Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          Kd74EPbCW2P9C4wfTJZutflmYMpBsjbTfAgg4Ynb3wU=
Subject key identifier:   FB:15:78:04:F3:9A:10:9C:53:43:45:10:27:51:A1:1C:38:60:66:7B
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       1C582D449EB98AABE0E54A3A0767E86FCDE7DA4A
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:48:55 +0000
ROA not before:           Thu 23 May 2024 12:43:55 +0000
ROA not after:            Thu 22 May 2025 12:48:55 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:bdf::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 06:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:58:2d:44:9e:b9:8a:ab:e0:e5:4a:3a:07:67:e8:6f:cd:e7:da:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:43:55 2024 GMT
            Not After : May 22 12:48:55 2025 GMT
        Subject: CN=FB157804F39A109C534345102751A11C3860667B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:12:d2:b2:87:e3:31:b5:32:f3:88:d4:cb:
                    01:ac:5a:33:3b:fa:0a:d0:e5:9a:b6:d4:33:3f:2f:
                    d7:b6:d9:3f:7d:c3:03:13:c5:6f:5d:3c:87:c5:cb:
                    f2:a7:5e:93:09:f0:e2:43:d2:66:d3:00:09:b3:28:
                    ca:50:f9:d9:c6:7b:56:63:ff:97:9f:a3:bb:f9:fc:
                    ff:c5:1c:53:6b:a1:d4:73:88:92:ac:31:85:82:71:
                    df:f7:b7:32:5b:66:2d:98:44:07:19:50:e2:27:85:
                    16:4c:8d:82:56:57:67:4c:bb:b4:7a:11:ba:d9:44:
                    18:78:2e:a0:a8:a2:72:b8:49:0d:28:40:38:e4:f8:
                    d9:13:c2:1a:77:3f:14:27:36:3f:a8:87:25:a0:82:
                    6c:00:5f:c8:d4:ec:cd:0b:b4:89:7a:59:91:a7:9b:
                    32:09:bf:58:25:b9:57:c9:4e:35:c1:cf:97:b9:58:
                    b8:50:36:8f:61:7a:ea:1c:96:29:63:b2:b1:08:c8:
                    5a:26:3b:ee:23:87:2c:7d:a2:a0:3c:d9:e9:2e:6c:
                    cf:2d:83:45:85:08:7d:a4:b7:31:05:c6:f4:4a:ff:
                    aa:3f:26:8a:b4:70:ac:f8:6e:78:2e:ae:29:21:30:
                    00:83:8b:d3:ac:a4:24:49:56:36:a1:8d:44:60:df:
                    c7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:15:78:04:F3:9A:10:9C:53:43:45:10:27:51:A1:1C:38:60:66:7B
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6264663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:bdf::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:31:4e:39:f3:3b:2f:d7:f5:06:dd:31:58:42:98:41:fe:23:
         62:e9:62:a8:db:fa:58:1e:c3:c3:a9:73:9c:3e:6c:f7:de:eb:
         20:08:44:bb:46:ab:a5:50:a4:35:93:ba:bc:c8:7e:e6:c8:8d:
         3a:56:b2:94:f7:4d:92:98:4e:41:64:c9:1b:07:71:6f:e3:36:
         18:29:b3:fd:89:a7:74:63:2e:e2:db:28:b8:ee:4a:aa:cc:eb:
         e4:9b:d8:6d:c3:02:71:09:2f:a4:3c:e8:06:86:57:4f:26:4f:
         e6:66:88:f3:23:66:b0:f7:f5:5d:64:46:5d:50:f0:50:63:ee:
         7a:6d:14:a9:d3:2c:25:42:30:80:56:97:7f:59:ec:87:a5:80:
         c8:76:c6:b3:ab:d3:5c:c9:f6:22:c7:0c:5d:c6:6d:0c:c4:05:
         c5:96:27:38:7d:38:62:8c:8f:d2:47:ce:2d:d8:70:28:81:89:
         18:fa:92:ce:97:59:f0:d2:21:60:10:3b:b3:1b:7a:1c:9c:24:
         d9:f1:74:7a:d3:e9:38:83:85:a6:db:07:42:b0:d8:a7:a9:73:
         75:a5:6b:ad:3f:d1:b7:1a:91:5d:8a:a5:31:36:3a:95:7a:52:
         3a:60:5a:ae:ab:bd:ed:a4:be:df:3a:9a:22:4b:ec:5c:56:a5:
         bb:03:6d:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:17:43 2024 by rpki-client on console-fra.rpki-client.org