Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a62643a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a62643a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          ABvwqfEHlYHhchkEGO4JMRw1xrfQlKyTnviu3Tg6gZk=
Subject key identifier:   9D:84:4F:0C:CA:77:FB:D7:AD:61:96:F6:DC:A1:AE:F5:9A:D2:CB:88
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       692CEBE042E5D68EC195DC8616EE9BD41E89F33D
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a62643a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 Apr 2024 02:56:04 +0000
ROA not before:           Mon 08 Apr 2024 02:51:04 +0000
ROA not after:            Mon 07 Apr 2025 02:56:04 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:bd::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2c:eb:e0:42:e5:d6:8e:c1:95:dc:86:16:ee:9b:d4:1e:89:f3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr  8 02:51:04 2024 GMT
            Not After : Apr  7 02:56:04 2025 GMT
        Subject: CN=9D844F0CCA77FBD7AD6196F6DCA1AEF59AD2CB88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0f:4e:23:80:35:ce:5b:da:ab:a2:34:8b:7c:
                    33:ff:7a:ff:cf:5c:29:87:cc:b9:88:a9:5c:36:d2:
                    b7:46:69:c2:b2:d7:87:4c:b7:60:3c:f7:39:4d:4e:
                    79:a9:56:0e:50:53:9b:8e:20:7c:e4:0d:fb:bf:d9:
                    39:0c:d8:b8:2d:b6:5f:8a:d8:d4:ac:3b:17:87:bc:
                    d3:a7:1b:5c:55:c5:30:8f:27:68:83:b5:a2:ea:dc:
                    ef:97:80:2c:fb:d9:46:51:ee:c8:29:85:9c:e9:84:
                    20:13:ab:1a:c9:2c:38:7c:30:79:f5:1a:46:8e:50:
                    08:d5:51:f5:41:03:43:87:03:15:74:46:8b:27:19:
                    d1:28:65:ac:19:01:15:65:02:c3:7b:f9:bd:d0:68:
                    54:ad:08:de:f9:56:71:75:51:49:11:1d:ab:a6:b9:
                    37:53:04:1f:87:84:d0:22:19:f2:e6:f3:d5:5f:e7:
                    7b:9c:0c:be:a2:92:10:ea:9b:ec:78:e0:04:52:95:
                    09:6b:35:ce:1e:43:db:81:d7:92:d3:7b:8e:90:78:
                    6a:16:d4:f4:2c:72:fc:3c:c1:15:0f:42:15:f5:d2:
                    3b:4b:19:97:17:fd:05:a6:43:8b:8d:4a:35:58:18:
                    a2:1e:b8:92:1f:24:ca:c4:9d:e7:5a:1f:60:ff:ee:
                    5a:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:84:4F:0C:CA:77:FB:D7:AD:61:96:F6:DC:A1:AE:F5:9A:D2:CB:88
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a62643a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:bd::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:fc:ad:dd:bc:c6:ba:9a:13:b7:bd:17:03:2a:80:c7:05:4e:
         35:8a:91:c1:3c:67:a3:11:a5:10:1d:15:55:04:ae:1f:74:76:
         a2:d9:d7:f8:7a:a0:ba:c1:30:f7:46:42:0e:d0:7e:24:0a:b6:
         e8:f2:05:df:1b:bd:f2:78:3f:2a:74:30:09:f7:5d:65:45:47:
         97:43:9a:b4:3f:1b:4d:8d:0a:b3:11:48:e2:60:6e:0e:a8:49:
         54:96:1b:eb:a0:19:5c:be:1b:b9:30:0f:bd:be:a4:d6:ba:4b:
         93:10:ce:ce:ec:9c:ef:51:94:33:1a:7e:b4:26:59:92:f6:e5:
         c3:e0:ca:1b:5b:d0:c1:49:b4:5c:da:3f:92:4e:02:47:ee:4c:
         f3:4d:98:82:d7:cb:7c:91:82:94:9b:29:39:e4:36:fd:0d:43:
         53:26:d3:20:a4:53:36:5c:20:3d:82:45:2a:8f:d5:7f:34:c5:
         4e:3b:69:e0:ae:bf:91:87:67:21:82:9a:70:73:43:d4:a5:2f:
         55:71:33:51:e8:2c:1e:77:43:f8:17:69:66:8a:bf:2b:99:24:
         00:84:b5:5a:5f:87:63:ce:af:14:1f:81:b2:5f:20:70:58:03:
         d7:5c:d4:71:fd:2b:6f:63:45:b4:7b:af:37:94:84:ca:08:07:
         96:d3:5f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 03:05:13 2024 by rpki-client on console-ams.rpki-client.org