Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          5RX5l6TsY+aQQqKDZC9VU3FPulbB6CYd/JRdlIDNl10=
Subject key identifier:   17:3F:DA:06:CD:4E:1A:6D:3E:F0:1F:76:94:C9:0C:38:4D:D1:3F:DD
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2CC5E387D5F3B5F0194E57C84329B449AE600B41
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 11 Jul 2024 23:16:50 +0000
ROA not before:           Thu 11 Jul 2024 23:11:50 +0000
ROA not after:            Thu 10 Jul 2025 23:16:50 +0000
asID:                     52025
IP address blocks:        2a05:dfc4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:c5:e3:87:d5:f3:b5:f0:19:4e:57:c8:43:29:b4:49:ae:60:0b:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jul 11 23:11:50 2024 GMT
            Not After : Jul 10 23:16:50 2025 GMT
        Subject: CN=173FDA06CD4E1A6D3EF01F7694C90C384DD13FDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:b1:c6:17:ce:1a:d5:ca:fa:8e:65:04:33:0d:
                    0b:e2:58:a4:71:74:ba:77:bf:4b:42:4e:c7:6a:df:
                    10:e7:8d:c4:5c:33:f0:d4:64:dd:f2:a1:10:61:6b:
                    33:05:0f:99:69:7f:cb:27:0e:18:98:b5:19:1d:7c:
                    79:62:55:04:db:b3:34:16:7f:4f:1e:9d:23:ee:ca:
                    5a:91:dc:bf:7e:38:09:25:52:a6:48:5f:e4:50:0c:
                    6e:a7:d5:d6:ed:ae:52:c5:0e:b7:7e:8d:34:10:f2:
                    7f:84:04:56:1d:4a:d2:ae:53:d2:ab:96:cb:1b:ac:
                    9b:97:27:c4:bd:21:e7:78:fa:0b:1a:76:65:6e:5c:
                    4e:ca:d4:ce:85:ca:70:97:d8:04:92:b4:4d:76:50:
                    ac:5e:ac:c6:cb:d1:8c:82:2c:bf:35:32:d8:11:21:
                    82:cc:56:d7:ce:9c:f1:31:8a:e3:a8:07:89:ba:24:
                    8a:6f:20:0e:33:a7:8e:39:fb:5f:29:a5:46:32:00:
                    ee:5f:26:7e:66:a1:32:71:90:40:bf:63:aa:38:f1:
                    17:36:a6:90:be:b9:e2:88:ee:64:0a:bd:e6:4f:2e:
                    a4:b5:d4:ca:b9:f8:b5:2f:31:2a:e4:72:46:a3:8e:
                    b1:ea:c6:92:1a:0c:78:d2:bc:b0:3f:2b:5b:31:36:
                    e6:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:3F:DA:06:CD:4E:1A:6D:3E:F0:1F:76:94:C9:0C:38:4D:D1:3F:DD
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4::/48

    Signature Algorithm: sha256WithRSAEncryption
         79:72:99:fb:af:d9:ec:4d:48:f0:cd:4a:e5:80:0a:8e:de:59:
         85:3b:c2:99:c4:be:e2:ea:b1:84:4d:0c:e0:3d:fd:ab:9d:60:
         a9:4b:88:5a:07:c9:6f:33:a2:0c:1e:44:91:73:19:09:60:08:
         3a:70:ec:bf:30:3a:88:3e:ae:8d:37:9b:a7:80:30:cf:88:8a:
         de:ce:57:2f:5f:81:7c:09:89:59:f5:41:94:14:c2:0a:4b:33:
         96:90:31:33:b0:91:f1:30:c0:74:04:32:36:99:eb:2f:96:37:
         65:18:d1:f5:86:de:fa:57:40:13:fc:53:d7:24:1e:c2:fc:1d:
         92:89:96:63:ac:ce:db:3d:52:50:8d:0e:05:e2:ba:e4:f2:02:
         98:50:57:ea:73:89:ca:53:f0:a9:01:7d:bb:ae:99:1d:a1:70:
         1b:98:75:65:43:62:40:6c:d0:4b:d9:a4:c3:3a:b3:d3:a0:92:
         3b:66:d1:83:8e:28:82:bf:9a:be:9d:08:21:80:dc:7e:2b:b4:
         96:c3:1d:b1:fe:4b:97:9d:88:85:eb:fa:9d:07:d5:4a:45:75:
         7c:1a:54:20:33:c5:a7:3e:bc:b8:c5:85:16:60:33:44:b9:73:
         60:3a:cd:f0:82:71:79:8e:f1:a7:c5:2c:7c:bd:a4:0c:60:6d:
         6a:a3:5b:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:32 2024 by rpki-client on console-ams.rpki-client.org