Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f33322d3332203d3e203532303235.roa
File:                     326130353a646663343a3a2f33322d3332203d3e203532303235.roa (raw, json)
Hash identifier:          1bDPEmF7IJkB40o9BWoKqb4jbPb0yPaCLMVvng6t204=
Subject key identifier:   B1:6F:CA:A6:38:E7:64:2A:34:0C:3E:E1:AB:CD:8D:EC:C1:14:25:27
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       4F74B328039A0F0ACCE046FE296A7404F5F87EAF
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f33322d3332203d3e203532303235.roa
Signing time:             Thu 11 Jul 2024 23:16:51 +0000
ROA not before:           Thu 11 Jul 2024 23:11:51 +0000
ROA not after:            Thu 10 Jul 2025 23:16:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4::/32 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:74:b3:28:03:9a:0f:0a:cc:e0:46:fe:29:6a:74:04:f5:f8:7e:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jul 11 23:11:51 2024 GMT
            Not After : Jul 10 23:16:51 2025 GMT
        Subject: CN=B16FCAA638E7642A340C3EE1ABCD8DECC1142527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b2:84:9d:a4:15:a5:6e:36:c2:27:33:3b:de:
                    d1:d2:c1:6f:b3:55:79:ec:65:04:23:5d:11:fc:22:
                    ac:54:ff:de:c2:26:58:c0:55:e3:83:4f:37:4c:a4:
                    ba:c6:47:3f:a0:06:92:1c:62:d9:54:8a:d0:75:ca:
                    53:d4:32:64:01:59:3f:8f:89:c3:0b:1b:e6:6e:87:
                    81:c1:37:aa:ad:e8:ae:92:6a:d9:2f:80:54:1f:d2:
                    8c:fa:a3:ff:8f:38:5f:b6:16:d3:6b:b8:77:f2:73:
                    3e:d7:79:77:b6:7c:6e:b6:4f:51:ff:d0:01:ad:8c:
                    d0:b3:53:77:9b:f7:f5:d8:ca:e3:6f:94:59:ef:36:
                    f4:3e:ea:8a:73:f2:d0:60:fb:f9:3b:42:14:2a:0b:
                    a2:0a:80:df:66:6d:20:f6:b8:97:df:6a:e4:ec:32:
                    0b:d0:f8:49:f6:2a:0a:26:8d:e4:fa:d5:69:9e:c3:
                    91:ca:77:00:66:91:05:0d:d5:1f:dd:77:1b:7e:bc:
                    e0:ee:70:0d:13:5d:6c:ef:b7:d8:f5:90:c0:da:f0:
                    32:28:d2:a3:1d:4e:79:db:ed:1b:1c:e0:6e:54:55:
                    02:aa:68:84:64:5e:83:49:a5:f1:44:00:05:f2:1d:
                    f6:f9:ac:40:72:1b:5b:e6:c0:cd:92:86:96:f0:30:
                    43:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6F:CA:A6:38:E7:64:2A:34:0C:3E:E1:AB:CD:8D:EC:C1:14:25:27
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f33322d3332203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:70:c2:7a:f0:b0:1d:49:d6:12:85:06:5e:6f:24:48:d6:33:
         af:34:a6:2a:82:34:8c:b7:49:8d:1b:d3:cf:5c:55:62:88:0c:
         e8:cb:53:4c:5a:8d:bf:36:05:d0:42:7f:23:e9:a4:f6:82:b5:
         c8:0e:0e:f9:27:0c:3a:1f:c5:cc:27:f0:33:a3:a7:5b:f4:3f:
         5b:e1:ef:1b:85:88:06:e3:76:2f:57:76:8f:dd:0b:15:64:45:
         df:86:1b:8f:fa:a6:71:e3:c8:e7:f9:5f:30:17:22:62:1e:8c:
         1b:71:47:b3:c7:fb:df:12:27:a8:c6:84:28:41:fd:15:b3:00:
         17:fe:60:33:bd:bd:e9:4d:a0:4e:0e:40:34:b4:41:84:18:80:
         32:d2:2e:61:16:63:e3:25:da:68:1f:51:b1:b4:1d:dd:89:1b:
         da:6f:a9:21:40:05:4f:24:54:e2:08:54:b7:97:cf:76:9c:bb:
         c4:ff:ef:44:1e:1e:ae:9a:97:8c:b4:3c:91:c1:ab:3b:b3:c6:
         50:a6:91:eb:93:75:7f:13:bb:8e:f2:0b:e2:6f:1e:63:f8:19:
         e8:ec:4c:17:57:65:7b:7e:ba:88:de:5b:eb:74:b9:17:f1:95:
         18:28:8b:a2:fc:32:e5:f0:86:e6:ca:1f:0d:e2:74:6e:f7:a5:
         e0:76:45:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:32 2024 by rpki-client on console-ams.rpki-client.org