Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          r3WASDEzzp8Qa7zhtKdlehiDvKbtBmivBrellUEBjsA=
Subject key identifier:   FE:84:4D:60:FF:F0:0C:1C:76:E4:DA:2A:D4:11:ED:45:3C:BA:10:40
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       408D5656482811EFE0EE4E44317669E2C57F7F98
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:58:13 +0000
ROA not before:           Thu 23 May 2024 12:53:13 +0000
ROA not after:            Thu 22 May 2025 12:58:13 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:57::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8d:56:56:48:28:11:ef:e0:ee:4e:44:31:76:69:e2:c5:7f:7f:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:53:13 2024 GMT
            Not After : May 22 12:58:13 2025 GMT
        Subject: CN=FE844D60FFF00C1C76E4DA2AD411ED453CBA1040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1a:cb:24:7e:b0:49:79:76:06:ba:6f:29:fc:
                    b9:5f:b8:58:bd:a9:80:f2:c6:35:36:83:ad:1f:8f:
                    31:e5:84:b4:1d:77:0b:9f:d8:01:0f:db:39:11:59:
                    61:7b:e2:9c:a4:bc:82:9c:12:66:ea:11:9d:0e:10:
                    c3:4d:00:33:1e:67:b4:43:b2:a5:6b:05:ea:b1:62:
                    60:e7:c7:7d:1d:40:49:b2:ef:d0:6c:a6:d7:ee:fa:
                    17:20:66:22:d3:14:6e:67:3e:64:99:17:82:9a:72:
                    03:52:a2:13:24:f5:be:f2:85:86:d4:e9:b6:74:df:
                    2b:67:06:e9:81:fa:5e:e4:c5:68:d2:48:d8:f0:69:
                    78:3f:7d:a1:ca:ed:fd:93:13:70:18:2e:0e:62:f2:
                    9e:7b:c0:2d:7e:aa:8a:8a:a7:da:02:a6:f1:e9:b8:
                    59:1e:16:21:4d:5c:4f:c2:d5:59:cd:4e:1c:c4:13:
                    15:c2:4b:c5:90:c9:98:45:fa:25:f2:48:26:88:45:
                    93:ec:fb:8d:f2:36:4f:72:31:f7:73:ee:f8:42:55:
                    d4:26:e0:3e:f4:13:ae:38:9c:95:ec:8b:0a:80:06:
                    6d:e6:a4:8e:11:30:ee:f2:ae:23:db:2f:81:82:d2:
                    46:24:e4:a7:17:c3:93:79:00:c2:08:30:01:ea:8b:
                    3c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:84:4D:60:FF:F0:0C:1C:76:E4:DA:2A:D4:11:ED:45:3C:BA:10:40
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a35373a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         ab:fc:46:28:39:ce:14:f7:80:34:c3:ca:15:2e:4f:fc:73:d7:
         02:47:bd:bc:08:cb:30:e3:62:4b:28:70:81:ec:d9:6b:e0:8d:
         43:84:80:d5:80:c3:01:c1:a1:94:74:ca:a6:df:9f:77:50:5b:
         8e:da:f7:70:bc:29:25:0e:ae:cc:ba:12:06:88:9f:9f:f8:c2:
         9b:d4:c7:e1:9c:5f:fb:f1:49:f8:17:de:3c:31:c0:ea:76:69:
         2f:85:9f:ca:d2:88:8e:81:2e:60:28:8c:cb:c9:cd:0b:67:c3:
         00:7e:ac:cd:0b:ce:f6:56:16:d2:67:f6:c4:85:be:b8:31:49:
         f4:f4:b5:e6:99:d8:d5:71:ff:82:c5:2f:9a:68:2b:8a:22:55:
         a1:42:04:d9:08:b6:65:3f:d1:fd:fe:03:7a:9d:5a:7c:2b:2e:
         85:af:4f:16:58:e2:80:86:ac:0b:47:7f:71:43:9f:57:e6:52:
         48:b3:25:c5:da:87:8e:ec:f9:b7:c6:ea:9a:17:fd:37:90:5a:
         04:4f:64:47:66:66:83:ce:56:1c:e4:78:7e:2d:18:af:de:84:
         a8:b7:be:cf:a3:96:7a:24:07:a8:40:b9:28:53:62:e6:1c:76:
         4a:f8:31:2c:66:cc:a1:bd:15:f4:82:da:d7:5c:59:23:c0:d2:
         9f:b0:83:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 11:04:25 2024 by rpki-client on console-fra.rpki-client.org