Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          OfIBdYeFxzt/jRpgH5KC1W8D27sLu1Alrw381lJjvF4=
Subject key identifier:   28:E8:A7:2C:BD:EC:94:8E:29:A1:31:1A:01:FA:23:61:7E:03:38:7A
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       343F6BA1EA15418E5007F6895FFC1C4580507CF2
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:58:09 +0000
ROA not before:           Thu 23 May 2024 12:53:09 +0000
ROA not after:            Thu 22 May 2025 12:58:09 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:9c::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:3f:6b:a1:ea:15:41:8e:50:07:f6:89:5f:fc:1c:45:80:50:7c:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:53:09 2024 GMT
            Not After : May 22 12:58:09 2025 GMT
        Subject: CN=28E8A72CBDEC948E29A1311A01FA23617E03387A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:38:cf:3c:7b:4b:68:3b:eb:fc:35:e2:b6:f9:
                    99:8a:96:8a:6e:30:3d:bb:13:cb:b4:49:3c:5d:da:
                    0c:d5:75:36:21:36:91:0e:29:43:d8:f7:6b:72:83:
                    a2:17:15:0b:76:fd:f1:7f:a2:b1:a9:86:cf:7f:bb:
                    7a:0c:67:ca:a3:b1:5f:6d:3a:fe:26:c7:f9:ff:e0:
                    2f:e1:03:06:11:26:3c:6d:bb:6d:19:d4:fd:61:4a:
                    d5:b3:fa:52:80:51:70:e5:97:f9:c7:4c:29:5e:9f:
                    5d:4b:d1:81:71:24:2c:51:31:4e:ea:e0:44:dd:1e:
                    e2:ee:b9:a9:36:7f:9a:b2:e7:2a:e1:28:5e:d5:9b:
                    c6:11:88:1f:03:37:06:eb:c4:ab:d0:b7:40:2e:55:
                    46:d1:87:ee:c5:50:ec:7b:39:58:4b:5a:0d:38:02:
                    e0:f7:81:a4:6b:f6:37:47:77:35:98:1f:17:9b:ed:
                    dd:41:25:a7:bd:23:c9:81:19:f2:db:b2:22:bd:6b:
                    4c:75:c2:4b:2d:8a:45:a2:53:ee:6f:95:9f:8d:f4:
                    40:a0:58:6a:3f:d6:0b:43:5f:be:ad:70:0a:d4:02:
                    b4:1a:28:23:e9:7c:03:ea:32:b0:ef:38:53:1e:e6:
                    a9:db:9a:d1:47:fb:01:03:ac:87:93:d1:e5:70:0c:
                    72:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:E8:A7:2C:BD:EC:94:8E:29:A1:31:1A:01:FA:23:61:7E:03:38:7A
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a39633a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:9c::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:18:53:37:63:3f:5d:7c:04:77:9e:f1:8a:94:3f:b0:96:f5:
         6e:80:d2:df:c3:63:b6:c3:9d:b9:4e:a4:67:19:9c:63:ed:07:
         84:3f:66:f8:24:05:7c:ea:7a:af:4e:de:ef:39:57:2b:82:20:
         ca:3d:ef:f3:0f:31:85:bc:81:64:84:27:bf:bd:a3:74:11:36:
         a3:06:fe:a6:6c:12:05:ed:71:53:ac:ff:7c:28:ad:6c:66:72:
         68:9a:cd:db:98:1a:09:88:fc:07:a1:20:6c:44:dc:9a:af:54:
         34:fa:ec:7c:4c:7c:18:ca:cf:45:66:38:51:9f:a7:8a:65:30:
         99:62:47:b5:cc:67:52:57:56:cc:90:bc:44:c6:13:ff:01:0a:
         f4:f3:00:1b:13:54:1c:3e:11:46:e0:e6:b8:07:f1:5b:2f:4a:
         f1:6d:3b:49:dc:91:86:a6:2b:d8:b3:38:d4:15:04:13:cb:0f:
         e6:0a:c3:83:65:fc:fc:b9:41:43:68:59:94:ab:b3:a6:e4:66:
         d0:c3:cb:66:ab:53:93:9a:2d:1b:54:39:f0:d5:f5:a7:49:12:
         47:14:ff:88:e8:66:cb:09:79:4c:e6:12:ae:cd:bf:6b:a0:00:
         23:5e:02:c1:aa:bd:5d:30:ca:06:de:92:db:de:41:4e:c3:f1:
         c6:10:53:38
-----BEGIN CERTIFICATE-----
MIIFHzCCBAegAwIBAgIUND9roeoVQY5QB/aJX/wcRYBQfPIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEFBRDIyMUU0MDcwOTg5RDQ5MzlGQUNBMEYwOTgxQUIy
NkU5Mzg5NTAeFw0yNDA1MjMxMjUzMDlaFw0yNTA1MjIxMjU4MDlaMDMxMTAvBgNV
BAMTKDI4RThBNzJDQkRFQzk0OEUyOUExMzExQTAxRkEyMzYxN0UwMzM4N0EwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDROM88e0toO+v8NeK2+ZmKlopu
MD27E8u0STxd2gzVdTYhNpEOKUPY92tyg6IXFQt2/fF/orGphs9/u3oMZ8qjsV9t
Ov4mx/n/4C/hAwYRJjxtu20Z1P1hStWz+lKAUXDll/nHTClen11L0YFxJCxRMU7q
4ETdHuLuuak2f5qy5yrhKF7Vm8YRiB8DNwbrxKvQt0AuVUbRh+7FUOx7OVhLWg04
AuD3gaRr9jdHdzWYHxeb7d1BJae9I8mBGfLbsiK9a0x1wkstikWiU+5vlZ+N9ECg
WGo/1gtDX76tcArUArQaKCPpfAPqMrDvOFMe5qnbmtFH+wEDrIeT0eVwDHIFAgMB
AAGjggIpMIICJTAdBgNVHQ4EFgQUKOinLL3slI4poTEaAfojYX4DOHowHwYDVR0j
BBgwFoAUCq0iHkBwmJ1JOfrKDwmBqybpOJUwDgYDVR0PAQH/BAQDAgeAMG4GA1Ud
HwRnMGUwY6BhoF+GXXJzeW5jOi8vcnBraS0wMS5wZHhuZXQudWsvcmVwby9wYXJh
ZG94bmV0d29ya3MvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5ODFBQjI2
RTkzODk1LmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3lu
YzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4NTBkMDYz
ZTAxODU3NTVjOTFiZTNmOWQvMi8wQUFEMjIxRTQwNzA5ODlENDkzOUZBQ0EwRjA5
ODFBQjI2RTkzODk1LmNlcjCBjgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4Zx
cnN5bmM6Ly9ycGtpLTAxLnBkeG5ldC51ay9yZXBvL3BhcmFkb3huZXR3b3Jrcy8y
LzMyNjEzMDM1M2E2NDY2NjMzNDNhMzk2MzNhM2EyZjM0MzgyZDMxMzIzODIwM2Qz
ZTIwMzUzMjMwMzIzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACoF38QAnDANBgkqhkiG9w0BAQsFAAOC
AQEANxhTN2M/XXwEd57xipQ/sJb1boDS38NjtsOduU6kZxmcY+0HhD9m+CQFfOp6
r07e7zlXK4Igyj3v8w8xhbyBZIQnv72jdBE2owb+pmwSBe1xU6z/fCitbGZyaJrN
25gaCYj8B6EgbETcmq9UNPrsfEx8GMrPRWY4UZ+nimUwmWJHtcxnUldWzJC8RMYT
/wEK9PMAGxNUHD4RRuDmuAfxWy9K8W07SdyRhqYr2LM41BUEE8sP5grDg2X8/LlB
Q2hZlKuzpuRm0MPLZqtTk5otG1Q58NX1p0kSRxT/iOhmywl5TOYSrs2/a6AAI14C
waq9XTDKBt6S295BTsPxxhBTOA==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:48 2024 by rpki-client on console-fra.rpki-client.org