Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6561663a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6561663a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          hoKiSLcbx8Zr4QToA36rGUjawmOiaoNuaz4sCXEcGuM=
Subject key identifier:   2F:FD:B6:E3:DA:54:A1:DF:BB:99:88:3E:BC:BE:CA:C8:68:A7:9F:35
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6257541518B492F7B45281440F4F168ADB051ED5
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6561663a3a2f34382d3438203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:48:57 +0000
ROA not before:           Thu 23 May 2024 12:43:57 +0000
ROA not after:            Thu 22 May 2025 12:48:57 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:eaf::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:57:54:15:18:b4:92:f7:b4:52:81:44:0f:4f:16:8a:db:05:1e:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:43:57 2024 GMT
            Not After : May 22 12:48:57 2025 GMT
        Subject: CN=2FFDB6E3DA54A1DFBB99883EBCBECAC868A79F35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:6a:b7:c9:f6:70:b2:65:1d:69:5b:16:a4:
                    10:c7:c8:3e:94:10:0c:69:aa:6c:21:3a:13:38:1c:
                    e4:3f:f1:5f:a5:eb:61:2d:1e:fb:51:e9:7c:ea:6d:
                    d3:e2:4d:95:36:2d:8f:85:7b:4c:4b:f4:87:04:f4:
                    15:02:2f:50:f9:b5:6a:ec:3c:98:c5:13:56:10:10:
                    46:e7:82:67:d8:e5:10:f5:a1:cb:d8:40:a5:c9:bd:
                    f2:47:fa:6a:9d:6e:09:c0:3f:67:ac:85:86:5a:08:
                    b2:aa:3b:11:d2:39:66:dd:f8:8b:24:87:4d:48:34:
                    21:96:c0:bf:a4:f7:72:fb:70:d6:83:6b:79:82:ba:
                    b1:cc:33:bf:c7:95:30:fd:33:07:19:47:47:61:c5:
                    1a:9c:0b:16:07:6d:a0:9b:aa:96:9f:a0:44:56:e4:
                    11:5f:bc:ac:c8:a0:68:91:46:4c:1f:26:a7:a7:cb:
                    02:f4:e7:c3:a8:6a:fe:3e:bb:45:48:bc:6a:42:8a:
                    84:fe:ec:72:10:9f:24:ac:90:73:4b:8b:75:df:09:
                    7e:e5:32:54:d4:5c:66:16:1d:b0:74:ac:7b:cd:22:
                    60:6a:cd:d3:b4:23:7b:fd:62:ba:f3:f9:50:b9:dd:
                    58:28:0d:ea:33:c5:d9:56:a9:fa:ac:cb:97:a5:c7:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:FD:B6:E3:DA:54:A1:DF:BB:99:88:3E:BC:BE:CA:C8:68:A7:9F:35
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6561663a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:eaf::/48

    Signature Algorithm: sha256WithRSAEncryption
         ad:b7:e5:92:7f:53:5c:2e:f6:a4:f4:23:07:06:11:98:d0:06:
         98:d9:16:0a:bd:8d:9e:d8:3d:7c:b8:6a:4d:81:5e:01:d5:55:
         de:2c:dc:33:26:01:96:6e:49:cd:83:27:5c:09:db:59:c6:23:
         60:58:56:01:94:63:8f:aa:82:34:2b:73:99:fc:bb:80:79:fb:
         7c:2a:3d:42:42:dc:0a:13:56:eb:71:28:7f:6d:39:e6:be:aa:
         7e:f7:ff:dc:91:08:a5:50:64:c9:d7:98:44:ec:54:fb:99:9e:
         dc:3d:7a:e8:15:11:37:a1:df:ef:3f:50:fe:f0:62:6d:93:d8:
         f9:d5:3d:a2:11:91:4f:68:00:0a:e6:a6:4b:fe:d5:ca:48:47:
         11:19:15:2d:06:25:80:92:c2:34:2f:de:b7:9c:68:60:bb:85:
         58:d2:41:10:e6:44:7e:d3:02:24:a3:9f:ad:c4:32:b1:0a:31:
         21:a6:7c:08:e1:5a:65:5d:77:77:bf:3d:ef:e3:05:63:66:97:
         0f:1d:98:16:93:21:fc:ae:82:6f:a2:0d:9f:3e:51:3f:96:1c:
         ab:61:cf:dd:ef:7d:59:40:30:ad:6e:95:b6:e2:29:cd:35:0a:
         2d:73:58:14:09:d7:f0:d8:bc:48:70:59:d2:bf:1e:e5:90:4e:
         62:bc:9d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Dec 3 11:04:25 2024 by rpki-client on console-fra.rpki-client.org