Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3731323a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3731323a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          qkxqwairbYPMaV4aYBUJkiuJJFXgnXGTmjLdSA7FXoM=
Subject key identifier:   E4:72:AB:8C:79:CE:B6:F3:6B:CC:77:B8:5A:00:99:6B:89:B6:6B:FC
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       5DB936BD6A2EE607349DE1D25C53BF617A21D8F4
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3731323a3a2f34382d313238203d3e203532303235.roa
Signing time:             Wed 18 Sep 2024 04:59:37 +0000
ROA not before:           Wed 18 Sep 2024 04:54:37 +0000
ROA not after:            Wed 17 Sep 2025 04:59:37 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:712::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b9:36:bd:6a:2e:e6:07:34:9d:e1:d2:5c:53:bf:61:7a:21:d8:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Sep 18 04:54:37 2024 GMT
            Not After : Sep 17 04:59:37 2025 GMT
        Subject: CN=E472AB8C79CEB6F36BCC77B85A00996B89B66BFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:f9:9b:98:ec:e6:aa:9e:91:71:0b:2d:51:
                    97:79:9a:29:aa:3d:8e:2b:7e:bd:c6:c0:5d:94:2d:
                    f4:0c:d2:df:0b:35:f9:29:75:1c:f5:32:79:56:4f:
                    5c:93:6d:a1:0c:e4:83:0d:27:08:2b:e7:56:34:4e:
                    29:2a:0b:22:92:b3:37:6e:e8:cb:2b:c2:f3:bd:64:
                    6b:cc:e8:b6:c8:8c:09:23:e8:54:50:27:46:5a:d6:
                    a4:2f:49:ee:41:67:7c:fe:e3:f8:9c:a7:02:28:90:
                    ad:39:74:8a:0e:2b:e9:74:2d:ca:92:c7:8f:7f:9c:
                    72:3e:cb:ba:29:ae:f8:0e:c2:8a:34:7f:e8:bf:8c:
                    f8:9d:e5:b3:fd:c2:a4:8f:98:25:ea:8a:fd:16:0a:
                    30:71:9f:e7:96:dd:0a:64:52:a3:af:b9:39:fa:0f:
                    bf:35:77:d1:73:0e:44:79:b7:b1:01:a5:d2:62:0c:
                    4e:1a:ec:7e:10:57:84:0f:ea:9e:1c:bb:e2:8c:74:
                    6e:5c:28:5a:4b:90:aa:f9:30:5e:1d:05:02:83:4b:
                    d4:e5:f9:8e:94:fe:94:05:5f:e8:21:be:77:aa:50:
                    dc:c7:e7:05:31:9c:99:dc:37:a2:60:b1:f1:1e:8a:
                    7a:21:10:40:75:b8:2e:a0:b6:9f:4a:f8:7a:5c:79:
                    a2:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:72:AB:8C:79:CE:B6:F3:6B:CC:77:B8:5A:00:99:6B:89:B6:6B:FC
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3731323a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:712::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:55:4d:b3:a5:a8:e1:a9:2a:4b:5a:5f:33:3f:e0:77:8c:9f:
         c8:84:2f:51:e7:c7:94:84:e0:9a:c3:52:22:5d:e0:e2:b2:0f:
         9e:90:50:4c:a2:81:87:60:00:5d:9d:44:8b:6f:d8:01:bf:1f:
         7a:f7:b8:70:60:6a:ea:db:d5:c9:ad:e0:5a:86:e1:36:94:10:
         7b:92:bf:da:cc:54:ce:5c:4a:c2:e4:e0:43:d8:1d:55:db:b1:
         4d:84:4a:cc:d3:3b:c8:fe:06:8e:13:e2:55:1c:5f:dc:72:55:
         96:dd:a4:c7:51:2f:18:1c:e6:f9:28:56:e3:c8:cf:62:23:3f:
         2e:9e:c7:ff:6e:05:61:d4:3c:cb:b6:2f:1e:f4:5b:92:2d:ce:
         6e:3c:e3:9f:39:bc:ce:22:f6:f8:b4:95:31:a6:e1:3f:31:f9:
         20:6f:a9:6a:9e:c1:26:cb:bf:b8:84:8a:3c:87:f6:f1:7b:8d:
         02:18:33:95:5d:69:cf:5e:8f:7d:91:87:42:af:19:93:73:22:
         d1:1a:ae:55:9e:92:6e:bc:b1:d1:02:e1:a8:35:72:f4:4d:06:
         f7:0e:53:a2:a6:a0:10:62:02:a3:f1:dc:33:d0:35:14:e4:7e:
         42:79:0b:6d:79:74:8f:c8:6c:6b:31:62:40:7c:8f:95:31:52:
         07:39:e0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:26 2024 by rpki-client on console-ams.rpki-client.org