Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a65613a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a65613a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          lZDgkskvNkOjrJmf7DV8SeVIRPcyjSHAdCS9+65z1Rc=
Subject key identifier:   88:C0:16:99:FD:A2:EF:55:FD:E5:77:8D:A1:44:33:05:3F:A9:1F:F9
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       57DF0EB24FF4DEE3D2E90E0FEE4407D8DA49F6F7
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a65613a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:56:58 +0000
ROA not before:           Thu 23 May 2024 12:51:58 +0000
ROA not after:            Thu 22 May 2025 12:56:58 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:ea::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 15:27:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:df:0e:b2:4f:f4:de:e3:d2:e9:0e:0f:ee:44:07:d8:da:49:f6:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:51:58 2024 GMT
            Not After : May 22 12:56:58 2025 GMT
        Subject: CN=88C01699FDA2EF55FDE5778DA14433053FA91FF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:68:27:60:25:fb:9c:b1:e2:b2:70:88:05:cf:
                    da:03:21:a2:c8:6f:8a:7e:9f:5f:d0:70:b2:d6:06:
                    0b:7a:d1:ee:28:a5:64:1b:6f:c0:77:b5:b7:07:8c:
                    1f:5e:71:13:7b:37:60:62:09:b7:0f:2f:03:ab:cc:
                    70:33:6b:af:42:5d:d1:5d:14:e3:fc:38:4f:e5:df:
                    0e:a3:a0:e2:6b:cd:4b:20:5e:03:37:91:1d:97:a9:
                    cd:4c:9c:5b:c6:a4:dc:b6:90:20:0d:b1:5d:be:2c:
                    1e:08:3e:31:ed:19:9f:dd:63:62:6f:9a:aa:46:e2:
                    69:41:c3:e4:19:cb:f7:6f:59:e2:2c:97:e5:f7:97:
                    8e:40:11:f7:6b:a2:25:4c:5e:04:93:e8:9b:96:24:
                    be:db:ac:ab:3f:f8:cd:b9:56:e5:0b:79:58:18:da:
                    db:a8:0d:60:e9:fe:04:a3:d6:05:42:6a:37:42:02:
                    b9:78:11:38:d6:7e:15:88:74:03:aa:46:69:f7:83:
                    93:ba:de:9a:33:ed:67:bd:92:0b:a9:2e:c8:3a:73:
                    3f:a3:f8:7b:65:82:75:fa:8d:d3:34:75:d7:ea:cb:
                    a3:9f:78:7b:ff:b0:cb:6f:4b:4c:a7:c3:02:94:0c:
                    bb:9e:da:b7:43:1c:94:55:30:d8:b9:d3:17:7d:bb:
                    34:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C0:16:99:FD:A2:EF:55:FD:E5:77:8D:A1:44:33:05:3F:A9:1F:F9
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a65613a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:ea::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:8d:31:c3:63:01:3b:f0:ae:cf:2c:7f:d7:d8:a0:a8:a5:91:
         c6:50:7f:41:71:73:35:c4:fb:93:9c:b2:a8:a8:6a:ac:5f:5e:
         c5:9f:56:6f:eb:2e:ad:fb:f1:67:8b:9a:77:fd:e3:92:35:df:
         c9:d9:3d:8d:91:c8:05:c5:04:04:80:a8:97:1a:cf:d1:e4:86:
         d0:f7:83:e9:a1:91:35:a5:e1:26:2a:27:8e:f7:be:2d:61:81:
         10:fa:18:c3:ad:02:af:50:16:c4:ee:8c:bd:2d:1a:fa:d3:d8:
         97:8b:e5:59:bf:2b:79:27:d7:29:e0:5d:ac:bc:85:ec:10:f8:
         eb:df:8c:84:cf:2b:9a:06:50:aa:58:8a:af:da:56:65:b8:55:
         f9:e8:10:e6:af:49:7b:a3:1c:f1:96:80:86:a1:1a:d9:bd:89:
         52:1b:1e:33:e1:65:ac:a6:3b:7b:25:77:e8:6f:a4:92:cd:74:
         87:59:20:66:e2:69:78:38:d6:0c:f8:77:dd:ea:3e:bd:b4:cc:
         42:5b:b5:da:da:f2:02:40:06:c5:ce:44:34:56:f0:fa:31:e2:
         79:61:a1:f6:ce:4c:36:51:9a:ea:e2:79:1f:46:d7:4d:4a:f4:
         5d:b5:52:da:c7:62:56:b0:68:f4:fe:18:2f:cd:90:55:03:91:
         47:28:a7:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 20 21:31:32 2024 by rpki-client on console-ams.rpki-client.org