Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631313a3a2f34382d3438203d3e203532303235.roa
File:                     326130353a646663343a6631313a3a2f34382d3438203d3e203532303235.roa (raw, json)
Hash identifier:          oW8/fIeMJa3/4JC54fHfIcPTXvcP01y1i+Ce1qEr14o=
Subject key identifier:   30:5C:82:61:C8:FB:6E:CF:21:09:2C:1F:6D:B5:83:50:E6:E7:5F:BD
Certificate issuer:       /CN=0AAD221E4070989D4939FACA0F0981AB26E93895
Certificate serial:       6119611570EE7B6339B1F06C929A4771937CEB35
Authority key identifier: 0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631313a3a2f34382d3438203d3e203532303235.roa
Signing time:             Tue 16 Jul 2024 04:16:54 +0000
ROA not before:           Tue 16 Jul 2024 04:11:54 +0000
ROA not after:            Tue 15 Jul 2025 04:16:54 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:f11::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:19:61:15:70:ee:7b:63:39:b1:f0:6c:92:9a:47:71:93:7c:eb:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0AAD221E4070989D4939FACA0F0981AB26E93895
        Validity
            Not Before: Jul 16 04:11:54 2024 GMT
            Not After : Jul 15 04:16:54 2025 GMT
        Subject: CN=305C8261C8FB6ECF21092C1F6DB58350E6E75FBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:7b:ba:7a:db:3b:eb:12:91:26:e2:0d:49:3d:
                    35:be:90:dd:6a:1a:ec:eb:be:79:a1:17:47:bc:b7:
                    c6:c6:65:e8:5a:45:a2:02:ee:f5:98:17:05:bb:4a:
                    1e:ec:12:9c:b2:c4:da:36:9f:f0:d0:a0:63:b0:ee:
                    5a:59:10:c8:0c:25:b8:34:64:90:52:d1:d9:f7:29:
                    22:81:f3:bf:5b:73:4f:2b:54:3c:fd:e1:c4:c7:12:
                    9b:93:e3:d6:bf:c3:92:7a:81:b6:86:58:74:61:8c:
                    f2:c4:5f:24:fd:6b:78:17:17:e6:ec:bb:9f:ae:8d:
                    a2:a1:60:08:b3:8f:eb:8f:9b:58:c3:fe:2b:01:0a:
                    07:68:1e:2c:5b:40:4c:05:db:d4:68:df:fc:fc:0d:
                    2a:cd:9d:b6:08:fa:7f:82:47:46:2c:8f:83:fc:d4:
                    17:96:86:c3:84:77:ea:a4:c9:d3:6b:e5:57:a3:98:
                    17:83:c2:a1:d8:0e:6a:e1:53:b1:c6:28:70:1a:8d:
                    6e:b5:80:46:d8:37:67:7b:f4:b2:54:90:7a:c6:53:
                    85:24:6d:75:e8:de:57:2a:67:5d:6a:04:34:0e:10:
                    b6:b4:a4:d3:01:ce:43:7a:8b:e0:6f:60:a0:f4:a9:
                    f5:8d:a0:fb:98:fc:a0:50:5b:2f:fa:10:a3:a6:36:
                    34:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:5C:82:61:C8:FB:6E:CF:21:09:2C:1F:6D:B5:83:50:E6:E7:5F:BD
            X509v3 Authority Key Identifier:
                keyid:0A:AD:22:1E:40:70:98:9D:49:39:FA:CA:0F:09:81:AB:26:E9:38:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/0AAD221E4070989D4939FACA0F0981AB26E93895.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0AAD221E4070989D4939FACA0F0981AB26E93895.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/2/326130353a646663343a6631313a3a2f34382d3438203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:f11::/48

    Signature Algorithm: sha256WithRSAEncryption
         c9:d9:40:4d:c9:3c:ca:eb:9a:0f:19:b7:62:68:d4:d0:c8:be:
         2f:94:13:22:70:c1:ab:23:1c:2b:37:c5:e3:52:51:b0:5a:17:
         ca:d5:9d:09:66:2d:d4:c0:6e:a9:bd:3b:27:39:5e:9c:90:99:
         03:ee:bd:6a:2f:ad:fe:ec:09:16:c8:30:58:68:ff:18:73:6b:
         3f:7a:e5:11:d2:57:82:5f:b4:5e:d9:31:4a:7d:45:34:6a:9d:
         e5:86:23:7a:a3:48:9d:bb:e7:82:0b:31:a7:bd:bb:97:71:dc:
         3f:f5:5c:12:a9:07:51:8e:8a:5a:ad:52:0e:59:15:7a:37:9a:
         9a:e4:01:5c:39:1c:eb:0b:25:bf:6c:14:7c:41:67:22:91:6b:
         8e:28:8a:9b:b5:02:99:ab:8e:dc:0a:1c:69:b5:96:2a:14:ff:
         4a:fb:40:fd:81:b0:dc:ee:34:20:a3:a5:90:74:1e:a6:6b:dc:
         5c:b6:7e:51:73:bd:ee:58:48:3d:64:c2:db:75:a5:fe:f8:f7:
         ca:2d:35:6c:db:bd:8c:13:60:db:7c:84:41:bc:e4:25:76:a5:
         db:d0:a1:df:61:cb:72:f4:fb:4a:3a:ac:09:cf:60:49:94:2e:
         54:fa:b7:af:9c:d3:c3:f0:c0:f6:21:df:6a:b7:bd:3d:ab:6c:
         78:95:18:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 05:00:48 2024 by rpki-client on console-fra.rpki-client.org