Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6165663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6165663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          1S32wXGmXniliBpAmsJvdYArD76pQVcMyot5pDayo+s=
Subject key identifier:   DF:4D:B7:B4:7E:2B:68:BC:DA:06:3C:06:C4:EE:45:C3:AD:81:2B:00
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       22B112443F1B0DE14D7B294BFA3FABEADB1A9C6A
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6165663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:50:18 +0000
ROA not before:           Thu 23 May 2024 12:45:18 +0000
ROA not after:            Thu 22 May 2025 12:50:18 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:aef::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b1:12:44:3f:1b:0d:e1:4d:7b:29:4b:fa:3f:ab:ea:db:1a:9c:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:45:18 2024 GMT
            Not After : May 22 12:50:18 2025 GMT
        Subject: CN=DF4DB7B47E2B68BCDA063C06C4EE45C3AD812B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ef:98:98:89:e6:92:76:3a:95:0d:65:70:80:
                    1c:6f:d0:23:25:dc:12:5b:fa:55:1e:51:65:1d:6a:
                    a4:1d:ea:3a:0b:51:1e:cf:95:1c:b8:5e:91:cf:9f:
                    2a:79:28:63:a8:34:cd:f8:34:7e:c9:65:02:32:14:
                    9b:d5:1e:be:ea:4f:88:32:d1:ea:a9:a6:2a:74:cd:
                    ed:39:81:4f:de:12:79:fd:e1:63:f9:b8:47:75:72:
                    00:67:8c:aa:57:59:4e:10:e9:df:40:58:56:7b:3d:
                    92:42:ab:d4:09:b4:f7:31:f9:b6:c3:cf:aa:01:34:
                    cb:ee:9b:74:e7:a9:0f:45:9d:81:15:b9:aa:1a:2e:
                    7c:8f:fa:d7:85:81:9a:0e:0a:f7:4b:98:d7:5a:51:
                    d2:86:45:40:2f:12:af:4f:5a:a7:bf:72:33:57:9d:
                    cc:73:6d:7a:65:1b:b5:02:3e:41:83:1b:23:e0:c2:
                    b7:ef:d6:82:40:fd:56:b6:61:58:be:3b:88:83:01:
                    76:b8:1a:ab:0a:86:e2:5c:02:c7:f6:68:81:7b:bc:
                    49:f3:6b:53:9a:21:cd:ab:af:fe:63:ba:3d:ac:7e:
                    6d:15:98:a8:07:9b:24:e8:ea:f9:15:e4:31:d9:ee:
                    df:87:80:37:fb:6c:67:37:06:53:f0:02:3f:57:e2:
                    5d:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4D:B7:B4:7E:2B:68:BC:DA:06:3C:06:C4:EE:45:C3:AD:81:2B:00
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6165663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:aef::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:72:8e:6c:7d:2d:1e:d9:89:ab:bd:20:a1:3b:03:2d:30:ee:
         55:a0:6a:72:64:25:13:1f:d4:c8:02:0a:24:f1:7b:19:45:16:
         8f:bd:51:6a:11:09:84:7c:5b:4f:9c:39:27:54:31:66:d5:a6:
         17:27:df:6e:d9:a5:08:da:dd:f0:f1:72:07:a2:77:b9:4d:ee:
         99:56:c8:b6:39:10:24:3c:32:0f:c2:9d:ce:07:9b:5a:bb:88:
         47:dd:c0:bf:be:15:50:fa:6d:50:d4:e1:8d:34:53:3c:6f:76:
         a4:14:ca:d0:50:29:78:8d:a4:48:36:22:e5:55:b8:0f:9b:e8:
         aa:c9:db:8b:53:9d:9f:b9:90:8d:3e:38:fe:14:54:00:d4:65:
         ff:37:d4:40:b6:ba:c3:0b:07:a7:cc:b1:02:4c:95:21:d4:fc:
         cf:63:b3:ec:5c:41:02:14:31:d2:6a:6d:47:dd:f5:ba:1e:0a:
         14:5e:26:27:ef:7a:d4:28:68:c7:ec:f2:98:2a:19:93:2b:17:
         ca:22:64:79:75:f7:a4:5a:bc:2f:41:e9:10:26:20:36:02:dc:
         cb:5f:8c:70:90:a2:93:e9:ae:28:64:7a:07:e5:39:d3:7e:a0:
         a3:65:81:17:a2:3c:53:12:2e:60:dc:22:88:31:83:57:53:d6:
         b6:6b:d9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:32 2024 by rpki-client on console-ams.rpki-client.org