Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a64663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a64663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          zryrngvwgBpZ2nn3R9iNlVeJjrqjlzs99mw1FRjq1uE=
Subject key identifier:   31:EF:E8:7D:65:68:E2:45:1E:BA:08:51:02:F8:34:EC:FE:4A:42:99
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6FFC15466FFD7AA507A1735F041B055AFCEBEE36
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a64663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 11 Jul 2024 23:16:51 +0000
ROA not before:           Thu 11 Jul 2024 23:11:51 +0000
ROA not after:            Thu 10 Jul 2025 23:16:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:df::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:fc:15:46:6f:fd:7a:a5:07:a1:73:5f:04:1b:05:5a:fc:eb:ee:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jul 11 23:11:51 2024 GMT
            Not After : Jul 10 23:16:51 2025 GMT
        Subject: CN=31EFE87D6568E2451EBA085102F834ECFE4A4299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:de:a5:2b:8a:08:53:f6:99:1b:a4:11:88:9f:
                    c1:ee:dc:90:26:9e:3b:55:d8:f1:05:9f:a7:db:aa:
                    54:ec:a2:45:df:cd:a3:3f:b8:d1:9f:c8:90:ee:a2:
                    93:c4:2b:7e:57:66:c5:69:c2:a6:69:e6:b9:4e:e4:
                    f0:02:49:c7:f8:6e:75:4f:b5:64:da:4b:5e:6f:d8:
                    38:65:52:86:04:a1:20:69:a9:e8:03:4d:b5:c6:dd:
                    b8:05:d1:81:22:1a:0e:39:e3:84:c2:5d:05:44:6f:
                    bd:39:12:ae:86:e6:68:d1:db:04:83:7d:79:75:15:
                    1d:20:cb:c8:12:25:bb:3b:bd:99:da:35:08:41:d6:
                    3b:a7:fe:99:8a:77:9e:a7:1f:d4:c7:5d:36:30:c0:
                    2e:40:a2:06:f1:02:6f:eb:14:e3:29:41:1c:40:dd:
                    04:e1:7c:0a:4a:64:65:a4:75:21:41:8e:32:77:c0:
                    54:fc:e1:a3:f0:cf:a1:e2:c8:0d:6c:a2:85:c3:3b:
                    0c:3a:66:d6:a6:47:52:11:f0:1a:1b:6b:44:3a:27:
                    82:9a:2f:7e:7a:79:52:dd:01:e4:f4:4a:40:d3:70:
                    b7:28:c2:ed:cc:3b:5d:c3:10:4a:92:1f:81:2e:de:
                    74:41:df:e5:18:a9:5a:ed:b8:99:8e:35:e3:31:51:
                    65:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:EF:E8:7D:65:68:E2:45:1E:BA:08:51:02:F8:34:EC:FE:4A:42:99
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a64663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:df::/48

    Signature Algorithm: sha256WithRSAEncryption
         45:7b:0f:f0:3c:ce:36:11:7e:26:78:ec:55:05:ba:1c:06:04:
         3c:44:89:06:01:6b:4e:ac:c0:03:f8:0c:1c:8e:b7:70:05:dd:
         3d:96:dc:3b:1c:f0:ac:b3:a4:71:eb:21:d8:1f:8a:ab:b1:8c:
         e8:94:23:41:aa:5b:10:e7:9b:96:27:a8:4e:e1:94:65:6b:e8:
         15:14:e0:f8:f9:4e:bf:61:c4:4c:53:f6:65:8a:4e:ae:44:6d:
         29:8c:b4:1b:2d:1a:00:10:72:96:12:70:3f:65:9b:33:30:d7:
         8f:47:ee:bc:20:e3:14:1e:f6:d6:8b:dc:fb:47:1e:af:0f:04:
         ea:99:16:85:11:da:6a:6e:94:a3:23:dc:b4:f5:aa:4e:36:f2:
         1a:06:34:90:e4:82:42:6e:6e:09:16:a7:8f:d1:50:a1:34:fe:
         44:cf:4b:a0:c1:28:a0:b3:a9:5b:c0:b5:a3:96:34:a6:cc:b5:
         15:0b:cf:1c:11:47:77:76:d1:53:86:2f:8e:73:c6:86:0b:da:
         b8:3f:e0:85:e8:e3:2d:82:87:83:84:c7:e8:c6:d4:4e:38:f5:
         57:c2:fb:95:df:d4:d0:5b:08:27:32:e0:8f:ea:5b:01:40:33:
         95:f4:3b:7a:01:88:c5:16:45:7c:13:6b:86:4a:85:ae:1b:0c:
         68:6f:1c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:48 2024 by rpki-client on console-fra.rpki-client.org