Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a37393a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a37393a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          m4oXlqCh/470fn6Dbl3vdXTL6HN/m1zoWTkug1IS8jE=
Subject key identifier:   4B:30:C0:DE:E6:3B:E8:89:1D:F4:BE:AA:96:95:3A:A0:58:CD:82:10
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2E097081367014AB76F3920D31CC006112F3FA3C
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a37393a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 22:47:56 +0000
ROA not before:           Thu 10 Aug 2023 22:42:56 +0000
ROA not after:            Thu 08 Aug 2024 22:47:56 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:79::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:09:70:81:36:70:14:ab:76:f3:92:0d:31:cc:00:61:12:f3:fa:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 10 22:42:56 2023 GMT
            Not After : Aug  8 22:47:56 2024 GMT
        Subject: CN=4B30C0DEE63BE8891DF4BEAA96953AA058CD8210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:8d:eb:ae:70:f9:4b:5b:29:8d:19:f2:be:23:
                    ca:da:69:d2:26:cc:0d:54:ac:10:8c:e7:3f:20:34:
                    2d:80:6b:2f:0f:71:9e:35:24:21:a4:59:d7:93:02:
                    9a:24:4c:2a:e1:67:a9:35:50:2d:d9:c7:34:fa:e0:
                    96:b9:96:7e:3e:a2:86:de:94:0b:e7:24:f8:dc:30:
                    41:35:3f:f2:18:68:ca:e6:04:06:97:b8:9d:7c:56:
                    e5:11:00:d3:37:ad:c3:5f:28:29:73:ef:5b:c8:18:
                    ab:8a:d9:fe:cc:32:ee:bb:6f:b2:b3:09:60:46:ac:
                    a6:39:2a:d0:75:c6:ba:a0:c1:fd:dc:6a:c2:19:33:
                    c2:42:64:fd:39:75:00:47:30:a0:37:a1:2f:dd:82:
                    f2:b0:e4:b6:75:8e:7e:c3:e0:ac:19:59:80:5d:3e:
                    79:82:d3:b8:a9:7e:c4:57:16:2a:ae:4d:f7:8e:4b:
                    a2:cf:4f:af:61:73:46:cf:85:d4:93:66:f8:18:1c:
                    3a:c8:6f:df:27:dd:5e:2f:1f:1d:0a:a2:3c:9c:28:
                    db:34:d6:31:00:29:69:52:72:8b:f7:eb:8a:76:4b:
                    58:74:8d:8f:c1:b5:dc:9e:4b:e0:7f:b8:be:90:fa:
                    e9:fb:56:03:e1:b8:e2:f1:3c:83:45:a1:f2:37:4f:
                    0d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:30:C0:DE:E6:3B:E8:89:1D:F4:BE:AA:96:95:3A:A0:58:CD:82:10
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a37393a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:79::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:d4:ea:d8:6f:01:70:f7:cf:5c:ab:8e:62:1f:46:b1:4d:9a:
         99:80:eb:bd:79:c5:8e:5b:42:5b:bd:ba:88:4a:f7:92:66:f4:
         e2:4f:c8:4d:e7:72:31:29:e6:ef:ee:9b:14:97:2f:b5:c9:35:
         2e:af:c4:c1:92:cb:66:5a:3a:ca:57:78:b1:9c:fe:0e:e1:94:
         1f:1e:b0:c4:e8:fb:30:67:51:bd:29:b9:e1:ce:3b:5e:77:1c:
         83:8c:6b:c0:31:d8:17:1e:50:74:09:f4:c9:55:84:bf:7a:9d:
         59:24:90:dc:71:e7:35:cb:36:8f:cf:3c:f6:48:0e:e3:25:50:
         a1:2d:78:66:b6:93:6b:dc:7b:8c:ee:ad:60:28:de:5a:d6:79:
         b5:b5:3a:20:2d:b0:35:24:fe:2e:7d:31:66:d0:ea:ed:41:e1:
         76:fa:09:8e:4c:45:d4:26:00:c3:0d:4f:fa:f2:fd:e5:18:7a:
         23:1a:f8:72:29:ac:00:60:39:ec:4f:ce:f2:30:40:75:2e:e0:
         98:6e:70:78:14:11:9e:98:b3:bb:03:d8:5a:0a:ab:3a:b6:2f:
         5e:c2:ff:30:31:8f:1a:ef:03:de:2f:4c:33:53:d9:c6:f7:f3:
         8e:60:fa:a5:b5:15:e6:aa:25:3e:3c:b2:8f:76:af:e5:1c:e4:
         67:8a:50:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:41 2024 by rpki-client on console-fra.rpki-client.org