Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          QoKdZ57X4HkmjTipANzUD60X2fKc2+eHk4JkXcNF7Ww=
Subject key identifier:   AF:14:25:6F:98:43:83:B5:A4:7F:D9:BA:20:CC:FF:07:43:0A:B8:24
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       7FB3C463EB6A18E870986240E7C4A3EE84B5CE7D
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:56:40 +0000
ROA not before:           Thu 23 May 2024 12:51:40 +0000
ROA not after:            Thu 22 May 2025 12:56:40 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:816::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 19:08:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b3:c4:63:eb:6a:18:e8:70:98:62:40:e7:c4:a3:ee:84:b5:ce:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:51:40 2024 GMT
            Not After : May 22 12:56:40 2025 GMT
        Subject: CN=AF14256F984383B5A47FD9BA20CCFF07430AB824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:03:12:5e:45:d2:1e:02:4f:2b:b1:6b:dc:
                    ba:3a:53:a9:6b:fd:04:de:e1:a8:e0:a3:be:4b:f8:
                    39:d6:6b:de:ed:62:52:85:42:20:25:e5:f9:13:ad:
                    95:cb:51:27:ba:f1:a1:a7:fe:b6:62:7f:b5:e1:d0:
                    e1:57:50:6d:f4:25:0b:9b:9f:b6:11:50:d0:1e:f3:
                    92:d0:70:7f:6f:02:58:16:83:b0:45:19:78:81:1c:
                    9e:e6:7c:7b:12:b7:16:7f:ba:56:6f:aa:42:aa:1c:
                    cb:72:94:23:c5:7e:93:44:82:c1:42:a0:59:35:09:
                    8b:42:d6:3b:14:37:2e:c3:aa:e6:78:12:e9:de:56:
                    da:51:d6:8d:7f:d9:0c:ae:b8:0c:e8:8e:dc:c6:3d:
                    f9:dc:c4:f9:9b:71:f5:c2:d7:ea:33:11:8a:cc:30:
                    b3:06:2a:5e:3c:9a:05:d5:1f:4a:f6:d4:f5:5b:28:
                    8a:b5:08:62:de:94:8a:47:78:43:10:9c:f9:84:ec:
                    a1:46:8f:0c:9f:64:ab:b2:97:53:b1:3e:56:ab:58:
                    3e:13:de:2a:87:5c:6c:b4:a1:17:f6:81:1d:88:bb:
                    08:aa:06:ed:5a:e1:26:15:aa:62:3d:ae:d1:85:85:
                    e6:d0:21:43:1c:a7:20:1d:c8:70:d4:70:a5:85:bf:
                    f4:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:14:25:6F:98:43:83:B5:A4:7F:D9:BA:20:CC:FF:07:43:0A:B8:24
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3831363a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:816::/48

    Signature Algorithm: sha256WithRSAEncryption
         c1:f1:8c:6b:04:f0:6a:9d:f9:4d:b9:9f:ea:74:ea:49:7a:2c:
         ea:49:ce:95:96:2f:2a:67:b6:c0:3c:f4:e1:8c:73:9e:c8:9e:
         7c:08:2f:d0:4a:11:46:38:4c:f3:73:78:93:f7:17:a8:61:81:
         23:2e:29:96:6b:66:78:fd:ea:f9:69:bd:1d:e7:5f:75:20:15:
         ac:6a:f7:e2:ed:57:1d:0a:56:07:14:0a:41:ab:c3:f9:5f:ed:
         0c:d1:7d:67:9d:ae:c1:85:53:48:ea:de:4f:56:4c:44:19:31:
         4d:e9:b6:a0:c6:f7:db:26:6c:b3:02:f0:5e:11:30:9f:ef:aa:
         b9:3c:fe:22:f7:52:df:15:63:77:9a:ee:f0:99:48:51:f8:12:
         96:d0:a0:89:91:96:11:eb:84:33:50:73:2e:39:e4:5b:7b:26:
         9a:75:b3:71:c3:2f:ed:7f:56:45:45:1c:c4:d3:be:6f:8c:e0:
         18:51:9d:f9:44:09:df:5e:ba:d2:94:51:af:eb:47:7e:6b:e0:
         53:70:04:a0:a5:60:83:3f:e7:92:d8:44:83:96:62:e2:b8:43:
         f0:d0:32:b2:5c:a6:b6:64:7a:79:e6:c1:ef:bf:e1:74:2e:5c:
         71:b3:4a:72:d7:7f:51:07:0d:30:ba:fe:f4:29:f7:e6:1f:6a:
         b9:7d:14:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:58:09 2024 by rpki-client on console-ams.rpki-client.org