Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130353a646663313a316630303a3a2f34302d3430203d3e2030.roa
File:                     326130353a646663313a316630303a3a2f34302d3430203d3e2030.roa (raw, json)
Hash identifier:          Q85wCAoChu7inH5E5doLLeu6H9TJoCy0x6I1kE/0zxw=
Subject key identifier:   74:37:70:C0:B7:83:3A:9F:2D:EE:62:A8:46:E5:9C:24:38:57:CA:28
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       7DE2151FD0BAC6D5E560DB3397389671FA978681
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a316630303a3a2f34302d3430203d3e2030.roa
Signing time:             Sat 10 Jun 2023 15:31:14 +0000
ROA not before:           Sat 10 Jun 2023 15:26:14 +0000
ROA not after:            Sat 08 Jun 2024 15:31:14 +0000
asID:                     0
IP address blocks:        2a05:dfc1:1f00::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:e2:15:1f:d0:ba:c6:d5:e5:60:db:33:97:38:96:71:fa:97:86:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Jun 10 15:26:14 2023 GMT
            Not After : Jun  8 15:31:14 2024 GMT
        Subject: CN=743770C0B7833A9F2DEE62A846E59C243857CA28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:c1:e9:a6:69:ac:4b:8a:d4:3c:5d:59:c2:01:
                    a7:68:bf:53:f9:8b:73:b9:fb:9b:26:25:5a:0f:5c:
                    bb:92:a4:86:12:ab:d0:19:57:7d:30:6f:1d:db:36:
                    ac:eb:d2:0c:87:37:5f:d2:c5:f3:1a:6d:e3:e6:c0:
                    e4:f4:18:8e:8b:35:8d:88:b2:3d:55:db:c5:6e:c7:
                    28:c1:b9:f8:24:80:4e:f7:3f:e0:b5:b5:51:a1:d6:
                    fe:34:c5:f6:6b:b7:51:04:8f:d3:0c:38:6b:84:b3:
                    6f:64:fd:4e:18:64:a2:db:19:9a:f4:95:55:e7:0a:
                    fd:b0:ca:0b:d7:89:85:4b:cf:7b:60:a9:65:67:b9:
                    42:a6:8d:cd:d0:6e:fd:d5:20:0d:86:bf:83:3c:ec:
                    bc:cb:1a:4d:2c:97:71:2e:4c:06:ac:e8:63:b0:f4:
                    ea:94:a8:9b:ed:12:3c:b9:28:06:4a:6f:bd:4b:bc:
                    56:b9:f1:9d:06:42:92:e3:75:5c:3f:95:13:30:b1:
                    b4:08:59:a6:21:ea:33:ae:07:1a:82:83:cc:d6:2a:
                    92:db:9c:f4:a1:16:41:2e:67:f0:0e:a8:3a:be:c7:
                    3a:21:b5:87:b6:50:c8:5f:6c:f8:52:c4:f6:f6:36:
                    66:91:12:68:f5:e0:88:a6:69:98:8b:af:20:99:ee:
                    08:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:37:70:C0:B7:83:3A:9F:2D:EE:62:A8:46:E5:9C:24:38:57:CA:28
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a316630303a3a2f34302d3430203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         b6:a0:4f:ac:2d:51:f7:2b:1c:7a:dd:e5:74:44:a7:97:56:e5:
         87:02:2d:54:0f:0e:86:99:12:3d:2b:72:20:24:42:34:dc:83:
         22:34:c7:eb:03:e8:f7:fd:32:d2:20:fb:25:88:ee:1b:14:5e:
         4c:b0:36:68:41:b5:d1:99:78:ea:c0:8e:9b:9c:96:26:39:57:
         27:6d:8a:44:a4:b6:a8:49:d1:73:e7:63:29:c4:da:5a:74:72:
         1a:af:38:a8:d0:e5:1a:09:ca:7d:7c:f4:26:16:03:c4:43:2a:
         ce:b6:44:62:a3:9a:8d:0b:d7:b0:cc:f8:54:9e:26:b9:b6:ff:
         8a:39:e2:bf:52:7a:43:4d:f7:3a:b9:66:26:b5:db:43:5d:7d:
         e9:7b:ae:c9:1e:f6:8a:f8:52:4a:93:a3:f4:2f:81:19:9c:c0:
         9a:6d:52:96:17:2a:ef:27:f6:74:18:83:3d:82:3a:8c:8f:75:
         08:b2:1c:18:63:9d:1e:99:4d:93:1e:3e:6e:d3:ab:c1:46:4a:
         21:dd:0f:db:ef:88:42:c6:f0:ce:92:51:64:a2:1d:e3:ac:ca:
         64:62:f2:5c:24:06:45:2b:6c:8c:31:8f:75:4a:6a:d2:f7:17:
         25:b8:fa:17:ea:8b:b8:2d:79:7c:46:54:32:18:1e:95:a1:4c:
         41:f4:17:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 16:12:32 2024 by rpki-client on console-fra.rpki-client.org