Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6531303a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6531303a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          uq6aeA6+pJRikHJ8Bhkr/yUk2HDrVw6Op06QOKS2FEI=
Subject key identifier:   25:A7:EE:90:6C:5C:F1:D7:C2:ED:DD:1F:36:CD:B9:0D:25:E5:83:C0
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       327CB902CA35278896954AF0F4D033780AFA5366
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6531303a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 10 Aug 2023 22:47:41 +0000
ROA not before:           Thu 10 Aug 2023 22:42:41 +0000
ROA not after:            Thu 08 Aug 2024 22:47:41 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:e10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:7c:b9:02:ca:35:27:88:96:95:4a:f0:f4:d0:33:78:0a:fa:53:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Aug 10 22:42:41 2023 GMT
            Not After : Aug  8 22:47:41 2024 GMT
        Subject: CN=25A7EE906C5CF1D7C2EDDD1F36CDB90D25E583C0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a4:0f:72:37:67:fd:6b:75:b7:f3:4c:05:02:
                    34:51:da:1c:73:f0:65:17:7e:85:27:10:f4:d9:e7:
                    03:a0:04:14:f7:b2:59:a5:60:cf:58:2d:25:81:e4:
                    f0:c1:ba:c4:19:96:7c:24:5f:02:cf:e6:bb:e4:42:
                    ca:60:85:0f:77:9c:34:77:14:86:b6:49:0d:54:fd:
                    e5:23:58:94:81:4c:1f:24:9f:19:ef:1e:ef:e3:f9:
                    7f:a5:f1:86:d7:44:5f:c4:1f:7d:43:92:00:78:76:
                    bf:9b:04:2c:45:2e:0c:bc:88:66:1c:8f:87:1b:dc:
                    7e:31:ed:12:16:e6:66:93:96:a3:6e:f9:02:cc:42:
                    a7:d3:fd:7f:60:bb:65:2e:3f:b7:1e:7d:f5:2b:21:
                    f0:7a:da:91:19:0c:3d:5b:fd:68:07:12:70:a7:de:
                    35:e5:9d:cd:26:e8:64:d7:29:73:8e:ec:7b:07:ae:
                    6e:4d:0b:43:0a:49:6e:cb:78:96:4d:d5:94:79:ac:
                    e3:2c:29:49:c8:80:99:23:ff:66:23:32:a8:f5:99:
                    37:a4:a3:03:ff:85:79:9a:99:ec:d4:a3:02:0d:1e:
                    56:44:35:0a:40:15:41:03:84:c7:19:05:64:36:e9:
                    8a:11:14:4b:89:83:ff:49:83:45:69:c5:95:11:5f:
                    d8:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A7:EE:90:6C:5C:F1:D7:C2:ED:DD:1F:36:CD:B9:0D:25:E5:83:C0
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6531303a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:e10::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:3c:30:5e:d2:00:05:95:9e:26:12:d1:81:c5:a0:a3:4e:67:
         fa:b3:35:64:45:75:b1:ea:e7:42:dc:6b:50:c9:54:63:a8:f4:
         58:66:05:e8:ab:43:d1:bc:46:37:99:74:af:38:4f:d3:2b:13:
         17:d9:99:8c:97:34:9c:4e:62:4b:18:b9:d1:3f:56:00:46:24:
         76:2f:46:7c:aa:4c:a3:ee:01:b9:74:33:25:17:2c:6b:1c:29:
         84:19:ad:87:21:ce:f9:a7:15:a4:a4:26:1b:9a:82:e8:22:e0:
         0f:f6:e2:90:3b:6a:59:c4:e9:a6:68:bf:ab:14:42:2c:ea:f3:
         43:01:bd:c6:12:8a:df:07:5d:a4:be:0e:64:32:df:3a:4f:0c:
         fb:fe:63:7f:00:2f:76:e0:24:0f:29:3d:27:04:1c:1e:be:2c:
         18:a8:17:68:5b:9a:f5:7c:a0:60:dc:11:e2:4d:aa:db:5d:65:
         84:89:71:d4:49:fc:17:c4:18:c9:ae:3c:14:02:ee:31:59:39:
         37:72:47:5d:ba:69:1e:34:9f:6f:80:40:a3:23:95:04:29:32:
         f4:c2:e3:b0:d1:a4:df:3c:cf:e0:b5:c4:50:ef:21:5d:ff:1b:
         40:be:4c:a6:a1:e3:aa:4d:1b:46:da:2d:24:e1:e5:ec:07:c4:
         ef:5c:c2:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:41 2024 by rpki-client on console-fra.rpki-client.org