Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6331623a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6331623a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          zxGJFYzrVYuRGX9Z3oMIGJEB0CjdS9CSXScSPLlzjvc=
Subject key identifier:   69:77:85:01:58:54:EC:06:36:1C:D8:7A:93:75:34:1D:8C:C6:B5:E4
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       309A0B2F8612E022AD983A17DCC9D033CAF4E801
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6331623a3a2f34382d3438203d3e203532303235.roa
Signing time:             Wed 11 Oct 2023 16:19:24 +0000
ROA not before:           Wed 11 Oct 2023 16:14:24 +0000
ROA not after:            Wed 09 Oct 2024 16:19:24 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:c1b::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:9a:0b:2f:86:12:e0:22:ad:98:3a:17:dc:c9:d0:33:ca:f4:e8:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Oct 11 16:14:24 2023 GMT
            Not After : Oct  9 16:19:24 2024 GMT
        Subject: CN=697785015854EC06361CD87A9375341D8CC6B5E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:60:d8:83:e3:2e:ed:7d:b6:ab:d6:07:99:c9:
                    cf:42:ab:1c:d3:75:0d:8c:b1:87:2c:f2:e2:02:28:
                    06:9c:be:e2:3b:c5:7d:5a:7f:ed:3b:53:95:98:d2:
                    74:9b:aa:0f:96:fe:48:0e:f9:8f:14:d9:77:88:87:
                    18:9a:02:b6:b9:ba:62:79:ee:99:cc:2e:38:32:9a:
                    12:ed:ec:32:a3:d5:8b:57:94:08:fd:1c:a3:97:51:
                    34:e2:a1:57:57:37:9b:ab:b6:40:c2:d8:0b:56:dd:
                    6b:94:49:e6:6a:fb:fb:75:a3:c9:63:04:0e:b3:50:
                    db:d4:21:ba:94:29:f9:a1:8a:85:ed:13:af:1b:b5:
                    ae:a4:6d:43:e1:95:c6:eb:a8:be:68:c7:81:1c:71:
                    d2:95:65:f2:b5:48:12:fc:ad:26:19:6e:67:54:b2:
                    23:1f:9f:a9:25:93:7d:6a:87:ad:46:33:c6:7a:80:
                    84:78:85:bc:9a:d0:31:82:70:d9:88:78:bb:3d:65:
                    ab:76:c6:26:b1:d3:f6:01:e7:da:31:9f:d8:c8:c6:
                    23:7b:70:01:aa:00:c5:19:ce:3a:1b:e0:4e:ff:2f:
                    df:42:70:df:cd:6f:ed:14:6b:19:19:35:59:9a:05:
                    b6:1f:ea:f7:bb:73:4c:7c:87:28:ce:30:08:8c:74:
                    63:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:77:85:01:58:54:EC:06:36:1C:D8:7A:93:75:34:1D:8C:C6:B5:E4
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6331623a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:c1b::/48

    Signature Algorithm: sha256WithRSAEncryption
         19:f8:2f:d6:82:49:25:18:fe:e4:ae:49:f8:c8:a0:1d:42:34:
         f2:32:d8:5e:28:35:db:e9:4e:27:ed:e3:21:60:9a:db:97:6d:
         82:96:0b:6c:86:54:64:27:11:73:97:52:67:53:22:6e:09:3b:
         03:89:78:8a:4f:47:a1:2e:51:f8:af:80:89:5d:d8:b3:5a:6d:
         49:0e:18:ae:08:d7:94:ea:2d:36:db:e1:7a:da:a3:e7:ef:0a:
         d5:dd:b2:d0:70:a4:be:88:97:3d:b4:83:a3:15:aa:ac:bf:c5:
         7d:a4:55:21:74:e3:36:84:f8:d0:cc:98:99:72:35:2e:0d:ba:
         cf:33:29:49:a5:14:68:01:81:7d:ab:c8:34:fa:d3:c0:16:23:
         dd:25:3a:20:74:d6:31:a3:d1:61:0e:cd:77:7f:fa:26:79:b7:
         ea:1d:3f:dc:6d:f5:95:65:a9:95:0c:25:0b:fc:11:b5:9d:a6:
         b3:89:91:fc:f5:ad:92:b0:98:15:b5:e2:6c:bd:2d:78:59:d4:
         bb:0a:1f:71:00:b8:27:76:bf:18:c6:e7:a7:d1:4c:7c:ab:59:
         f9:ed:b2:fd:d2:55:58:82:28:66:c4:5e:e8:09:ee:8a:37:10:
         b2:3e:b8:bc:fd:5e:79:46:48:f2:d5:18:67:33:ca:b1:05:17:
         ff:f0:e2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:41 2024 by rpki-client on console-fra.rpki-client.org