Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32342d3332203d3e203335393532.roa
File:                     3139322e36372e33322e302f32342d3332203d3e203335393532.roa (raw, json)
Hash identifier:          8olMHxcBw9NGLDLX+6XGMvtPIHF7ttVR81EmpDUvnb0=
Subject key identifier:   90:5C:DA:45:56:C8:D2:82:87:11:CB:A9:85:14:C1:F4:35:CD:8B:69
Certificate issuer:       /CN=716ED138312A679CA1B1F88B3EF7301163F16356
Certificate serial:       223B1EC1D3FFA0F54D22BFE39E1D6777F2FA15BA
Authority key identifier: 71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56
Authority info access:    rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32342d3332203d3e203335393532.roa
Signing time:             Fri 18 Oct 2024 17:19:27 +0000
ROA not before:           Fri 18 Oct 2024 17:14:27 +0000
ROA not after:            Fri 17 Oct 2025 17:19:27 +0000
asID:                     35952
IP address blocks:        192.67.32.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.mft
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.crl
                          rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/8B83C5DA03B3CC029D95215A01320597814B38F0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/7afaf1c1b77eeda1a3a2ebada4b4dac89acbf38b3df75d3ce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/63f5ee71-32bc-44e4-a1cd-1226ea3c4797.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 05:41:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:3b:1e:c1:d3:ff:a0:f5:4d:22:bf:e3:9e:1d:67:77:f2:fa:15:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=716ED138312A679CA1B1F88B3EF7301163F16356
        Validity
            Not Before: Oct 18 17:14:27 2024 GMT
            Not After : Oct 17 17:19:27 2025 GMT
        Subject: CN=905CDA4556C8D2828711CBA98514C1F435CD8B69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7f:3d:b7:08:c3:26:a8:61:fc:a9:63:db:f7:
                    61:c7:aa:26:cf:32:bc:03:bf:1a:46:29:e7:cc:de:
                    7c:7a:bd:fd:d0:e1:bc:f8:bb:af:24:7b:26:8f:af:
                    9d:95:ee:81:85:81:cc:1e:d2:f5:42:3b:ef:1b:f0:
                    d8:3b:8e:5b:c1:a9:35:24:aa:32:9e:58:ac:fb:32:
                    73:9f:4b:c7:8e:9e:6b:96:64:af:1a:4f:20:cd:8a:
                    c9:43:91:13:7f:c5:f9:c4:2e:90:6c:44:27:42:78:
                    cc:cf:be:2c:c4:c9:e6:80:a1:4b:4d:4e:4b:e0:36:
                    dc:99:18:2d:7f:c3:a5:8e:2a:da:78:05:e0:6f:21:
                    44:f8:b7:c2:c9:30:73:a3:bf:8a:3a:69:16:3f:90:
                    44:e4:ec:93:6f:8d:1c:19:1e:83:80:20:87:fe:26:
                    cb:81:a8:d2:bb:48:70:5f:05:4d:c4:e0:45:62:5e:
                    5d:f6:87:1e:5d:32:5e:4f:a0:ef:82:c7:74:d8:d8:
                    17:e8:5e:9a:41:32:ee:f0:5c:50:2a:0d:97:d0:0e:
                    4f:aa:a0:ae:d5:39:df:97:ce:85:b9:a1:b1:9f:ae:
                    97:94:fc:ec:b7:70:88:4f:f7:9b:9d:38:52:d1:d9:
                    09:ea:74:4d:fc:29:15:eb:1f:59:01:0b:3f:90:93:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:5C:DA:45:56:C8:D2:82:87:11:CB:A9:85:14:C1:F4:35:CD:8B:69
            X509v3 Authority Key Identifier:
                keyid:71:6E:D1:38:31:2A:67:9C:A1:B1:F8:8B:3E:F7:30:11:63:F1:63:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/716ED138312A679CA1B1F88B3EF7301163F16356.crl

            Authority Information Access:
                CA Issuers - URI:rsync://krill.accuristechnologies.ca/repo/Accuris-Technologies/0/716ED138312A679CA1B1F88B3EF7301163F16356.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/7/3139322e36372e33322e302f32342d3332203d3e203335393532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.67.32.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:7b:a0:34:91:86:b5:fb:ce:59:24:22:66:75:e0:3d:d7:e4:
         07:2c:28:a1:2d:77:06:0a:48:d0:d6:23:cf:c8:eb:a4:63:95:
         6a:83:3f:91:15:07:5c:3c:32:27:b9:fe:e1:5c:8a:7e:55:e7:
         1b:92:6f:75:2c:f3:d6:d6:ee:d0:2f:c1:fe:14:8c:14:97:64:
         05:97:8a:e1:c2:1a:c3:e6:c9:eb:d0:50:e1:2d:91:ea:d8:54:
         be:72:a3:29:ea:e1:ca:df:bf:07:da:42:48:72:e0:2c:4b:8c:
         67:2b:35:f7:58:2d:96:9c:9f:4f:7a:b3:0c:19:fc:b6:da:02:
         a7:3b:03:6e:bc:60:e1:76:d9:eb:dc:18:73:b4:06:5b:9b:8b:
         67:b5:36:98:22:23:9d:cf:d2:a1:2c:1c:77:d1:ef:5a:e8:49:
         8f:9f:49:ae:37:d0:23:aa:24:42:00:1f:c8:6d:6b:76:c9:09:
         ef:76:bd:b9:5a:f2:d8:f1:fe:4a:8d:b8:79:ec:83:30:02:d4:
         59:00:f4:e0:49:a5:14:68:3b:65:5a:23:78:1e:0a:46:f3:6a:
         10:9e:aa:6f:8d:90:17:eb:9a:58:fe:44:79:da:40:01:48:f2:
         82:93:8f:8e:23:83:cd:1a:0c:0f:fd:00:6b:44:66:20:d5:84:
         1d:d4:4f:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 18:47:02 2024 by rpki-client on console-ams.rpki-client.org