Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3963663a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3963663a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          mDyGd25HNlLIZZpovIz7A3H8giJybfFsrQf7fn7NXuM=
Subject key identifier:   FF:B3:F5:56:48:DF:57:9C:11:DC:42:F6:5D:9E:3E:9A:B4:33:E3:45
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       4ACA6EC20DCAB668DC5FBB4E96D37257708CE6C3
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3963663a3a2f34382d313238203d3e203532303235.roa
Signing time:             Mon 19 Aug 2024 04:04:47 +0000
ROA not before:           Mon 19 Aug 2024 03:59:47 +0000
ROA not after:            Mon 18 Aug 2025 04:04:47 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:9cf::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:ca:6e:c2:0d:ca:b6:68:dc:5f:bb:4e:96:d3:72:57:70:8c:e6:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 19 03:59:47 2024 GMT
            Not After : Aug 18 04:04:47 2025 GMT
        Subject: CN=FFB3F55648DF579C11DC42F65D9E3E9AB433E345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ac:f6:81:49:9d:95:d8:10:eb:85:2b:11:ca:
                    52:8f:b3:c8:9a:9b:c6:48:04:51:a2:64:fb:05:e4:
                    23:37:c9:70:57:42:40:7b:4d:c1:98:8c:f8:8b:31:
                    cf:1f:f7:70:1a:ed:d8:c4:c6:8d:9d:8b:22:29:10:
                    0c:ee:ef:c4:ac:e5:e2:37:dc:b6:3c:a3:51:79:bc:
                    f6:67:63:c2:3d:a1:4c:a8:ec:4b:0d:8f:c2:a6:cd:
                    84:e0:15:65:ac:08:9a:35:2a:8b:fc:63:1b:eb:07:
                    67:d4:ee:13:51:2d:03:31:c3:bd:3f:1a:be:39:c4:
                    ce:a6:18:af:d4:b3:3c:69:f6:cd:78:16:92:18:ab:
                    14:f5:89:6b:57:04:a5:23:27:f9:86:bb:25:b7:e6:
                    8e:69:5b:d1:e3:cc:c2:08:b1:69:d8:8c:fd:a4:db:
                    fd:30:65:e3:4d:02:09:04:5d:ec:b6:9f:70:bc:e8:
                    c7:66:a3:b0:1a:79:db:4f:97:2e:54:58:25:ab:ee:
                    33:63:7e:90:2a:62:49:4e:66:f3:6f:5a:ee:09:98:
                    4d:5c:f6:86:21:38:29:e7:e3:9b:a2:b5:80:27:56:
                    0f:7d:fc:b8:b8:78:6c:33:60:09:4f:cd:28:09:b8:
                    35:4f:30:ea:59:2f:f0:6d:05:ab:9b:66:ef:52:4c:
                    21:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:B3:F5:56:48:DF:57:9C:11:DC:42:F6:5D:9E:3E:9A:B4:33:E3:45
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3963663a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:9cf::/48

    Signature Algorithm: sha256WithRSAEncryption
         37:fa:cd:1d:1e:36:f8:14:27:82:87:ae:44:9b:36:aa:7b:57:
         94:0e:3b:85:df:e9:ec:5f:e4:ca:76:dc:6a:e5:1e:5f:7c:f5:
         56:4f:bc:55:0b:d0:d9:bb:0a:7f:64:7a:17:02:b8:a0:be:24:
         80:35:84:83:16:fa:48:58:61:7b:fd:a2:1e:2a:09:2a:6b:4b:
         9b:07:e2:69:fd:6f:f1:ad:7e:12:0e:8d:a7:d0:e4:09:f0:4d:
         44:82:8d:95:61:49:6e:a0:b4:cd:9f:c1:ea:1b:47:f5:f3:bf:
         80:45:a2:0b:d4:7a:ac:6f:31:70:39:6d:e6:11:a4:a5:96:e0:
         a6:67:a4:5e:70:6e:fb:a3:12:f5:96:3c:f8:b8:bd:af:d9:05:
         1e:9a:90:6d:22:2e:57:0e:c2:e0:e8:6a:f9:a7:6c:35:e2:1c:
         83:83:18:38:dc:12:16:d8:fe:b6:b7:b5:d0:66:b9:28:3f:aa:
         e2:c3:db:db:ad:e1:ba:a1:c7:fc:f2:67:81:56:b5:bc:b1:cc:
         06:cf:6d:23:e9:ac:06:93:d9:fd:71:2a:96:13:92:ca:5f:f1:
         a4:31:e1:ad:2b:1c:c8:64:09:e4:fb:3e:c8:4c:3c:68:d5:76:
         6c:ca:3f:f7:e4:4c:cb:28:e5:18:8b:cc:f8:dd:17:b6:c0:2b:
         2f:96:87:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:26 2024 by rpki-client on console-ams.rpki-client.org