Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331323a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3331323a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          p9HeMvOOKjVDhdk9IbX3zZBk85KLIPltEmVr/4+AFvc=
Subject key identifier:   E0:44:34:BC:22:69:8C:A2:5E:87:40:CF:39:FB:4C:85:BA:7D:90:FF
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       2D28D6E420C60AE8AF045457AF97ABD1C7D7DEC3
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331323a3a2f34382d3438203d3e203530323234.roa
Signing time:             Fri 18 Jul 2025 15:02:22 +0000
ROA not before:           Fri 18 Jul 2025 14:57:22 +0000
ROA not after:            Fri 17 Jul 2026 15:02:22 +0000
asID:                     50224
IP address blocks:        2a14:6f45:312::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Jul 2025 20:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:28:d6:e4:20:c6:0a:e8:af:04:54:57:af:97:ab:d1:c7:d7:de:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Jul 18 14:57:22 2025 GMT
            Not After : Jul 17 15:02:22 2026 GMT
        Subject: CN=E04434BC22698CA25E8740CF39FB4C85BA7D90FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:06:0a:91:6b:07:f7:8f:60:4a:9e:55:cc:cb:
                    39:ee:7a:71:b3:3c:e1:51:44:9d:de:2e:90:ab:0e:
                    06:2a:4e:7a:72:7d:3d:98:dc:8d:bc:30:dd:ca:da:
                    eb:36:f3:26:43:66:d2:85:8b:81:6b:73:03:0b:db:
                    c2:10:cd:23:cd:4c:37:2a:19:a0:3f:83:42:4c:8e:
                    f5:77:f9:72:12:90:11:ae:77:7c:6b:d6:c0:18:a6:
                    74:63:f4:f6:e4:f2:2c:3a:bb:36:7b:44:b1:90:75:
                    8d:ef:58:7b:44:39:d5:78:31:8e:ff:7d:79:75:6d:
                    1f:aa:70:f5:0c:85:64:cd:a6:78:6d:1e:ef:af:7c:
                    61:16:28:d1:fc:58:bc:2a:9c:be:54:40:14:4c:d2:
                    7e:12:d7:26:3d:72:9c:1e:47:3d:88:a5:48:6b:ae:
                    0e:a6:2d:78:90:cc:a3:fe:74:5f:10:b3:68:9f:d1:
                    fd:1e:42:7a:12:3d:db:b6:48:48:f0:94:ed:14:97:
                    d6:ca:d7:fd:59:92:26:d0:d0:21:92:b7:c0:27:2d:
                    35:ea:7f:29:43:45:32:b0:3a:c9:38:85:94:55:29:
                    a1:d9:09:ca:13:02:ff:51:26:73:89:14:82:71:5d:
                    e2:af:74:2e:16:96:18:6d:31:8f:d0:5a:4b:68:6e:
                    22:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:44:34:BC:22:69:8C:A2:5E:87:40:CF:39:FB:4C:85:BA:7D:90:FF
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331323a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:312::/48

    Signature Algorithm: sha256WithRSAEncryption
         c0:a7:3e:25:0a:d3:9f:5f:0b:a1:fc:53:06:dd:74:34:6f:9a:
         a1:e5:e4:f8:12:cb:58:3b:5e:bd:ea:3e:c9:b8:37:32:8f:e8:
         48:ad:55:6f:e2:22:d4:3f:33:df:6c:33:73:e2:6a:61:2d:23:
         fe:4e:38:dc:b1:24:58:a9:64:ee:7b:90:47:4e:da:a7:b7:13:
         a6:76:64:d9:15:0c:50:21:ee:c7:97:b7:dc:2c:61:b3:19:c2:
         0f:d5:3b:a1:4e:fc:ac:d7:de:25:d2:c9:77:d8:d4:1b:d4:0f:
         95:cc:9d:7e:22:35:a7:5a:ae:6f:21:1d:34:1d:0f:de:3f:ad:
         e3:0f:c9:97:78:86:0e:94:0e:02:5d:2d:d5:e1:df:16:2e:05:
         59:9c:98:73:1d:10:56:38:10:2a:00:33:20:e6:a4:b7:20:c5:
         bb:61:cb:eb:97:4d:af:16:a3:f2:18:40:57:2b:11:26:eb:8d:
         95:24:3f:66:24:c5:24:36:37:c9:f7:0c:73:f0:4d:99:65:53:
         92:ed:52:43:a1:a4:3b:b0:b1:b5:93:45:49:e2:2d:30:5e:69:
         1b:c0:b5:15:63:0a:10:0e:a1:a9:28:9b:84:d5:48:fd:1c:c3:
         a5:dc:a8:f3:63:00:57:3c:33:e3:7b:e2:e8:ea:bf:4d:1e:47:
         08:56:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 21 09:06:24 2025 by rpki-client