Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          oFQ065y9Bm3MQmsucHK1bRlhMYNmGrODxA6VRrYk5PU=
Subject key identifier:   F0:A3:2A:4F:B7:DB:8F:B7:E4:AC:C7:DE:D5:4B:47:17:05:A4:2D:15
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       3EF05128D0B89DFF37CE635CE54B7E885709D42C
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:57:54 +0000
ROA not before:           Thu 23 May 2024 12:52:54 +0000
ROA not after:            Thu 22 May 2025 12:57:54 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:79::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f0:51:28:d0:b8:9d:ff:37:ce:63:5c:e5:4b:7e:88:57:09:d4:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:52:54 2024 GMT
            Not After : May 22 12:57:54 2025 GMT
        Subject: CN=F0A32A4FB7DB8FB7E4ACC7DED54B471705A42D15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:08:a8:6f:6a:0c:55:b8:15:ca:21:b1:65:5d:
                    5b:6a:37:db:38:de:6c:30:99:72:1f:0f:3a:3d:54:
                    5b:97:24:60:83:07:85:04:c4:b8:af:4f:ae:3e:57:
                    4a:ab:00:2e:28:ea:02:8c:6e:10:05:32:a0:aa:e3:
                    f1:58:fe:bc:df:8d:7f:4b:13:81:c0:c6:9a:b7:41:
                    74:fe:bf:23:c6:af:a0:e4:92:ea:a5:7a:20:d3:fe:
                    a4:31:78:be:6f:0e:75:c2:47:73:a4:95:2e:47:3a:
                    f0:d1:02:dc:e0:87:6d:80:85:9f:43:2a:ce:86:bb:
                    5a:6f:cc:05:36:33:43:d3:2c:54:30:95:35:07:17:
                    ee:45:0a:fe:a9:67:3b:90:b1:e0:e8:16:d8:b3:41:
                    3a:60:30:6a:bf:69:72:fb:80:59:f2:4b:62:6c:0a:
                    5e:7e:10:64:e5:03:56:d1:91:e8:03:8d:8e:15:eb:
                    9f:78:d3:b4:30:26:8b:92:7f:36:00:d3:b9:0c:1f:
                    d6:70:2f:9b:37:4e:b2:57:19:7b:df:d7:a3:d0:2c:
                    86:88:a5:b0:bb:12:87:a8:bc:93:64:81:35:c9:c0:
                    2b:a0:99:e3:27:f5:21:ed:1e:dd:1b:03:08:19:84:
                    9a:8e:74:c0:17:71:66:b3:46:50:b3:a8:ac:0a:d7:
                    4d:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A3:2A:4F:B7:DB:8F:B7:E4:AC:C7:DE:D5:4B:47:17:05:A4:2D:15
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a37393a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:79::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:53:bb:d9:c2:2a:e5:46:43:30:09:10:99:20:d2:3e:f6:8f:
         b1:02:9b:ac:77:05:b1:d9:60:d3:20:ac:b1:30:b0:8e:3d:3b:
         73:07:51:7c:48:77:11:b4:56:20:49:6d:1e:95:9d:d2:3f:0e:
         9a:01:68:1d:ef:e3:ef:db:e0:5c:4f:74:dd:78:7b:b9:46:7a:
         15:47:b2:89:da:22:fb:8a:d4:71:ed:8d:44:84:ac:23:aa:e9:
         c2:af:16:b4:70:a6:1a:66:a0:24:9f:f9:cd:9e:38:08:66:b3:
         4b:74:69:9d:1c:ef:24:47:c2:c7:4c:6f:5f:bd:01:3a:3f:47:
         2c:c3:7e:5b:63:fb:55:1d:e6:77:0b:3d:a3:68:82:52:6d:70:
         4f:48:63:56:0a:95:83:6f:fb:64:fe:bf:3b:f3:3b:96:e9:0c:
         e0:2c:de:19:0d:15:12:84:0e:e9:ef:b5:4a:6f:06:06:0e:8a:
         72:ed:f3:0a:4e:35:eb:88:59:00:ea:e7:4e:1f:63:18:c9:b3:
         0c:d2:3a:05:e8:c5:73:a1:f3:fc:4c:b8:b5:72:8f:98:49:dc:
         74:06:f2:6c:65:c2:e9:c5:f2:8b:2f:78:7c:36:ad:6f:4f:e4:
         92:58:cb:7f:ea:4b:e5:b7:e8:d1:75:a7:e9:d3:a1:32:18:9f:
         45:a1:0c:c1
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUPvBRKNC4nf83zmNc5Ut+iFcJ1CwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNDA1MjMxMjUyNTRaFw0yNTA1MjIxMjU3NTRaMDMxMTAvBgNV
BAMTKEYwQTMyQTRGQjdEQjhGQjdFNEFDQzdERUQ1NEI0NzE3MDVBNDJEMTUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhCKhvagxVuBXKIbFlXVtqN9s4
3mwwmXIfDzo9VFuXJGCDB4UExLivT64+V0qrAC4o6gKMbhAFMqCq4/FY/rzfjX9L
E4HAxpq3QXT+vyPGr6DkkuqleiDT/qQxeL5vDnXCR3OklS5HOvDRAtzgh22AhZ9D
Ks6Gu1pvzAU2M0PTLFQwlTUHF+5FCv6pZzuQseDoFtizQTpgMGq/aXL7gFnyS2Js
Cl5+EGTlA1bRkegDjY4V659407QwJouSfzYA07kMH9ZwL5s3TrJXGXvf16PQLIaI
pbC7EoeovJNkgTXJwCugmeMn9SHtHt0bAwgZhJqOdMAXcWazRlCzqKwK100dAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQU8KMqT7fbj7fkrMfe1UtHFwWkLRUwHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy8y
LzMyNjEzMDM1M2E2NDY2NjMzNDNhMzczOTNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QAeTANBgkqhkiG9w0BAQsFAAOC
AQEAClO72cIq5UZDMAkQmSDSPvaPsQKbrHcFsdlg0yCssTCwjj07cwdRfEh3EbRW
IEltHpWd0j8OmgFoHe/j79vgXE903Xh7uUZ6FUeyidoi+4rUce2NRISsI6rpwq8W
tHCmGmagJJ/5zZ44CGazS3RpnRzvJEfCx0xvX70BOj9HLMN+W2P7VR3mdws9o2iC
Um1wT0hjVgqVg2/7ZP6/O/M7lukM4CzeGQ0VEoQO6e+1Sm8GBg6Kcu3zCk4164hZ
AOrnTh9jGMmzDNI6BejFc6Hz/Ey4tXKPmEncdAbybGXC6cXyiy94fDatb0/kkljL
f+pL5bfo0XWn6dOhMhifRaEMwQ==
-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:46 2024 by rpki-client on console-fra.rpki-client.org