Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a65613a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a65613a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          IDblO5XwoNc/U98Gm723OtrHRdJutDQmYZ8JHD/NMzk=
Subject key identifier:   FC:46:81:E7:99:BD:C9:04:B9:1B:B8:E3:6D:51:33:BF:28:57:EE:A0
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       70A04CFD2195EE87436975808D647E7AC20A19E4
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a65613a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 07 Mar 2024 14:34:09 +0000
ROA not before:           Thu 07 Mar 2024 14:29:09 +0000
ROA not after:            Thu 06 Mar 2025 14:34:09 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:ea::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a0:4c:fd:21:95:ee:87:43:69:75:80:8d:64:7e:7a:c2:0a:19:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Mar  7 14:29:09 2024 GMT
            Not After : Mar  6 14:34:09 2025 GMT
        Subject: CN=FC4681E799BDC904B91BB8E36D5133BF2857EEA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6b:27:d7:0b:b6:c3:d3:59:df:99:90:fd:ff:
                    4b:f7:5b:86:de:09:e8:3a:98:e2:1e:06:3b:47:80:
                    0f:45:24:1d:c4:af:0c:f2:68:47:e3:d0:ac:1e:c7:
                    31:f8:b9:61:0b:20:0d:b5:d8:ea:02:ae:b8:e0:9e:
                    29:f8:47:58:5d:c8:24:15:31:d9:e7:8a:9f:9b:79:
                    8d:8e:3b:f0:63:55:64:ff:85:a3:7c:9c:9d:f9:f1:
                    84:0e:ac:64:98:8b:bc:31:42:89:b7:a9:5f:43:f4:
                    f3:82:22:aa:de:c4:7b:32:9c:bf:bc:46:26:1f:7f:
                    43:8c:3b:85:6d:01:cd:16:00:2f:9b:97:32:74:f7:
                    ea:0e:30:18:b6:6f:93:78:8b:20:f5:57:66:aa:e6:
                    9a:4d:c4:9e:2c:a3:c2:6f:84:e0:89:cb:79:ec:a3:
                    8e:95:ce:6f:93:9d:65:50:a9:33:da:ee:e1:a5:67:
                    c9:81:e4:01:88:c3:45:42:c5:82:07:e5:18:78:54:
                    ca:e7:05:57:8f:ea:ae:df:fd:af:02:c4:af:62:af:
                    28:a5:b2:3d:02:5c:66:c5:ed:35:35:5f:77:be:e4:
                    13:98:fa:8d:e4:ee:f4:92:f1:c1:ff:ea:41:9d:49:
                    bd:f6:03:2d:e6:8e:df:46:ad:49:1b:b3:4e:db:33:
                    1e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:46:81:E7:99:BD:C9:04:B9:1B:B8:E3:6D:51:33:BF:28:57:EE:A0
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a65613a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:ea::/48

    Signature Algorithm: sha256WithRSAEncryption
         aa:64:b8:7a:f0:5a:fc:16:6c:76:26:e9:0b:37:be:59:06:da:
         ac:62:ae:64:93:fe:f3:3e:c9:09:30:6f:a1:7a:66:85:b2:18:
         9f:7d:a2:fa:6f:f4:17:ef:fc:38:5d:e8:92:37:44:c6:96:63:
         04:71:1e:a0:b3:af:c5:b2:6a:23:fa:f6:d7:92:a3:0f:30:ad:
         4e:e8:14:36:2c:95:6b:71:77:a7:1a:24:18:b8:e6:ef:12:e9:
         44:34:71:b4:a5:0d:02:31:92:2b:e7:0f:41:49:97:4b:af:5c:
         b8:26:02:38:0c:d3:fc:17:5d:86:29:a6:88:f1:22:48:ec:6e:
         9e:c0:55:7d:6c:84:a3:d3:d0:2f:bc:07:46:9c:b6:e1:a5:cc:
         00:53:1d:76:f8:45:b3:07:4e:50:c3:cb:ae:3d:9f:5a:99:df:
         65:fd:06:ab:fc:14:8c:a8:e3:ed:af:87:98:6b:2c:51:91:32:
         31:3f:37:bd:d0:2b:db:30:7c:cd:53:d5:3d:b8:c6:2c:ef:3e:
         c2:01:b5:76:ae:fd:33:1c:e3:cd:03:7f:ff:3a:be:d1:02:7e:
         8f:1d:5d:62:2a:d7:c2:d4:f5:14:52:6f:6c:99:41:d9:94:3a:
         06:83:c9:13:2e:7f:69:75:da:46:da:0e:37:8d:35:7c:20:71:
         0d:32:d6:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:41 2024 by rpki-client on console-fra.rpki-client.org