Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a64663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a64663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          c11JLQvFoMudqMv6W8+CNirAQapeeQD1nTIikqf/wII=
Subject key identifier:   11:DE:6A:DB:DF:8A:90:56:52:51:80:C1:D5:BA:4D:FF:F2:1D:DE:C1
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       520300C5B9DBDCDDD1C532C9A3B90FA4BCC964BE
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a64663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 22:47:39 +0000
ROA not before:           Thu 10 Aug 2023 22:42:39 +0000
ROA not after:            Thu 08 Aug 2024 22:47:39 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:df::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:03:00:c5:b9:db:dc:dd:d1:c5:32:c9:a3:b9:0f:a4:bc:c9:64:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 10 22:42:39 2023 GMT
            Not After : Aug  8 22:47:39 2024 GMT
        Subject: CN=11DE6ADBDF8A9056525180C1D5BA4DFFF21DDEC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:1e:8d:ed:ad:95:a4:8f:57:fb:be:d8:ad:02:
                    0a:03:ef:ed:be:cc:ff:86:87:0f:4d:30:29:76:12:
                    6d:35:98:69:ce:0d:a8:23:d8:c2:ae:ee:c0:58:10:
                    90:17:81:fe:f2:93:9c:8a:1c:f6:b3:d5:8b:0d:c3:
                    2f:38:c5:ad:50:b6:3e:1b:4d:e3:bf:47:de:a0:bd:
                    8d:f8:3b:05:30:d7:21:9b:78:e4:aa:fd:6d:8d:96:
                    29:9e:48:a1:c7:ca:59:50:ed:03:2d:be:10:c5:8f:
                    a7:33:5a:02:e0:78:49:93:e3:75:14:d5:db:f2:5f:
                    2c:82:5e:40:cb:f5:d3:48:0e:cd:a9:e5:28:40:f6:
                    75:4a:95:35:93:f9:13:9d:30:2a:ec:80:36:a4:eb:
                    72:c3:24:29:46:17:2a:08:2e:84:a2:8e:3c:ee:9c:
                    1b:04:c0:b6:8d:a4:fe:1f:7a:ee:45:f3:44:42:eb:
                    3d:90:e4:ed:90:3f:ab:9d:05:f3:5e:35:00:b7:0c:
                    7d:80:67:22:67:96:9f:cf:ef:70:57:6c:8a:3e:77:
                    5d:02:78:c4:ed:35:93:77:27:03:90:9a:48:df:8e:
                    ea:5e:9a:c8:4a:18:90:f6:a8:9c:93:f0:78:b9:57:
                    c0:9d:5c:0c:3c:db:8a:b7:86:36:57:d4:81:b9:31:
                    96:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:DE:6A:DB:DF:8A:90:56:52:51:80:C1:D5:BA:4D:FF:F2:1D:DE:C1
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a64663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:df::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:43:e4:2a:2c:7d:b2:85:37:92:ac:5d:ff:fb:45:3d:f2:d6:
         06:bf:f8:30:c0:fa:3d:1b:bc:c7:55:3f:2d:85:75:ba:b7:5b:
         a4:1a:08:35:5e:39:12:be:e7:dc:1f:1e:51:46:3e:54:5f:af:
         c7:28:94:ce:38:94:c8:bb:f9:4d:ce:f3:90:0d:a8:c6:23:2b:
         e8:8a:9d:02:38:d6:1b:88:19:5c:28:0a:c8:54:ec:60:b8:53:
         b9:4e:05:f2:e6:a1:9d:81:e5:ef:11:f8:86:03:fa:0a:45:29:
         c4:92:55:90:44:3f:a7:02:23:6f:68:a2:53:60:32:c1:9d:4a:
         c7:0c:d4:ec:94:09:6c:1c:64:3b:87:23:80:9e:b4:82:01:91:
         6f:8e:66:51:90:de:1e:a3:7a:eb:1c:df:53:03:d2:eb:f1:84:
         f7:30:14:73:5e:89:fe:78:7c:f7:44:20:53:81:c6:d1:7f:b2:
         a9:ae:a5:e7:14:11:69:8c:75:97:79:9b:af:92:06:7b:03:a2:
         d4:6f:9c:9a:4f:b5:e0:3c:87:2b:e0:44:44:0e:13:c0:78:4f:
         ee:37:cb:5b:75:56:a4:e7:51:48:98:24:21:84:18:8f:a7:08:
         3b:2d:ad:1d:2d:80:63:56:6b:61:cc:61:57:e9:91:7e:ba:bb:
         7f:9b:ea:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:41 2024 by rpki-client on console-fra.rpki-client.org