Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3165653a3a2f34382d313238203d3e203532303235.roa
File:                     326130353a646663343a3165653a3a2f34382d313238203d3e203532303235.roa (raw, json)
Hash identifier:          m0e+M5jbvKWPK2mueqSUFdZ804ZJLDkaES8zxBupAzk=
Subject key identifier:   7E:CF:8B:C1:92:A7:EC:7B:D0:A4:5C:C9:B7:75:C1:C4:60:4E:30:7B
Certificate issuer:       /CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
Certificate serial:       6B31F16D8D275BD605332DAB275D77E17CEEED29
Authority key identifier: F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97
Authority info access:    rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3165653a3a2f34382d313238203d3e203532303235.roa
Signing time:             Thu 04 Jun 2026 16:32:51 +0000
ROA not before:           Thu 04 Jun 2026 16:27:51 +0000
ROA not after:            Thu 03 Jun 2027 16:32:51 +0000
asID:                     52025
IP address blocks:        2a05:dfc4:1ee::/48 maxlen: 128
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:31:f1:6d:8d:27:5b:d6:05:33:2d:ab:27:5d:77:e1:7c:ee:ed:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F6386FABEA39210B665A6A55AE5DA66BE6741597
        Validity
            Not Before: Jun  4 16:27:51 2026 GMT
            Not After : Jun  3 16:32:51 2027 GMT
        Subject: CN=7ECF8BC192A7EC7BD0A45CC9B775C1C4604E307B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e1:e7:27:8a:f2:ec:a9:82:c3:e3:45:e1:27:
                    b5:67:ce:6c:92:80:02:95:64:b5:a8:ab:c0:b7:4c:
                    b3:cf:ec:29:b9:a1:20:84:c5:5a:ec:08:ee:1a:9e:
                    a5:16:1f:6a:b0:27:32:3a:7d:ce:b0:fe:e3:98:c3:
                    7b:45:55:1e:dc:91:57:a3:e9:af:75:04:2a:02:a2:
                    02:ca:1b:7f:85:9f:38:22:6a:b7:19:99:7b:9a:ee:
                    8b:a4:b7:dd:e8:bd:2e:96:48:6a:31:79:47:c1:a6:
                    72:46:2c:38:3a:91:1e:18:8c:31:97:25:92:73:aa:
                    16:1d:f4:cf:cb:fa:31:12:d1:d2:a9:ad:0e:71:cf:
                    22:fb:c6:8f:3c:6a:bd:56:58:a8:33:1c:ff:69:b8:
                    22:90:04:65:9a:9f:51:9a:4a:3c:23:c9:7c:98:84:
                    52:61:1b:c2:d3:f2:10:cd:bf:da:82:3d:de:73:82:
                    94:90:77:98:e4:0b:37:ab:f9:4b:ac:28:8a:fa:8e:
                    c3:3b:05:7d:64:25:25:07:f5:00:5a:64:05:3f:18:
                    f9:84:d3:9f:00:42:2b:31:d4:75:b3:96:55:f8:50:
                    a5:8d:7f:95:73:44:fa:7f:4f:66:eb:5d:4f:9c:ab:
                    e5:81:11:7a:fd:d2:ab:ac:56:53:25:46:23:b1:b8:
                    42:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:8B:C1:92:A7:EC:7B:D0:A4:5C:C9:B7:75:C1:C4:60:4E:30:7B
            X509v3 Authority Key Identifier:
                keyid:F6:38:6F:AB:EA:39:21:0B:66:5A:6A:55:AE:5D:A6:6B:E6:74:15:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/F6386FABEA39210B665A6A55AE5DA66BE6741597.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/F6386FABEA39210B665A6A55AE5DA66BE6741597.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/8/326130353a646663343a3165653a3a2f34382d313238203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc4:1ee::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:98:22:5c:1a:4a:14:31:86:93:be:ac:bb:ab:42:f1:b1:d7:
         b2:23:f2:e1:c5:3e:7f:ac:86:83:8d:ef:77:c8:62:74:b5:54:
         e7:3f:5b:fb:71:45:b6:e9:e6:dc:ba:c6:7b:18:d8:c6:9f:5b:
         e3:e5:2a:d6:d1:c2:56:6f:65:db:d2:dd:59:96:58:01:8e:8c:
         d4:2e:a7:7f:44:e1:7e:e0:90:7c:37:05:37:0a:5b:79:38:e7:
         28:c0:5f:c3:49:9b:85:4d:6a:d4:94:1d:39:f9:e1:d8:c4:89:
         0d:31:5d:b5:5d:36:76:b4:38:7d:8d:34:1c:c9:11:c6:d7:99:
         45:37:93:4a:67:36:47:d5:85:c3:1e:49:19:69:ac:12:c5:84:
         17:89:d2:c1:af:a9:0f:b3:67:81:57:69:6d:ff:bd:a2:5a:1e:
         12:83:cc:bc:41:aa:84:6e:4a:06:8e:3d:df:ef:c9:0e:ae:b8:
         5c:57:a4:6b:d0:24:b6:4b:31:ea:de:aa:76:99:6c:46:63:79:
         30:bd:95:e5:5a:83:b0:0e:90:07:e7:3c:91:1b:2f:e2:ad:f5:
         95:85:c7:07:d2:cd:18:6a:28:d9:7c:58:e1:8c:c8:f1:6b:2a:
         44:1f:59:0c:b3:93:3f:2a:ed:81:29:ff:7d:90:f3:df:83:20:
         59:9d:da:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 21:55:00 2026 by rpki-client