Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631303a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6631303a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          HgKx4zul7KpkzS4T3IdM5t9uNTq3mBK+Zux9n6P8zaY=
Subject key identifier:   70:A5:9A:91:64:29:24:12:47:92:89:D4:1E:D4:26:09:50:0F:30:70
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       36DE075ED405509A6FF3E09E7565364D0AE8C64D
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631303a3a2f34382d3438203d3e203532303235.roa
Signing time:             Mon 08 Apr 2024 04:17:06 +0000
ROA not before:           Mon 08 Apr 2024 04:12:06 +0000
ROA not after:            Mon 07 Apr 2025 04:17:06 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:f10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 May 2024 19:28:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:de:07:5e:d4:05:50:9a:6f:f3:e0:9e:75:65:36:4d:0a:e8:c6:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Apr  8 04:12:06 2024 GMT
            Not After : Apr  7 04:17:06 2025 GMT
        Subject: CN=70A59A9164292412479289D41ED42609500F3070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:d2:d2:6b:65:82:dd:9f:43:46:2a:12:37:33:
                    8e:8c:5b:b1:f5:d6:71:fb:14:38:a4:0c:9f:04:65:
                    ba:25:17:3f:e4:60:a8:97:04:38:64:76:1c:1e:b5:
                    77:a0:7c:52:e8:c8:c6:a5:eb:2e:c1:98:fe:5f:80:
                    6a:43:f3:f1:59:ac:f6:ee:70:4e:9d:93:48:60:a2:
                    e6:3c:a0:13:cf:58:ad:58:25:16:a8:d7:92:fe:00:
                    19:f2:0e:2c:97:f8:54:a1:84:9e:d1:eb:3d:0e:96:
                    d7:24:f5:e6:ef:9a:13:79:87:69:5d:66:d5:70:48:
                    e9:8d:27:ff:07:fa:de:90:8e:ba:f2:b3:46:1a:98:
                    2f:da:40:ba:39:41:b3:83:f9:16:8e:76:1f:21:33:
                    7b:82:d1:07:98:cd:1e:bd:59:7c:c5:70:c7:d0:43:
                    54:75:c1:66:6e:61:29:fb:8e:7d:93:2b:62:a6:d3:
                    f2:87:d2:2f:25:c4:0d:71:c1:e1:da:e8:99:7b:33:
                    91:13:a6:03:1e:51:1a:07:10:5f:d0:80:bb:41:24:
                    ce:d1:bc:dc:cc:92:7e:45:b4:01:f0:2d:74:b9:4f:
                    8d:a5:ef:45:d8:a5:51:47:23:ac:6f:6b:cf:fb:57:
                    cc:79:53:19:48:eb:80:91:41:7b:26:7b:0f:20:a5:
                    2d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:A5:9A:91:64:29:24:12:47:92:89:D4:1E:D4:26:09:50:0F:30:70
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631303a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:f10::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:34:18:11:ba:36:f8:ef:60:bf:64:d6:4e:2e:a0:30:46:37:
         1c:87:81:3b:36:92:38:87:e6:82:a9:cd:68:00:ad:f7:c4:7f:
         65:63:d7:52:cb:b0:5d:99:7c:71:ec:12:3b:ed:29:21:15:13:
         21:27:0e:64:f3:aa:9a:7b:fd:c0:0f:9f:f0:7a:ee:df:77:b1:
         c9:41:12:e7:19:65:4b:6f:10:41:0c:1a:b6:de:44:46:8a:68:
         c2:29:56:81:a0:b1:91:ba:c0:ff:e9:bc:78:fc:2c:27:e1:73:
         59:14:3d:a4:bf:06:a3:5e:99:f7:30:58:5a:ab:4e:56:29:6c:
         50:ad:c1:4a:e3:ec:10:19:a7:b0:44:41:f1:d0:6f:0d:86:5b:
         7c:0a:93:23:6d:9d:26:f3:1c:8f:54:3b:f5:3f:0a:f5:00:32:
         92:1e:51:77:37:f8:3a:24:6e:f9:35:9d:c2:b8:7f:cf:65:a7:
         c1:27:e4:7e:9c:82:ea:25:7e:42:a0:50:2c:1a:b3:1d:9b:5f:
         16:be:c7:ef:8b:4c:0d:fa:a9:70:a3:72:45:b8:d8:82:7e:25:
         78:5d:d3:40:ae:37:3e:7d:74:bf:a8:05:1f:e6:cd:89:5c:3e:
         3e:85:27:30:68:e5:98:f9:88:00:cd:a3:49:eb:d8:3f:d1:d1:
         69:d2:8e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 02:34:41 2024 by rpki-client on console-fra.rpki-client.org