Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          c0v2NrYymKLdScFaugfXaMOtHwuTtss9tLobXOc22F8=
Subject key identifier:   19:DD:A8:78:95:78:B6:89:EC:63:E2:1F:8E:26:23:EA:90:7D:59:57
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       7CA0BC8E46C0B2E5F50E6C7C9EBF9BE8FFEEA36B
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 11 Jul 2024 23:16:51 +0000
ROA not before:           Thu 11 Jul 2024 23:11:51 +0000
ROA not after:            Thu 10 Jul 2025 23:16:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:79f::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a0:bc:8e:46:c0:b2:e5:f5:0e:6c:7c:9e:bf:9b:e8:ff:ee:a3:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jul 11 23:11:51 2024 GMT
            Not After : Jul 10 23:16:51 2025 GMT
        Subject: CN=19DDA8789578B689EC63E21F8E2623EA907D5957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fd:21:63:42:52:0a:bc:38:68:18:02:8c:66:
                    d5:4b:5d:4d:ca:de:d5:fa:95:26:b0:95:1e:aa:a1:
                    e5:67:e9:09:ec:2e:12:17:40:00:84:d9:75:ec:6a:
                    a3:93:3c:b6:fb:ad:b4:df:02:c4:5b:fc:71:ed:49:
                    3f:7b:aa:97:ea:f9:01:dc:f2:65:d4:63:20:37:07:
                    9a:02:f8:55:f2:98:dc:10:50:e5:89:d8:e0:fe:a9:
                    80:a0:e4:19:22:40:7c:ce:82:e5:24:41:a7:15:37:
                    7e:97:2b:74:96:3c:89:b0:5d:10:90:8a:ba:09:3c:
                    77:58:64:21:09:8e:0b:6f:48:f2:6a:59:0e:8e:25:
                    4e:48:09:37:99:9a:30:7a:b7:59:ff:71:79:62:d8:
                    d4:2c:92:65:ad:19:76:eb:5a:e6:8e:c2:a7:50:b0:
                    53:67:f0:e7:ad:0e:96:97:fd:f4:6c:df:3a:b7:87:
                    30:64:ef:17:21:b9:5b:10:2f:33:06:c9:e7:e0:1f:
                    92:81:9f:ad:7d:7d:b5:ed:c4:88:b4:76:fe:f3:5d:
                    6e:be:47:41:5d:49:79:b4:82:f6:70:bf:90:f8:e5:
                    3e:86:d2:6c:c7:ed:98:44:fa:56:89:42:dc:dc:74:
                    42:e5:dd:c0:16:fa:f2:6c:01:33:8f:c6:b9:d0:43:
                    ca:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:DD:A8:78:95:78:B6:89:EC:63:E2:1F:8E:26:23:EA:90:7D:59:57
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3739663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:79f::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:4a:81:a6:aa:c8:13:87:c4:c8:fb:93:41:37:65:c7:db:91:
         2c:1a:fe:ae:90:a5:c3:75:f6:0e:53:b4:c2:05:d3:15:ac:93:
         31:a9:33:79:45:3c:e8:d3:09:ca:77:0b:0e:12:65:60:43:3e:
         9c:9b:9a:91:1d:89:7d:0d:77:c6:98:87:6c:36:00:8c:33:fb:
         f4:3e:5d:2e:dc:07:39:9f:40:d3:58:95:d0:4c:d8:bf:66:14:
         0f:5a:46:d5:f9:d0:7b:15:15:ce:fc:7c:a8:f6:54:b5:3c:5f:
         3c:1b:14:d7:ad:72:90:81:71:89:0c:a7:53:7c:59:db:81:89:
         6a:7d:d5:da:a7:e4:02:a0:8f:bf:d2:36:77:b3:c2:23:bf:08:
         d4:f2:2d:0b:21:aa:86:0e:3d:81:21:c9:08:e7:7c:50:bb:61:
         aa:95:6c:a1:b4:42:ec:6b:b7:0a:40:ac:d3:b0:01:7b:6f:6c:
         cf:63:5c:3f:3e:b7:a8:1c:18:91:63:47:dc:6e:44:06:fa:eb:
         0e:8e:a3:f9:69:09:04:ce:6a:6d:6d:79:eb:a2:95:3a:07:48:
         45:a7:14:f7:68:58:c7:cc:63:4b:79:da:02:3f:5b:b3:a0:13:
         a5:c3:09:28:34:89:56:6b:18:06:b3:90:7b:4b:e0:fe:69:f1:
         81:22:43:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:26 2024 by rpki-client on console-ams.rpki-client.org