Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3962663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3962663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          4FnFBaQzfqo9e19Fsl6wmQyRW+ScUaHtkm6kbVRa5sw=
Subject key identifier:   D5:81:91:13:D5:09:9F:8F:70:D3:92:7E:2D:A7:59:00:43:0B:B4:10
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       528C815F09BD5FD6E598A4F729CD4DF0005D9116
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3962663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Mon 19 Aug 2024 04:04:59 +0000
ROA not before:           Mon 19 Aug 2024 03:59:59 +0000
ROA not after:            Mon 18 Aug 2025 04:04:59 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:9bf::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:8c:81:5f:09:bd:5f:d6:e5:98:a4:f7:29:cd:4d:f0:00:5d:91:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 19 03:59:59 2024 GMT
            Not After : Aug 18 04:04:59 2025 GMT
        Subject: CN=D5819113D5099F8F70D3927E2DA75900430BB410
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6e:c1:4b:27:87:eb:1c:a1:d8:ec:e3:15:f8:
                    81:91:77:25:70:f8:f6:3f:13:fd:a4:87:58:d6:2f:
                    67:f0:ee:d8:31:8e:d7:af:a0:a9:12:f0:66:45:37:
                    a7:c5:82:ed:54:f6:b6:43:78:70:41:18:27:43:d9:
                    96:7b:08:6f:36:61:ef:5c:a3:9c:88:00:6f:49:3e:
                    e8:4d:0a:e9:b7:53:74:0d:7f:99:d7:59:3d:68:bb:
                    65:81:f6:e7:77:88:e5:29:de:f3:da:8d:a7:b6:1a:
                    c7:92:34:87:f7:8e:47:2b:10:45:f7:c5:2c:c3:6f:
                    3f:39:13:5d:de:b7:40:a1:38:46:60:76:d5:65:d7:
                    82:1c:6f:49:2f:d5:b8:39:ed:da:9a:bb:dc:9f:1b:
                    9e:eb:4c:cb:a2:83:9f:b0:56:48:a0:7e:b5:e0:ba:
                    85:d0:56:03:3f:cd:8c:86:56:d2:22:e6:c1:c8:ce:
                    b6:c5:bf:0e:3a:dd:a7:04:df:2d:5f:65:59:a2:7a:
                    ac:35:11:4a:de:e9:7d:1c:6f:17:e8:7d:ea:c2:8c:
                    1c:f4:6a:52:ed:c7:d5:07:ea:9f:93:3d:c5:47:6e:
                    dc:13:a5:1c:53:57:97:7b:a0:80:d8:e1:22:a8:92:
                    8b:94:cc:39:28:d1:9c:22:a8:21:be:28:7f:63:36:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:81:91:13:D5:09:9F:8F:70:D3:92:7E:2D:A7:59:00:43:0B:B4:10
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3962663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:9bf::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:22:39:6b:1a:cd:17:96:05:e9:35:c4:ad:45:e4:29:11:dc:
         cf:9c:01:67:c2:1c:7c:14:41:7d:05:b6:6b:52:da:92:37:f7:
         31:4e:a6:96:bc:04:85:f5:ec:6e:92:9d:18:49:11:c1:9d:3c:
         83:b2:8d:a9:04:38:77:29:cb:4f:f2:b4:81:2e:66:72:25:29:
         aa:6a:7b:03:2d:ff:f4:d6:92:7c:86:0c:88:7c:74:16:62:4c:
         da:e9:eb:dc:ab:6b:83:a2:23:f7:c6:bf:fb:04:aa:7d:0e:bc:
         4d:9c:87:9e:e6:6b:03:5d:36:9d:d0:54:78:e0:7f:ca:6d:f4:
         b2:28:fd:f0:4a:4b:f6:f8:54:74:dc:68:07:50:c0:06:b1:45:
         ed:7c:60:4d:b5:b4:2f:44:0c:b6:37:c3:06:73:25:11:e2:f2:
         13:f8:f6:9f:3c:2e:de:cd:b4:5c:eb:e9:71:fb:cb:8c:82:80:
         c6:90:39:e5:db:11:2f:96:21:68:ea:78:fe:44:0d:05:4e:d2:
         09:61:7f:33:e9:a1:82:03:1b:6b:0d:83:14:8b:5c:36:41:6f:
         bf:03:91:32:76:8e:7c:5b:c1:86:96:a5:9a:41:2f:50:d5:6d:
         9e:24:fa:a2:97:1b:1c:95:c0:b9:4e:72:a4:f4:67:27:03:b7:
         9c:44:3e:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:32 2024 by rpki-client on console-ams.rpki-client.org