Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a35373a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a35373a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          GiZxYjnLmpCSDn1SeVP+41h2Gh4AEJUQxoYq7jb9sLY=
Subject key identifier:   A6:37:AB:A3:AB:83:74:17:8A:22:2F:B8:DF:17:1A:A5:56:1E:27:4C
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       53D92639796D0E05999C0EF3F81DE7D6D5AB47F5
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a35373a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 22:47:44 +0000
ROA not before:           Thu 10 Aug 2023 22:42:44 +0000
ROA not after:            Thu 08 Aug 2024 22:47:44 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:57::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d9:26:39:79:6d:0e:05:99:9c:0e:f3:f8:1d:e7:d6:d5:ab:47:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 10 22:42:44 2023 GMT
            Not After : Aug  8 22:47:44 2024 GMT
        Subject: CN=A637ABA3AB8374178A222FB8DF171AA5561E274C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:87:6a:8c:ad:24:69:49:cb:fe:67:84:3e:dc:
                    7d:1f:f4:83:71:73:f3:24:cf:6f:7d:0b:44:79:40:
                    c8:5a:4a:21:cc:99:70:fb:5a:b3:ca:1e:48:a7:f8:
                    1e:35:1b:34:44:83:20:1c:1f:23:c6:5f:5d:b7:fe:
                    7a:47:e0:d3:05:67:26:9c:f7:59:28:9a:02:31:09:
                    4c:2d:09:56:33:cd:60:df:8c:16:d8:f3:65:50:28:
                    e9:63:64:9a:74:8b:c0:cf:99:6a:ee:e7:fd:77:66:
                    20:f2:48:74:1c:7f:e7:72:9b:5a:20:07:ce:51:65:
                    00:18:cb:f0:d5:31:32:bd:e5:d7:83:57:c7:37:c4:
                    d6:27:ad:5f:49:0d:fd:a6:fd:1c:58:3c:fa:f1:ec:
                    98:28:d4:0c:20:f1:42:94:b8:1e:5f:cf:dc:1a:f3:
                    ab:b4:95:48:21:94:77:42:23:3b:ce:8a:0b:45:e8:
                    c6:58:07:af:e8:eb:c0:23:e6:d8:0e:8f:48:60:6a:
                    bd:2e:4f:df:28:d1:c8:c1:56:5b:0a:41:9c:c1:1f:
                    b6:54:4d:ab:0e:e8:a7:5c:f6:31:1b:75:7d:34:06:
                    0e:88:70:c9:eb:9d:5f:57:23:1a:f7:cc:0e:c0:d0:
                    32:ca:4b:57:56:b0:2c:21:65:41:66:71:ea:16:5d:
                    8b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:37:AB:A3:AB:83:74:17:8A:22:2F:B8:DF:17:1A:A5:56:1E:27:4C
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a35373a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:57::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:81:b6:bc:f9:e9:8f:97:00:ca:69:d0:1b:2d:79:a1:cc:ba:
         13:f6:34:7e:ba:d3:ae:7e:26:55:38:55:8d:df:98:df:d7:71:
         25:41:49:3e:d7:38:dc:d7:1b:fa:dc:05:94:c3:45:9e:44:29:
         e1:22:25:f6:fd:34:dc:4a:90:67:9d:2c:86:7d:4b:87:e3:22:
         2d:b3:1c:3c:e0:d7:71:76:0e:b1:ce:f5:fa:05:e9:94:0d:11:
         fa:c8:15:13:a7:0b:17:37:a4:14:a5:2d:4c:51:be:16:52:89:
         5c:f6:eb:04:ac:1d:81:6f:fc:89:a9:58:e3:f2:07:2a:5e:9f:
         4e:f6:20:95:67:b5:c9:f8:d5:c0:4b:e2:b8:a6:48:c9:6c:a6:
         0b:c6:fd:e3:a7:6d:5f:6f:03:70:cd:a1:c2:2a:d9:87:39:ce:
         9b:c2:71:d4:bb:59:b5:39:a2:cb:43:13:40:25:5b:6a:2e:d6:
         b7:2e:25:b4:8b:6a:9b:32:53:90:c0:50:8a:d1:f4:75:a8:59:
         91:8d:15:8b:68:70:c9:c4:47:a2:90:a5:fd:b7:ba:16:23:3d:
         e5:b4:8a:03:08:d2:23:9a:66:5d:e7:0c:74:4e:f1:f0:f0:1d:
         4d:70:3b:0f:e0:39:b6:4e:6a:be:53:16:1d:03:d6:70:79:b4:
         03:cc:36:f4
-----BEGIN CERTIFICATE-----
MIIFHDCCBASgAwIBAgIUU9kmOXltDgWZnA7z+B3n1tWrR/UwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yMzA4MTAyMjQyNDRaFw0yNDA4MDgyMjQ3NDRaMDMxMTAvBgNV
BAMTKEE2MzdBQkEzQUI4Mzc0MTc4QTIyMkZCOERGMTcxQUE1NTYxRTI3NEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBh2qMrSRpScv+Z4Q+3H0f9INx
c/Mkz299C0R5QMhaSiHMmXD7WrPKHkin+B41GzREgyAcHyPGX123/npH4NMFZyac
91komgIxCUwtCVYzzWDfjBbY82VQKOljZJp0i8DPmWru5/13ZiDySHQcf+dym1og
B85RZQAYy/DVMTK95deDV8c3xNYnrV9JDf2m/RxYPPrx7Jgo1Awg8UKUuB5fz9wa
86u0lUghlHdCIzvOigtF6MZYB6/o68Aj5tgOj0hgar0uT98o0cjBVlsKQZzBH7ZU
TasO6Kdc9jEbdX00Bg6IcMnrnV9XIxr3zA7A0DLKS1dWsCwhZUFmceoWXYsNAgMB
AAGjggImMIICIjAdBgNVHQ4EFgQUpjero6uDdBeKIi+43xcapVYeJ0wwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBiwYIKwYBBQUHAQsEfzB9MHsGCCsGAQUFBzALhm9y
c3luYzovL3Jwa2ktMDEucGR4bmV0LnVrL3JlcG8vcGFyYWRveG5ldHdvcmtzLzIv
MzI2MTMwMzUzYTY0NjY2MzM0M2EzNTM3M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QAVzANBgkqhkiG9w0BAQsFAAOCAQEA
b4G2vPnpj5cAymnQGy15ocy6E/Y0frrTrn4mVThVjd+Y39dxJUFJPtc43Ncb+twF
lMNFnkQp4SIl9v003EqQZ50shn1Lh+MiLbMcPODXcXYOsc71+gXplA0R+sgVE6cL
FzekFKUtTFG+FlKJXPbrBKwdgW/8ialY4/IHKl6fTvYglWe1yfjVwEviuKZIyWym
C8b946dtX28DcM2hwirZhznOm8Jx1LtZtTmiy0MTQCVbai7Wty4ltItqmzJTkMBQ
itH0dahZkY0Vi2hwycRHopCl/be6FiM95bSKAwjSI5pmXecMdE7x8PAdTXA7D+A5
tk5qvlMWHQPWcHm0A8w29A==
-----END CERTIFICATE-----
Generated at Sat May 4 03:05:13 2024 by rpki-client on console-ams.rpki-client.org