Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          s3xVSeZMsX3l3eV++RcLXzMFeAv8mKgnvjXoibjQRGM=
Subject key identifier:   F0:4B:E5:9C:66:E5:C0:A3:3C:76:59:67:C3:67:8C:4B:2E:65:D0:13
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       393D1FE01F6F74A1D3CE2F4AE004CBE1B3F4254B
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:57:57 +0000
ROA not before:           Thu 23 May 2024 12:52:57 +0000
ROA not after:            Thu 22 May 2025 12:57:57 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:36::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:3d:1f:e0:1f:6f:74:a1:d3:ce:2f:4a:e0:04:cb:e1:b3:f4:25:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:52:57 2024 GMT
            Not After : May 22 12:57:57 2025 GMT
        Subject: CN=F04BE59C66E5C0A33C765967C3678C4B2E65D013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:43:e3:d0:69:02:84:59:55:e1:ee:71:82:8e:
                    2e:ee:9a:87:cb:ca:21:39:55:45:aa:be:0a:04:03:
                    dc:14:27:60:7c:a9:09:1b:ca:96:6b:ed:56:27:49:
                    5b:e9:20:5e:7a:73:10:da:ab:82:1b:79:9a:c4:dc:
                    c1:6c:0a:15:b9:78:3e:56:86:76:21:88:61:82:9f:
                    e1:5f:c1:81:7d:b0:d4:05:df:8a:e3:9f:66:01:ef:
                    35:07:2e:b7:e6:9b:cd:3f:59:34:2c:cb:96:94:37:
                    17:eb:5c:81:25:e9:3f:2e:06:08:28:b9:cb:2e:e3:
                    28:b7:30:c9:78:8f:33:be:80:ea:27:a7:dd:ec:b0:
                    89:ac:41:b2:04:96:0b:31:3e:bb:2c:d1:57:cd:04:
                    66:28:cd:bc:5e:2d:56:50:99:33:6d:49:86:b0:9e:
                    c3:2b:95:3a:7a:ea:62:30:61:8c:03:d3:23:b6:98:
                    f5:d4:df:73:a1:c9:6e:72:56:b9:f5:ef:90:d5:11:
                    89:ab:56:17:d4:b7:c6:0c:59:d7:3f:c0:ca:48:92:
                    b2:9c:23:c4:b5:c6:49:c9:b7:49:20:e0:07:fe:3e:
                    7d:3d:ae:7e:75:f9:d0:a4:a7:a7:d8:0f:cd:f5:e9:
                    ce:e6:d7:0a:1b:06:c5:ff:a9:1a:7c:b7:77:bb:0f:
                    08:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:4B:E5:9C:66:E5:C0:A3:3C:76:59:67:C3:67:8C:4B:2E:65:D0:13
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a33363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:36::/48

    Signature Algorithm: sha256WithRSAEncryption
         34:44:ea:d1:fa:ac:ec:be:89:d6:0b:a1:29:95:f7:0a:64:20:
         2d:c2:37:34:6c:0f:03:0b:05:7d:ef:34:e6:07:3d:46:18:fe:
         92:79:47:bf:b3:37:f8:d2:86:c0:bb:77:35:8d:55:39:d1:c7:
         f1:3a:47:4a:ee:f9:2d:0d:e3:3e:6f:56:67:7a:b2:fa:47:1c:
         47:63:60:9c:e4:38:cf:85:ec:4e:19:c9:a3:41:5d:70:c1:be:
         1d:48:67:01:a5:a9:cd:dc:98:81:fe:18:65:20:de:a3:ca:e8:
         93:12:2d:8d:c6:a4:65:fd:04:98:0c:85:f7:25:13:d4:2b:fb:
         5a:72:29:62:3b:a2:a0:71:37:34:7e:af:e5:93:80:5d:0d:6b:
         3b:ff:ad:2c:69:38:3a:02:71:82:cb:36:d1:35:63:78:80:ae:
         8b:59:39:f9:13:ff:2b:28:cd:d3:9e:39:25:c0:4b:5d:8b:47:
         c6:59:52:30:63:21:72:b9:fa:74:b9:06:d9:fb:5c:b3:42:15:
         ab:5f:c0:cb:10:a5:c5:51:ce:45:d9:cb:ac:26:1e:ef:d7:ef:
         bc:a3:a9:75:16:3f:9a:cb:7b:ed:cc:fb:ff:bf:ad:97:5a:20:
         35:9c:58:4a:21:2a:17:48:17:4f:96:e8:67:41:a4:81:76:63:
         28:a2:43:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:32 2024 by rpki-client on console-ams.rpki-client.org