Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a39623a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a39623a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          5FLHehnvzWS1VzPY1gXg2ix5iaRuW5OqkzCsdx4EsQg=
Subject key identifier:   61:B4:33:75:83:9E:88:5D:92:CF:0A:5C:38:EB:75:E3:73:0C:EF:D1
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       13BD8366BA91910F480AA3D7E4E1F2E3ABAC80EB
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a39623a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:58:10 +0000
ROA not before:           Thu 23 May 2024 12:53:10 +0000
ROA not after:            Thu 22 May 2025 12:58:10 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:9b::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 06:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:bd:83:66:ba:91:91:0f:48:0a:a3:d7:e4:e1:f2:e3:ab:ac:80:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:53:10 2024 GMT
            Not After : May 22 12:58:10 2025 GMT
        Subject: CN=61B43375839E885D92CF0A5C38EB75E3730CEFD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:48:3d:a7:c3:9f:ef:cf:be:f5:88:cd:7e:24:
                    a6:85:a7:2e:6f:04:f0:4b:5d:b9:69:eb:a0:db:d7:
                    8a:23:6f:e6:b9:76:d9:25:29:59:bd:9c:75:85:b7:
                    41:f2:23:be:1b:48:63:b2:30:07:8c:4b:4f:88:65:
                    ac:cf:8c:06:8d:3b:6d:26:82:74:7d:79:d1:8e:43:
                    cd:a5:5e:1b:48:fd:b3:42:1f:28:51:ed:ed:e0:4d:
                    0b:fc:b4:a5:6a:35:96:0a:34:a1:a0:db:00:6d:ef:
                    8f:7a:77:91:d6:e0:b9:b4:a1:2d:48:4a:a1:3c:9b:
                    e1:f0:49:dc:86:0a:41:e5:35:41:c2:4a:45:b5:6e:
                    ca:5e:bc:cd:5d:35:41:08:0f:9e:6b:f3:27:7b:84:
                    f6:46:ff:4d:7d:b3:bc:3c:42:89:84:0f:8a:58:ff:
                    ea:07:84:1c:27:83:70:ef:07:df:b4:81:fc:6b:8c:
                    38:20:a6:87:78:eb:2d:17:d4:ae:00:d2:9c:8e:cb:
                    36:f1:30:0d:de:04:49:e0:30:17:21:e0:6e:97:77:
                    ab:47:6e:03:6c:11:50:1d:b1:10:f1:21:dc:16:60:
                    6f:30:47:16:69:74:9f:10:93:aa:b9:ca:3d:59:29:
                    87:d3:a0:ff:5e:1a:75:7c:aa:fe:9b:4a:63:4c:95:
                    1f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B4:33:75:83:9E:88:5D:92:CF:0A:5C:38:EB:75:E3:73:0C:EF:D1
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a39623a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:9b::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:f0:2d:aa:af:02:04:2b:c8:57:5c:91:46:47:2f:fc:84:e0:
         da:b2:c4:5d:b5:41:83:6e:bb:d7:30:02:43:dd:aa:46:14:10:
         a8:51:8a:f2:b8:5c:86:82:3d:0f:00:03:b8:bc:11:3d:67:79:
         22:8f:be:39:6b:fe:68:6e:1d:0a:24:ca:37:81:dc:f7:4f:5a:
         b6:93:c4:ec:be:3a:1f:c9:31:05:88:d4:f4:80:45:78:48:cc:
         09:c0:34:6f:e1:f4:32:fa:40:58:88:54:d8:05:4b:66:75:59:
         5b:bb:47:2f:89:9d:9f:b6:20:4e:73:ea:df:26:62:6b:d8:ed:
         4b:ab:67:e8:c0:ab:af:ab:f4:5b:cf:46:1d:06:d7:ba:4b:14:
         6b:07:a3:b5:55:21:74:ff:ad:fe:b7:be:9b:aa:cc:94:f4:2e:
         cb:ad:4a:51:63:fb:de:61:84:a2:90:97:84:cc:3b:4d:f9:95:
         3c:35:57:50:7b:78:92:8c:0d:ec:55:b6:a7:ae:1a:ea:11:84:
         9e:f1:c7:67:e8:77:b3:b1:a2:02:05:22:d9:0a:70:bd:87:ee:
         a2:b4:3c:82:37:c9:25:9a:4e:ba:40:b7:2c:49:06:17:2a:78:
         de:ac:56:d1:97:66:f1:00:6d:ac:dd:a3:24:90:18:ed:3c:57:
         44:18:b2:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:17:43 2024 by rpki-client on console-fra.rpki-client.org