Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a36383a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a36383a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          YdUf1x/1jkRyo0/S16iIfImd1Y3gj3nu4iZcq77QyKQ=
Subject key identifier:   8D:BD:AB:E5:C0:D8:6F:40:4E:FA:EC:16:AF:40:FB:F3:20:2D:08:04
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       7E96D7714CCE0C9D6224A5B3EAEEA1FCE2D4148D
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a36383a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:58:01 +0000
ROA not before:           Thu 23 May 2024 12:53:01 +0000
ROA not after:            Thu 22 May 2025 12:58:01 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:68::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:96:d7:71:4c:ce:0c:9d:62:24:a5:b3:ea:ee:a1:fc:e2:d4:14:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:53:01 2024 GMT
            Not After : May 22 12:58:01 2025 GMT
        Subject: CN=8DBDABE5C0D86F404EFAEC16AF40FBF3202D0804
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:dd:f6:c3:68:e8:51:20:43:13:4c:7e:58:43:
                    2a:c2:27:ba:f5:50:d0:78:78:b0:05:63:c1:1f:43:
                    e4:dd:a6:20:f8:01:d7:80:6c:40:10:ac:8f:d1:3c:
                    c8:21:d0:7a:fa:a7:25:53:1d:40:fe:a1:15:46:c1:
                    4d:0e:f2:97:a3:c1:2c:48:58:23:ed:ae:31:ec:02:
                    80:6c:23:2b:4b:5e:7f:51:31:a6:2d:f1:a8:d0:c2:
                    6c:a5:09:76:35:8d:18:8f:f7:ff:ac:de:b7:31:4a:
                    ea:2e:68:96:fd:68:32:08:f1:86:6f:57:52:b0:f5:
                    79:b8:62:9d:b5:5f:8d:09:5f:be:0c:81:60:95:1a:
                    b8:e9:52:05:33:4d:2d:95:fc:86:8f:d8:b5:15:b8:
                    9f:52:e4:8c:05:a6:30:6b:39:70:f6:38:73:cc:fb:
                    c6:58:f3:88:e2:59:ab:c7:de:25:e6:0e:cf:8b:11:
                    71:ac:eb:bf:1c:17:6d:d3:ee:ad:58:02:b9:55:82:
                    b4:c8:83:b1:91:40:00:c8:90:48:6b:fc:c8:f3:bb:
                    95:66:b1:67:96:64:a3:8c:44:76:a7:c9:ef:ff:f4:
                    cf:53:0b:b3:78:a1:c6:1c:2c:dc:8c:dd:a7:a3:49:
                    67:8f:af:a8:7a:e8:10:43:0d:ef:0a:db:2a:05:80:
                    c8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:BD:AB:E5:C0:D8:6F:40:4E:FA:EC:16:AF:40:FB:F3:20:2D:08:04
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a36383a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:68::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:e9:10:e6:7d:61:34:20:76:8f:02:de:6d:73:16:e9:36:b1:
         4b:a6:7e:c8:1e:f5:27:ef:4f:86:8d:ac:ce:61:38:bf:40:9b:
         72:3a:83:07:58:f5:87:30:8d:cb:b1:04:ea:fa:87:aa:40:46:
         63:8b:11:32:e6:b0:6d:9c:6c:4b:7b:8c:bf:94:2e:50:99:3e:
         5f:a6:9a:c5:88:b6:e3:a4:9b:2c:54:fd:ff:9f:3b:a6:3a:fb:
         af:8e:e7:d5:36:76:06:0b:58:01:1a:7e:95:b9:41:4e:19:87:
         94:96:b4:74:df:0b:29:3a:36:a1:27:52:c3:33:d9:98:25:09:
         83:27:81:85:b5:14:44:7b:86:2e:7d:57:51:54:83:86:82:b7:
         18:44:d8:d2:18:05:3e:c1:2c:45:a9:fa:ef:d6:b2:ef:81:52:
         f2:f5:7e:0e:1d:e2:44:9b:d7:c4:be:01:6c:13:13:3a:56:10:
         73:c4:51:53:ad:d7:43:7a:b9:a8:7a:7c:0b:b9:bf:07:32:b7:
         81:1b:99:fc:0a:5c:93:d9:55:4d:57:43:cb:fa:61:04:9d:a2:
         3b:ec:68:c7:7f:b6:68:70:ea:48:1f:a9:de:e6:7e:f5:9f:b1:
         30:63:73:e3:e4:a7:ee:d6:98:71:25:e4:b5:bf:bd:a7:11:e2:
         b0:a2:a2:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 11:04:25 2024 by rpki-client on console-fra.rpki-client.org