Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a38643a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a38643a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          ZtytB2OHt4d14R6yTHNgH1HpDo9eFPb35WDDr3CB40g=
Subject key identifier:   CD:1F:F8:C9:12:22:0F:7F:DE:BA:61:1E:B2:78:17:D5:D0:AE:BD:AA
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6246459F90EDAD2D1D88C9B8E256AF79FCC55451
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a38643a3a2f34382d3438203d3e203532303235.roa
Signing time:             Sat 03 Feb 2024 10:31:40 +0000
ROA not before:           Sat 03 Feb 2024 10:26:40 +0000
ROA not after:            Sat 01 Feb 2025 10:31:40 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:8d::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:46:45:9f:90:ed:ad:2d:1d:88:c9:b8:e2:56:af:79:fc:c5:54:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Feb  3 10:26:40 2024 GMT
            Not After : Feb  1 10:31:40 2025 GMT
        Subject: CN=CD1FF8C912220F7FDEBA611EB27817D5D0AEBDAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:30:07:1a:9f:77:d1:33:0f:c4:68:13:d3:c1:
                    d2:e4:51:2f:d0:ad:65:45:2b:29:28:3a:83:df:d2:
                    c1:9b:c8:5a:2e:6d:b2:25:08:af:10:ab:92:bf:52:
                    5d:2e:17:19:27:77:a3:4d:e5:61:9a:aa:2a:77:fe:
                    87:be:d2:cb:59:ed:d4:79:41:a5:cd:8c:6a:93:77:
                    be:c1:95:72:41:49:96:2f:1d:78:b2:7c:60:48:92:
                    bb:23:8a:37:74:08:31:7c:fd:4e:dc:4c:4e:cd:18:
                    c4:a8:2e:8e:4d:2c:ac:96:ae:43:40:8b:7a:84:fe:
                    e4:c6:61:69:70:0e:2e:f0:c0:ed:2a:59:1d:4a:55:
                    09:96:dc:b8:45:0d:12:80:5e:a1:b8:98:9b:81:95:
                    ca:87:63:2a:24:f1:f7:4f:74:e4:30:4d:56:a8:4a:
                    ee:2c:7b:18:b0:72:bb:7e:f6:a8:90:b3:94:11:0f:
                    5a:d0:85:81:d3:a2:9d:d7:8d:99:32:d5:00:db:99:
                    91:24:e3:7d:bc:13:94:f3:fa:93:54:c5:fb:8a:db:
                    ed:1c:5f:ff:60:7f:5d:c6:82:99:06:99:d5:05:54:
                    eb:ee:9f:c3:05:a5:c7:ba:60:5e:b8:3f:b9:b0:ed:
                    1d:90:e4:f0:ea:d6:ca:a6:f5:ec:ea:0a:28:d7:b8:
                    2a:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:1F:F8:C9:12:22:0F:7F:DE:BA:61:1E:B2:78:17:D5:D0:AE:BD:AA
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a38643a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:8d::/48

    Signature Algorithm: sha256WithRSAEncryption
         6e:6e:04:f0:88:de:74:d5:d1:a8:63:50:6b:9c:bc:ce:9e:79:
         06:b6:87:34:77:5c:cf:e3:a2:04:51:e7:6e:a9:f0:20:b3:03:
         55:8e:af:a6:0f:d4:54:cf:d4:93:47:c7:14:b6:0d:3f:c6:62:
         0a:3d:75:a8:1b:db:2e:f7:ad:76:36:6e:9c:44:35:27:59:5d:
         57:4e:02:b3:c1:da:a4:01:1d:21:06:be:d7:d6:f8:c5:c5:dd:
         93:b8:a3:9b:13:88:de:b0:6a:74:6f:71:28:36:62:d5:d3:30:
         64:70:56:42:ad:fc:71:9a:53:76:53:03:37:03:2c:14:bf:0d:
         f1:82:dc:12:68:49:7e:99:89:17:1f:54:c8:f4:6b:1f:2e:9f:
         6f:f6:ca:c3:80:99:77:12:13:55:16:4d:8f:60:22:8a:93:6b:
         3a:dd:96:c4:01:5d:0c:6d:1e:37:92:1a:09:cb:80:f4:ab:1c:
         2a:d4:4d:d4:01:01:30:16:82:9c:5b:87:c5:f3:46:b1:38:fc:
         1e:8c:7f:d2:79:76:8b:f5:af:34:8a:e9:70:99:46:aa:62:d8:
         63:be:9a:52:c7:48:fa:ab:d2:33:9d:5e:8a:cf:aa:ca:eb:85:
         2c:69:a1:5b:b2:8a:13:6c:6f:4f:a5:3b:0c:7a:33:fe:b4:77:
         91:0f:be:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:41 2024 by rpki-client on console-fra.rpki-client.org