Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130353a646663313a316665303a3a2f34342d3438203d3e20323132363138.roa
File:                     326130353a646663313a316665303a3a2f34342d3438203d3e20323132363138.roa (raw, json)
Hash identifier:          n9ItPYruSuqgtlRzTdnnQRlZkCOhQFwqEdndY7Z8Ekk=
Subject key identifier:   D7:81:72:6A:68:0F:BC:A5:87:FC:8B:95:01:73:A5:4F:03:1B:51:5C
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       384CDAAB6436390C258C3C64F0E072262DF67609
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a316665303a3a2f34342d3438203d3e20323132363138.roa
Signing time:             Fri 22 Mar 2024 12:15:51 +0000
ROA not before:           Fri 22 Mar 2024 12:10:51 +0000
ROA not after:            Fri 21 Mar 2025 12:15:51 +0000
asID:                     212618
IP address blocks:        2a05:dfc1:1fe0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:4c:da:ab:64:36:39:0c:25:8c:3c:64:f0:e0:72:26:2d:f6:76:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 22 12:10:51 2024 GMT
            Not After : Mar 21 12:15:51 2025 GMT
        Subject: CN=D781726A680FBCA587FC8B950173A54F031B515C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2e:4d:7b:3d:88:e1:50:96:9a:49:87:0b:31:
                    d2:f4:70:64:ef:f5:bd:f3:2f:71:65:e5:a3:3b:26:
                    7e:3d:f6:cf:6f:98:0f:ce:a2:81:8d:32:68:77:88:
                    25:ba:1c:f6:3d:cd:1b:7b:f2:8e:cc:e0:7b:33:2f:
                    2a:49:a2:e4:af:4a:14:07:27:1f:18:11:54:f4:8d:
                    78:cf:4f:5a:cd:e7:80:25:c8:df:05:c9:3c:c5:0f:
                    97:80:94:d4:d1:7b:4f:5f:62:e6:96:85:fb:6a:d0:
                    fe:de:2a:7c:68:23:f3:f1:5a:09:7f:94:7e:55:a0:
                    65:70:5e:2c:fd:0e:e3:ee:ac:22:f5:05:ee:48:69:
                    03:b9:b0:d0:19:15:a5:05:64:33:5e:28:ba:5b:75:
                    6b:db:ef:0f:7e:16:5f:27:e9:c0:aa:e1:8a:2c:1c:
                    57:50:16:4b:bf:b0:60:6a:bd:9e:12:0b:a7:18:3d:
                    4a:6f:5c:0b:d6:b9:38:55:13:74:35:ae:20:5d:d9:
                    02:f4:e1:d2:0a:cf:bd:82:27:1a:95:50:b4:7e:7c:
                    0d:21:56:15:88:22:d5:f7:2d:58:4f:3e:bf:f8:c2:
                    2f:6e:6e:da:1d:5d:ad:ac:8a:e4:d2:c1:6e:29:94:
                    29:01:0e:e5:15:b5:13:fb:30:8f:5a:55:55:f1:4d:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:81:72:6A:68:0F:BC:A5:87:FC:8B:95:01:73:A5:4F:03:1B:51:5C
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a316665303a3a2f34342d3438203d3e20323132363138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1fe0::/44

    Signature Algorithm: sha256WithRSAEncryption
         73:65:4b:d4:73:eb:42:93:35:62:d3:62:7d:9b:fe:2f:f7:01:
         35:cc:5a:2f:06:56:c0:1e:2a:75:0f:75:54:fb:e3:a6:fe:8d:
         c0:46:81:1d:c6:b6:fc:1c:b8:84:6d:3d:f2:ef:98:51:a5:e6:
         01:00:41:6b:63:e1:e2:39:60:96:6c:6f:0f:11:fc:dc:ca:8b:
         22:93:98:6a:be:9c:4b:5e:c9:ed:81:18:3b:7b:e4:7e:37:c0:
         28:3e:67:f8:29:9e:de:39:63:b8:c4:d7:f7:8f:cd:2a:a4:b9:
         a3:65:29:dd:f0:26:ed:13:fc:4e:2a:fe:c1:0b:87:64:ce:10:
         84:ac:35:28:1b:70:f1:ad:7c:77:1e:0c:b6:08:9c:e9:92:4f:
         1b:ee:1b:4e:a2:51:9b:e8:c8:0b:5f:d1:c5:f9:b5:47:fb:f9:
         a9:ff:66:2a:3b:6d:c2:02:7d:9a:3f:c0:aa:a4:b7:ff:90:ba:
         9e:40:83:cb:f6:83:ab:35:85:4c:29:db:89:0a:97:06:af:fd:
         0a:bd:46:86:89:75:93:ee:4b:7d:b5:87:f8:2c:c4:ca:ab:42:
         2e:8b:6c:44:de:f4:98:e6:cb:be:07:0d:34:a9:09:c5:10:6f:
         55:5c:07:d4:63:48:a0:e6:28:16:c1:74:0c:cc:24:e7:24:a9:
         18:b5:25:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:11:27 2024 by rpki-client on console-fra.rpki-client.org