:           Thu 23 May 2024 12:52:58 +0000
ROA not after:            Thu 22 May 2025 12:57:58 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:311::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d9:32:7d:8e:c7:0f:77:92:23:28:54:95:8f:07:56:5e:9c:5e:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:52:58 2024 GMT
            Not After : May 22 12:57:58 2025 GMT
        Subject: CN=41BA989AB5DE29BB8C7E82A591012ADFEC1B5CFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:86:cf:ff:92:54:7c:29:92:ff:75:b3:f0:9c:
                    92:ff:2e:43:02:7a:7c:fd:82:ee:69:21:cc:9f:e8:
                    fb:7f:7b:1a:41:7f:49:b7:b7:ae:9a:97:16:f3:d9:
                    4d:2d:af:4a:6a:81:cb:39:94:61:dd:d4:8e:0c:e9:
                    1e:0e:22:f9:ee:59:0d:1e:15:46:4f:28:21:2f:42:
                    87:16:3f:74:c2:8b:24:ac:ac:e4:e3:e5:ec:f0:1e:
                    f6:cf:4d:fa:1c:6a:b0:e9:9c:c2:b7:07:bb:a5:a7:
                    d7:f3:b6:50:8c:50:31:b6:37:df:8d:2a:8c:fd:87:
                    db:81:42:60:8a:ee:82:59:f0:7e:90:f7:b4:65:f5:
                    a1:32:0e:4f:48:8b:21:7e:56:d7:f1:a9:42:17:6d:
                    b4:48:28:5e:a6:15:ad:96:b4:de:4b:ba:91:8b:3e:
                    f9:1f:38:03:9f:b1:a5:9d:d0:4f:49:cf:68:77:27:
                    63:9c:2c:b4:17:2f:6e:dc:97:08:75:b2:12:21:00:
                    a1:7f:0b:32:d4:61:5f:15:c6:51:74:03:8b:36:ef:
                    ff:ef:9d:10:95:7d:7d:d1:15:e0:ab:e5:ca:a0:df:
                    ee:f0:88:0b:c1:ce:85:5c:36:0a:17:ef:f2:ba:dc:
                    c6:86:c8:55:d3:6d:6c:ac:9b:f0:45:0a:3f:fa:1f:
                    75:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BA:98:9A:B5:DE:29:BB:8C:7E:82:A5:91:01:2A:DF:EC:1B:5C:FB
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3331313a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:311::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:52:c3:13:ba:de:d5:b0:09:7a:9e:a1:dc:e4:90:dd:0b:a6:
         2a:57:b2:37:08:c8:46:96:10:7d:32:5b:ba:ba:9a:30:62:4e:
         fa:b2:0e:bd:b0:c6:ae:c1:82:f5:d3:fb:d9:67:ac:f0:bd:76:
         ba:76:90:21:84:b0:0c:0d:76:3e:25:d3:0b:94:17:70:fd:6d:
         0b:ec:44:d9:71:67:ce:7a:2a:e4:5e:6c:59:33:7a:11:2e:86:
         3f:a1:1a:32:ff:c9:35:44:34:96:1e:22:7e:5a:57:c7:59:db:
         6b:c0:a6:fd:24:18:d3:68:00:bb:7e:a6:a6:7a:8b:fa:d8:e0:
         36:cd:e3:26:6d:77:2b:81:65:83:68:49:43:a2:79:68:ec:20:
         42:a0:f0:fc:9e:05:c7:d0:3a:cc:98:f5:0d:55:a2:ba:de:92:
         d3:3c:e6:d0:e4:c8:2a:80:e0:f2:64:a9:d4:87:5a:d5:83:c3:
         9f:95:89:44:f3:bd:55:f9:3b:8f:61:8d:c5:14:0d:16:1b:66:
         8a:43:cc:aa:52:10:8f:5c:68:43:0a:ad:a1:87:c6:10:e1:39:
         25:20:0d:53:4b:4e:6a:8e:a2:31:6b:cc:97:5d:6a:a1:6e:a6:
         f7:06:c5:a2:dc:d7:a7:0f:ff:60:a8:de:c0:7a:b1:a3:e2:a6:
         ed:bd:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:48 2024 by rpki-client on console-fra.rpki-client.org