Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631303a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a6631303a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          4TRPrUf2O79f+kyYeZwOGmOQP5XUxF4jSOvLeEeOIio=
Subject key identifier:   A9:A0:D0:CE:AB:FD:BC:7F:C7:EA:4C:0C:88:AB:4C:12:3D:D7:35:51
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       5D111945A64EDAF79E63943E8EA3807C572C24BA
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631303a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 23 May 2024 12:58:16 +0000
ROA not before:           Thu 23 May 2024 12:53:16 +0000
ROA not after:            Thu 22 May 2025 12:58:16 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:f10::/48 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 08 Sep 2024 06:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:11:19:45:a6:4e:da:f7:9e:63:94:3e:8e:a3:80:7c:57:2c:24:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: May 23 12:53:16 2024 GMT
            Not After : May 22 12:58:16 2025 GMT
        Subject: CN=A9A0D0CEABFDBC7FC7EA4C0C88AB4C123DD73551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:03:dd:28:92:76:83:2c:a5:81:c1:a2:0e:f0:
                    04:c6:80:80:79:18:00:d7:23:c6:de:da:2d:53:f1:
                    87:6a:cd:44:69:66:55:11:60:9d:84:9b:1d:78:99:
                    b5:27:c0:15:c4:1c:ee:01:b9:f1:97:23:dc:77:6d:
                    40:cc:53:69:16:cb:71:71:56:96:c6:f0:96:1e:d2:
                    9f:ee:c7:c7:f4:88:ab:30:dd:6a:20:87:1c:1b:0d:
                    3d:14:7e:3f:4c:5f:15:f5:46:c2:73:40:c9:4f:3e:
                    38:0e:71:8f:ad:c1:3b:d8:da:b9:9e:b5:67:aa:af:
                    4f:ab:5b:51:ee:51:38:b2:e0:9c:97:a3:96:ff:92:
                    23:d3:72:6e:ca:64:bf:dd:3b:df:d9:a2:0f:71:07:
                    a1:61:8b:ce:62:89:94:36:e2:fc:05:9d:0b:e3:c6:
                    f2:01:5f:95:7a:d6:7e:12:f6:92:8e:de:37:41:a5:
                    ef:63:28:32:47:2d:c2:99:0c:c8:c9:bd:e3:d8:e9:
                    84:22:6a:d6:2c:7f:cf:74:c8:62:3d:20:d0:94:d4:
                    ab:d8:5f:fc:4b:17:aa:c4:46:d0:0a:71:0a:8d:bb:
                    c0:d5:37:21:dc:78:e3:ad:d6:78:32:01:b6:47:0f:
                    94:35:e8:2f:b2:bd:43:76:51:9f:03:4d:aa:20:1c:
                    f4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A0:D0:CE:AB:FD:BC:7F:C7:EA:4C:0C:88:AB:4C:12:3D:D7:35:51
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631303a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:f10::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:fe:cc:94:68:54:3c:c2:a2:54:79:bc:9d:92:fc:4c:0e:32:
         fb:d5:bf:51:01:f3:53:80:72:ba:0c:9b:61:a1:fd:2b:ba:40:
         49:7f:89:2a:1a:e5:91:0e:4e:60:61:b3:40:73:a0:3f:84:7c:
         ca:98:a5:b3:7a:05:c3:a3:5b:79:03:dd:ea:ba:b6:17:77:b7:
         0e:ae:79:56:2b:fb:79:54:c2:ee:b5:af:4c:a2:93:db:e4:f3:
         33:de:a0:d8:3a:e9:84:6a:5b:e6:a1:e1:40:6a:1c:1a:34:a8:
         94:c5:9c:8e:2d:f9:50:d8:d4:f5:45:a3:de:85:c7:30:0e:39:
         4a:a3:1d:43:22:2b:dc:d5:4f:5e:a9:0b:60:c6:51:0b:ad:13:
         47:e3:01:fc:36:e6:6f:fa:22:41:85:09:7e:af:e3:d4:4b:1c:
         3d:3e:db:86:f2:71:2f:6f:9b:54:5c:2d:24:ee:1b:d7:eb:72:
         29:65:26:05:5e:52:4c:6b:0d:a5:47:66:d6:2e:3c:16:92:89:
         6a:71:99:cf:2d:54:d2:10:68:64:7d:ff:e6:db:5b:2e:06:7d:
         3e:a8:9c:60:25:bf:c0:6b:be:1f:35:1a:91:59:0b:e3:82:82:
         2b:b2:2d:8d:aa:03:22:60:81:b4:07:5b:38:33:25:20:8c:49:
         18:4c:74:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 7 23:17:43 2024 by rpki-client on console-fra.rpki-client.org