Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa
File:                     326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa (raw, json)
Hash identifier:          AwPe1xLq4tD6ORMxJNyEKDmJa6ckZ/hDgvP9/eaDNS4=
Subject key identifier:   6A:AB:9F:A8:7F:AD:F9:3E:6A:ED:8F:BB:0F:01:A5:E0:ED:EF:7C:15
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       79ED92BD1A12BAFCAC73E8F3D04F2A98BCE5F7CF
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa
Signing time:             Fri 22 Mar 2024 12:15:51 +0000
ROA not before:           Fri 22 Mar 2024 12:10:51 +0000
ROA not after:            Fri 21 Mar 2025 12:15:51 +0000
asID:                     208548
IP address blocks:        2a05:dfc1:1fff::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ed:92:bd:1a:12:ba:fc:ac:73:e8:f3:d0:4f:2a:98:bc:e5:f7:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 22 12:10:51 2024 GMT
            Not After : Mar 21 12:15:51 2025 GMT
        Subject: CN=6AAB9FA87FADF93E6AED8FBB0F01A5E0EDEF7C15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:93:77:0c:07:e8:2a:0f:69:14:25:c6:d1:99:
                    fb:6f:5f:98:e7:7e:c1:07:c4:e5:67:2c:14:17:ef:
                    99:52:f6:d2:85:12:b7:a0:c2:73:95:80:21:2d:88:
                    01:3c:82:ea:40:7f:1d:8e:13:b8:1a:0e:7c:87:63:
                    98:62:ee:66:7c:80:b1:ef:e8:ba:19:c5:66:40:24:
                    43:13:37:67:7e:86:73:94:9b:2d:30:cc:14:7f:c1:
                    ac:0e:30:47:3b:e4:f1:84:8a:fb:aa:72:a1:13:0e:
                    f2:06:d7:b1:0e:a4:f7:89:39:58:b5:90:f6:41:ad:
                    3f:0f:e2:61:30:ad:0f:45:79:1b:a9:8d:9a:c5:52:
                    13:c2:15:44:92:4d:80:85:82:4b:af:a3:db:88:55:
                    1d:b6:25:ef:44:a3:5f:51:2e:76:16:ce:e0:d3:37:
                    99:55:3a:28:15:23:93:ee:fc:c0:cd:11:d4:95:f1:
                    ae:f4:d4:f8:cf:37:fc:32:4d:ae:ff:73:fe:a4:80:
                    9c:4a:bf:3e:71:d0:d3:0a:f8:a7:52:63:26:e9:53:
                    55:fd:96:21:ed:c8:ea:be:06:a0:18:2c:03:9c:09:
                    a8:08:90:c3:a1:9b:25:a1:a2:bc:d6:ab:15:0c:d0:
                    1f:95:83:1b:d4:e1:90:26:b4:5e:d0:bc:da:cf:f2:
                    42:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AB:9F:A8:7F:AD:F9:3E:6A:ED:8F:BB:0F:01:A5:E0:ED:EF:7C:15
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1fff::/48

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:70:26:6e:74:4d:9d:c7:f8:8d:bf:ac:fb:27:68:16:73:
         ed:3b:2f:23:3b:4c:75:a0:86:47:fc:90:14:53:e2:fa:b6:99:
         28:a2:86:70:90:d7:69:5c:da:f4:a2:20:e2:ce:4d:d8:6c:ac:
         7e:58:77:20:b4:b9:f9:a4:74:9b:19:81:c3:9d:cf:c6:7f:2c:
         97:be:41:96:3a:de:ac:aa:fe:3c:10:28:61:44:75:6e:72:8e:
         d2:22:d7:db:12:65:2b:03:4a:3c:54:a2:2a:5d:97:e0:12:3d:
         9a:b7:fd:20:41:b3:55:0c:e8:a4:64:97:bd:2a:ac:08:63:04:
         10:3c:4b:66:3d:e6:63:7e:71:ad:1b:7a:da:25:eb:19:f7:da:
         a3:59:b8:05:2b:6b:a7:08:4e:e0:48:15:32:3c:df:c6:cd:6b:
         40:cb:14:b6:f2:6a:7f:96:76:2a:7f:22:71:de:37:f7:29:fd:
         5c:4d:7c:f4:7c:62:cf:9c:61:cd:a3:0b:38:86:e0:f9:9a:ee:
         cf:85:af:3b:4f:b0:4b:13:77:20:b8:0d:41:d4:34:08:d8:4e:
         79:b4:4c:c7:4b:3f:cc:13:78:20:91:c4:c5:1b:cb:5b:d7:38:
         17:66:b4:8b:b6:da:be:64:51:81:b7:c3:50:fc:29:04:ae:46:
         79:25:94:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:11:48 2024 by rpki-client on console-fra.rpki-client.org