Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a373231663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a373231663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          sBTnZjeXWycigTgvxk9wrJCETnXDKQXvEWjl+w8aWqw=
Subject key identifier:   2F:16:0B:E1:48:0B:22:74:55:20:00:55:F8:91:4C:94:EE:B4:E2:B0
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       1DCF787FDFDD7E8460B4F61CA49D464327F9D0FF
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a373231663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:50:46 +0000
ROA not before:           Thu 23 May 2024 12:45:46 +0000
ROA not after:            Thu 22 May 2025 12:50:46 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:721f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:cf:78:7f:df:dd:7e:84:60:b4:f6:1c:a4:9d:46:43:27:f9:d0:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:45:46 2024 GMT
            Not After : May 22 12:50:46 2025 GMT
        Subject: CN=2F160BE1480B227455200055F8914C94EEB4E2B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:da:f9:2d:2a:11:a7:37:0b:0f:80:fd:5a:4d:
                    e3:07:c5:b0:f0:ef:38:67:90:23:09:d9:ca:bc:7c:
                    66:be:62:c1:eb:19:7e:04:b6:b0:10:8d:fe:54:64:
                    ff:11:cb:bb:89:f5:1e:86:8f:30:24:60:33:4d:d8:
                    34:12:89:4f:bb:9c:f6:b3:ba:0b:88:7f:d2:30:13:
                    6e:4a:13:1c:dd:b8:ae:e7:6d:df:7c:84:2a:af:99:
                    05:c1:b0:fa:c3:8b:fc:48:4d:53:53:19:e7:a6:94:
                    3a:50:9e:53:7d:a2:12:dc:61:0e:57:98:7b:53:ae:
                    62:4a:80:74:a7:9a:75:6f:d3:ce:9a:fb:8a:5c:4a:
                    12:13:39:0f:23:05:1f:3b:48:a7:0c:bc:48:ed:0b:
                    31:4c:86:06:68:8d:b1:bc:28:96:09:bd:4b:64:f3:
                    dd:9d:23:ad:5c:cd:94:2d:3d:31:4e:70:1d:1a:74:
                    63:ac:b8:26:5b:e3:7f:5b:5b:e8:6c:bc:b5:8f:04:
                    35:f8:5e:74:59:2e:a0:1d:c6:e0:ac:dc:91:28:9b:
                    a5:62:6b:14:f9:33:6b:47:2e:c0:6c:c2:f3:7a:9c:
                    42:e1:cc:83:30:f3:38:9b:94:d3:75:34:04:12:a9:
                    a4:e4:0d:32:d1:46:bf:d2:67:ee:fc:06:9a:66:ad:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:16:0B:E1:48:0B:22:74:55:20:00:55:F8:91:4C:94:EE:B4:E2:B0
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a373231663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:721f::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:14:b9:dd:d8:f1:0d:d3:7f:01:5a:04:d9:33:41:b9:f6:33:
         51:ff:42:ab:ab:13:ec:73:6e:6a:dd:b1:b4:2a:9f:63:03:be:
         2b:9f:48:92:42:2f:15:e9:ef:48:8c:a8:e3:3e:2f:43:bc:c8:
         34:40:db:7b:01:73:16:c5:ef:b7:7b:03:c9:6b:f3:59:ed:75:
         bb:ba:00:c2:bc:ab:6c:77:4b:35:d8:32:71:16:f4:69:bd:e3:
         c5:a9:ee:82:d5:a9:85:fd:e1:09:bb:b5:bf:ca:c5:52:ee:59:
         8c:50:6c:94:9b:a9:70:a9:41:ed:0d:ca:e5:45:fd:67:52:09:
         3c:29:bf:40:1d:3a:17:64:05:80:d8:5a:2e:2d:b7:7d:96:65:
         48:86:cf:e2:86:06:ef:97:51:ab:cd:1e:ae:6d:b1:8c:27:1d:
         12:e5:ed:b0:5b:60:57:c4:7f:52:31:83:ca:ed:3f:a8:82:e2:
         85:25:67:30:74:23:6d:ab:93:c7:48:66:f0:3d:e1:39:a0:3b:
         6f:25:18:61:ed:3e:3e:e5:ec:62:08:8f:32:46:2f:69:78:a2:
         e4:c7:3a:21:a0:eb:d4:cd:a2:fe:73:31:ee:14:54:84:d4:00:
         4d:ba:48:1f:f0:7c:a5:77:e0:9a:d3:18:c8:d1:91:0c:53:04:
         4a:64:73:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:48 2024 by rpki-client on console-fra.rpki-client.org