Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          PErfDuIvV55DagonfidllEQRzytzbLP0fNgsYDryHfU=
Subject key identifier:   11:FD:95:A9:00:38:CA:8F:61:FA:A8:E5:33:92:37:AB:72:33:0C:DC
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       2BDFD0EDF80044D89CFC0FD262995F29A4EC3793
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:57:07 +0000
ROA not before:           Thu 23 May 2024 12:52:07 +0000
ROA not after:            Thu 22 May 2025 12:57:07 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c1b::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:df:d0:ed:f8:00:44:d8:9c:fc:0f:d2:62:99:5f:29:a4:ec:37:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:52:07 2024 GMT
            Not After : May 22 12:57:07 2025 GMT
        Subject: CN=11FD95A90038CA8F61FAA8E5339237AB72330CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5d:51:83:fb:c1:bb:e6:90:d4:6d:51:f9:b3:
                    9f:f3:90:41:be:1b:d5:fe:d1:34:a7:1b:89:70:e3:
                    c1:4b:e4:5a:20:c2:74:68:55:89:27:7b:d2:36:4b:
                    2a:ca:c0:ad:41:9d:fc:60:81:98:2a:3b:4b:cf:c5:
                    88:9b:6e:27:ad:e2:46:f1:6d:71:ba:79:9d:89:97:
                    4d:46:35:0d:c3:af:5b:37:a7:ba:3b:85:43:e0:4a:
                    75:ac:5b:ed:61:98:47:29:71:8b:e6:b8:d6:36:50:
                    8a:8e:bd:16:29:29:37:fd:bb:ae:13:54:3d:c7:98:
                    3c:95:a8:68:dc:07:01:00:f5:3f:3a:01:4c:b5:2b:
                    ff:94:46:13:9c:fe:c8:5c:91:64:0f:b9:7e:8d:e6:
                    bc:08:1c:d1:dc:bc:30:9f:2c:68:ae:2e:ad:01:ec:
                    c0:34:e7:3d:d0:2a:b1:fc:aa:f1:6e:d2:fe:4a:6f:
                    b8:88:aa:3f:f9:86:33:de:48:c7:d6:aa:13:74:62:
                    80:8c:f0:1b:8c:17:7a:55:cf:69:32:95:d8:d6:b7:
                    e5:b0:4b:d7:be:8c:47:3b:48:23:1e:6a:b5:ed:6b:
                    b3:30:a9:14:67:66:81:8b:01:a3:c0:01:e2:8f:00:
                    88:85:46:20:21:57:87:2f:43:36:ba:fd:b7:61:e8:
                    46:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:FD:95:A9:00:38:CA:8F:61:FA:A8:E5:33:92:37:AB:72:33:0C:DC
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6331623a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:a1:82:72:79:21:95:ec:18:7b:4a:a1:cf:2a:b8:dd:74:3c:
         d0:e7:6c:3c:d9:91:21:85:07:32:0e:dd:10:5d:d3:e4:20:96:
         25:7d:f9:da:6a:7d:d2:46:92:68:68:e7:30:5e:72:dc:cd:16:
         98:68:a0:79:66:7c:8c:3b:46:7a:2b:31:94:a3:e8:f2:3c:f8:
         7c:a1:d4:c2:1a:86:ac:ef:bd:66:4a:4c:24:a0:bd:ca:26:de:
         13:14:25:17:9d:db:dc:81:fb:e6:0e:29:7b:98:31:5f:0c:75:
         17:5a:e2:fc:43:92:a8:22:50:e3:b9:b9:ce:5d:82:fb:55:16:
         05:c7:02:77:02:65:d0:13:a0:37:ec:f6:20:b4:5b:da:45:ca:
         5e:bf:28:a2:ed:fe:6a:1a:98:d1:8a:f9:ca:a2:14:32:66:f4:
         aa:7b:0c:29:a6:f6:49:f7:3e:c6:6f:34:4e:c2:7d:be:a6:ea:
         f4:6c:58:75:28:6b:33:d5:3a:ce:fe:3c:63:59:88:d9:c8:13:
         d1:69:6a:fe:1f:a6:15:d9:d1:49:2e:d5:6b:e8:69:c9:e0:7d:
         bb:2b:a0:cf:17:5e:a1:08:95:97:6c:a3:d9:7c:1d:b5:51:09:
         55:29:21:02:de:3f:1a:ff:dd:cd:19:10:a8:1c:ff:03:aa:ce:
         9d:66:74:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 20:04:46 2024 by rpki-client on console-fra.rpki-client.org