Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          0OjgjmeoP3Y5I7IsoNFc4wEUyaDL67r/jet9L1Gp4Kg=
Subject key identifier:   95:9C:A8:C5:14:B0:EC:4D:D3:9B:AD:B9:AA:5E:27:6D:E6:F9:37:08
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       191FA7CF6D9233F3B387B3744FD9961C70CB66E5
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 22:48:30 +0000
ROA not before:           Thu 10 Aug 2023 22:43:30 +0000
ROA not after:            Thu 08 Aug 2024 22:48:30 +0000
asID:                     52025
IP address blocks:        2a05:dfc4::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:1f:a7:cf:6d:92:33:f3:b3:87:b3:74:4f:d9:96:1c:70:cb:66:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 10 22:43:30 2023 GMT
            Not After : Aug  8 22:48:30 2024 GMT
        Subject: CN=959CA8C514B0EC4DD39BADB9AA5E276DE6F93708
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:ae:09:c3:65:b3:23:1d:32:cb:a8:00:f5:6f:
                    2f:4c:d8:21:b5:3d:8c:32:dd:18:56:ca:13:ec:fe:
                    8f:fc:99:b0:ec:f9:b6:02:6e:5e:b6:45:6f:2d:37:
                    58:8d:ed:62:b9:4c:23:80:cf:a6:0c:56:4c:56:17:
                    16:3a:13:bf:ed:ec:8a:a1:6c:5d:f9:8b:89:a1:0e:
                    51:14:38:78:a7:6f:d9:70:ae:82:4a:04:b4:c9:af:
                    1f:97:ab:c5:31:94:23:95:62:5b:4a:6b:82:e9:48:
                    ba:a5:41:f0:0b:1c:a4:b6:bc:30:ee:23:18:b1:e5:
                    36:53:70:ec:c1:17:5f:f1:20:a6:53:75:4c:36:8e:
                    0f:18:50:2a:47:d2:aa:2c:9b:9c:7b:c1:eb:84:d0:
                    1d:9c:a2:dc:01:38:7d:f0:f5:3c:fe:4d:10:4e:06:
                    de:2c:df:00:42:e5:dd:42:ee:eb:43:23:6a:de:1f:
                    fb:a6:64:21:e7:11:31:b0:63:20:9f:17:64:6d:59:
                    0a:d2:66:98:da:2c:d2:c3:83:21:80:59:a4:ad:df:
                    cb:fc:bf:27:63:54:b0:6a:76:d3:a0:38:95:19:cb:
                    61:78:78:ae:39:cb:91:a4:02:1d:47:1f:68:c9:a6:
                    6f:64:79:54:c8:9e:6d:f5:13:21:77:50:a3:ee:81:
                    c0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:9C:A8:C5:14:B0:EC:4D:D3:9B:AD:B9:AA:5E:27:6D:E6:F9:37:08
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:91:f4:6e:1e:8b:32:01:f4:17:10:4b:67:65:86:da:1d:f4:
         5f:e4:90:63:5c:65:ab:fb:80:4c:17:63:87:cf:57:5c:aa:2b:
         ad:b2:14:c4:94:af:df:99:a3:09:94:5c:01:e0:31:61:0e:b7:
         23:6d:03:c1:1e:eb:ac:0e:e6:fa:7f:ba:75:76:ae:4b:1b:73:
         f7:f3:15:9b:85:3e:7b:9d:80:e4:0a:89:7e:4f:b1:06:dd:92:
         7d:54:44:ac:12:4d:6c:fd:89:5c:bf:de:66:3e:6e:41:ef:d2:
         07:85:43:d2:28:d7:f0:f7:9b:1f:21:31:4f:3f:56:ee:28:83:
         74:68:99:98:63:47:eb:13:9d:16:ea:1d:30:91:e3:2e:ad:a3:
         e0:96:22:de:33:32:66:01:e9:3a:18:1a:1b:eb:73:7e:0b:2d:
         4f:a5:f2:f2:40:e5:a8:68:86:0b:f1:06:2d:7f:c0:54:95:e6:
         f4:97:21:79:0d:7c:a3:c9:77:ab:26:32:d0:b7:34:23:e6:c6:
         32:d5:32:25:d0:e4:94:8e:e5:7d:1c:e8:0c:89:91:bf:04:ba:
         79:f1:7f:f4:09:aa:68:d6:52:32:09:3c:79:6f:00:71:8b:0b:
         2c:be:46:72:8b:0b:0a:98:c2:d9:4a:77:c4:b8:e8:df:73:ea:
         9e:f9:41:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:41 2024 by rpki-client on console-fra.rpki-client.org