Route Origin Authorization

$ rpki-client -vvf rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa
File:                     326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa (raw, json)
Hash identifier:          B7lSDIrBTgwVQm/vcJcAfhxgJeVcyzUT4n4/zGRIaRU=
Subject key identifier:   0F:E5:9C:F9:21:CD:3C:2B:AB:4A:DC:42:6A:E3:56:4B:6C:4C:48:EA
Certificate issuer:       /CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
Certificate serial:       340EDD5B96297B565A8B40796120A766C58B0A8B
Authority key identifier: 3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
Subject info access:      rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa
Signing time:             Thu 12 Jun 2025 23:21:33 +0000
ROA not before:           Thu 12 Jun 2025 23:16:33 +0000
ROA not after:            Thu 11 Jun 2026 23:21:33 +0000
asID:                     52025
IP address blocks:        2a05:dfc1:400::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl
                          rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 23:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:0e:dd:5b:96:29:7b:56:5a:8b:40:79:61:20:a7:66:c5:8b:0a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56
        Validity
            Not Before: Jun 12 23:16:33 2025 GMT
            Not After : Jun 11 23:21:33 2026 GMT
        Subject: CN=0FE59CF921CD3C2BAB4ADC426AE3564B6C4C48EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b5:01:8c:75:fd:f0:c6:3c:e6:0a:fb:be:75:
                    0a:9f:f7:fe:f2:5f:02:9d:0e:fb:0e:c8:77:22:99:
                    7d:04:be:b5:50:76:f5:4b:8f:7e:e8:cd:a8:bb:33:
                    0b:69:7a:f5:9c:1b:6f:51:3f:14:02:2d:85:95:cc:
                    ad:e1:f8:27:58:4c:81:53:c0:63:2f:46:7b:79:5e:
                    db:ed:39:bb:65:3d:ab:da:ce:92:9a:3f:57:f8:71:
                    4a:bf:b3:fa:39:7f:8e:c0:ed:f6:82:ef:d3:56:bc:
                    e1:94:c0:af:d3:4a:67:54:83:46:e8:88:d4:88:ab:
                    07:29:87:05:3b:3b:17:56:92:a9:c2:04:ad:35:00:
                    71:d1:76:81:b3:18:0a:18:b7:5b:5f:be:79:10:6f:
                    e6:5e:57:cb:d1:01:1e:0e:bd:b6:62:d3:db:e1:be:
                    c4:25:d0:21:d5:ad:01:b1:41:45:1f:a1:ff:4c:e5:
                    56:5d:23:85:de:6d:8c:5b:2b:cb:d8:aa:3f:82:e3:
                    a9:66:dc:94:57:5e:e4:72:c5:0f:16:28:4f:e7:b3:
                    7c:7e:9f:ed:6f:9d:5d:3e:6e:e8:31:01:5a:72:ff:
                    f9:b9:8e:67:23:86:8e:ff:c2:8e:52:3a:07:50:71:
                    87:30:50:a7:92:f0:ba:97:24:62:50:9a:10:0e:70:
                    b2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:E5:9C:F9:21:CD:3C:2B:AB:4A:DC:42:6A:E3:56:4B:6C:4C:48:EA
            X509v3 Authority Key Identifier:
                keyid:3C:5F:E9:D6:A8:FD:EB:BC:D8:EF:BD:40:28:0B:28:7A:1C:DB:2A:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/3C5FE9D6A8FDEBBCD8EFBD40280B287A1CDB2A56.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-01.pdxnet.uk/repo/paradoxnetworks/1/326130353a646663313a3430303a3a2f34302d3430203d3e203532303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         22:aa:ee:ac:92:dd:af:ae:fc:2a:5d:41:95:3e:ba:0d:d9:36:
         58:90:a1:a6:02:3f:04:ae:0f:74:9d:03:92:aa:f4:7b:03:ed:
         15:66:cd:4d:93:1f:94:8f:6e:19:f4:58:5a:f2:10:48:0d:e4:
         e5:d3:7a:27:b8:b3:b6:7d:df:cc:1c:5d:5b:01:18:d2:42:84:
         a8:db:8a:28:3c:e4:6e:85:3b:4d:90:53:42:71:00:12:66:fa:
         b5:b6:1a:7c:53:32:4b:94:91:5e:b1:fa:c5:4c:ff:ee:9c:8e:
         c3:43:a3:b3:30:56:74:1a:1a:da:a6:22:52:1a:f5:9e:ae:60:
         b3:3f:84:19:b4:68:13:0b:01:98:ce:0d:0e:43:28:95:d3:05:
         51:5f:6c:ec:75:1f:68:67:c2:a5:33:df:4a:2b:a8:55:81:9a:
         f9:65:b6:81:53:0b:0d:56:b2:11:bc:ee:f9:aa:8d:e6:92:99:
         41:3d:51:37:0b:fd:03:af:0e:a5:b6:82:f9:7d:97:85:c2:55:
         56:24:10:a8:7c:61:ae:26:be:e8:4d:e5:b7:49:a0:bf:54:e6:
         c0:04:05:b0:23:dc:60:02:82:38:4d:4b:83:da:e7:47:96:8a:
         8d:3b:be:78:2b:9f:34:c7:f6:d7:89:a6:4e:bb:52:ab:6e:5d:
         78:ad:5a:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 29 06:31:04 2025 by rpki-client