Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a34353a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a34353a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          GrzN/7hS/YH2hNyiaHPht4U3/QJRRso5Q07dl5UEJdo=
Subject key identifier:   8C:2C:6B:5C:EF:99:A2:A8:13:62:C2:4F:E9:F7:C7:D7:5B:E9:A0:2C
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       5F517F2CC3E3C5372D6A6E1181D28312072D5723
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a34353a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:58:08 +0000
ROA not before:           Thu 23 May 2024 12:53:08 +0000
ROA not after:            Thu 22 May 2025 12:58:08 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:45::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:51:7f:2c:c3:e3:c5:37:2d:6a:6e:11:81:d2:83:12:07:2d:57:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:53:08 2024 GMT
            Not After : May 22 12:58:08 2025 GMT
        Subject: CN=8C2C6B5CEF99A2A81362C24FE9F7C7D75BE9A02C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b8:de:91:1f:2d:a6:b6:14:8b:85:72:3a:a2:
                    f8:79:57:75:88:99:50:0e:fa:9c:b5:5f:18:4b:9a:
                    27:b0:4b:87:cf:3b:0f:09:d3:da:e7:79:f8:00:cd:
                    95:8a:0a:a9:1c:fd:ae:9f:83:18:d5:05:fd:d3:a4:
                    90:b2:97:52:78:fd:9c:0c:45:9f:97:a3:6b:51:5b:
                    88:49:7c:00:f9:b9:45:85:e7:d8:40:11:bb:06:04:
                    73:06:e8:1a:32:6d:ba:a6:d5:0b:6f:cb:b1:05:8e:
                    e5:53:71:ee:5d:36:f0:09:6a:1c:3d:ad:00:27:16:
                    87:db:18:e3:36:23:a6:2c:92:34:11:a7:21:a3:18:
                    f4:56:6c:4c:2e:e6:40:f2:37:54:b4:19:aa:9a:68:
                    9c:4c:79:fc:73:c1:ac:87:24:e0:a4:d9:23:8f:52:
                    ad:64:5e:3c:cf:e6:e9:40:ca:73:c6:5e:d7:75:1f:
                    61:68:77:66:12:03:78:01:1b:4f:bc:bd:2c:3d:bf:
                    b6:40:2a:5d:fc:6f:cd:94:8d:53:73:c1:84:57:5f:
                    64:27:e2:69:70:fe:64:e3:6f:29:f7:c1:68:48:43:
                    0c:a3:47:78:8f:81:5b:2a:3a:19:13:45:74:57:48:
                    3b:a7:c5:b6:b0:32:11:5d:7a:af:0f:ca:9d:24:88:
                    dd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:2C:6B:5C:EF:99:A2:A8:13:62:C2:4F:E9:F7:C7:D7:5B:E9:A0:2C
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a34353a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:45::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:a6:d9:45:37:ce:b0:64:5d:91:30:9a:3c:ae:62:d7:5a:7a:
         11:ed:d0:f4:fa:14:47:b9:4f:36:fe:36:73:40:65:9f:04:b4:
         56:54:61:a7:07:b8:4d:c5:7a:f1:33:7b:e7:e3:e5:9c:c9:a8:
         cd:4c:4a:09:ac:9d:66:23:38:51:1f:b1:43:45:1b:84:a6:09:
         52:dc:49:3e:ac:47:3f:31:be:57:d7:08:44:66:e3:3f:70:4e:
         43:8b:ed:48:7a:c1:06:99:c1:aa:58:0f:30:5e:21:7c:5f:48:
         a7:b3:1d:40:fc:76:12:c6:02:88:2b:7f:1c:8d:b9:cc:2a:28:
         24:ad:3d:22:2f:21:ee:de:cd:96:15:38:31:c2:32:0d:93:18:
         ae:96:91:8e:0f:5d:86:e2:77:55:ba:f1:09:51:79:14:9a:66:
         4a:30:cc:e5:8c:dc:83:df:ec:0b:e9:7e:11:6e:4a:6e:e1:58:
         f7:50:bf:74:a0:d7:f9:e8:7e:3c:f5:e9:5a:0a:77:52:e2:c9:
         e9:ca:81:f7:2c:bd:ea:d2:ba:dd:39:1b:a3:5a:95:41:e4:7c:
         42:2a:45:53:23:b1:f5:e1:eb:be:7b:9b:44:51:e3:3f:d6:ae:
         10:c1:e2:89:05:a6:a6:4c:56:32:08:d6:46:12:cb:56:c4:33:
         81:32:c6:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:46 2024 by rpki-client on console-fra.rpki-client.org