Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3430203d3e203530323234.roa
File:                     326130353a646663313a3a2f34302d3430203d3e203530323234.roa (raw, json)
Hash identifier:          aYElAZJgLktqFN9/plPiXFyFMSEgQQZGw1b8TDgiAgM=
Subject key identifier:   D4:2B:43:F7:C2:10:B1:20:90:BD:42:C5:D6:5C:B5:BB:C1:55:1B:9E
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       1D7579B3FDE34B3A152C8AE1C9CC92059A7F0D4B
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3430203d3e203530323234.roa
Signing time:             Fri 15 Mar 2024 15:16:26 +0000
ROA not before:           Fri 15 Mar 2024 15:11:26 +0000
ROA not after:            Fri 14 Mar 2025 15:16:26 +0000
asID:                     50224
IP address blocks:        2a05:dfc1::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:75:79:b3:fd:e3:4b:3a:15:2c:8a:e1:c9:cc:92:05:9a:7f:0d:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 15 15:11:26 2024 GMT
            Not After : Mar 14 15:16:26 2025 GMT
        Subject: CN=D42B43F7C210B12090BD42C5D65CB5BBC1551B9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:79:da:be:1a:35:dc:b0:25:b0:38:88:33:4d:
                    1e:94:71:53:9b:41:03:09:a5:8f:76:89:f2:ab:c9:
                    90:83:f4:ad:0b:ff:a1:c5:10:9e:66:9e:4c:b1:a0:
                    7c:d2:47:ae:86:7d:2d:42:d2:e0:ca:f4:61:ab:b8:
                    d5:80:f0:b2:32:16:89:22:19:8a:1d:d9:c1:2b:ff:
                    97:78:bf:99:65:c6:5d:71:e3:f7:48:e4:8b:8a:72:
                    44:60:59:71:5f:42:28:8c:27:88:c4:78:41:b7:24:
                    0c:86:96:c6:4c:50:49:bb:7c:63:51:4b:29:9a:c7:
                    a3:d7:a5:7b:03:b9:e7:ba:ce:45:74:95:77:68:f8:
                    45:40:04:cf:b9:6c:eb:9b:de:eb:1d:ee:3a:b3:67:
                    60:a7:18:2e:e2:cf:7e:29:0e:87:5d:51:51:03:90:
                    ac:75:a3:03:0d:a7:46:2b:12:b0:86:de:a8:ab:b8:
                    9a:c4:08:ea:c4:9c:21:0f:b7:0e:8d:08:51:c2:32:
                    24:72:19:a7:fd:64:e7:b6:ad:c0:e1:37:b8:6a:06:
                    51:20:60:83:f8:0c:31:a4:c1:b7:44:ef:d5:c9:11:
                    32:fc:f9:e5:d0:17:e3:b3:ca:90:48:9a:81:5d:ba:
                    23:c4:92:be:15:42:b3:81:7c:f8:e7:dd:ac:80:a1:
                    3b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:2B:43:F7:C2:10:B1:20:90:BD:42:C5:D6:5C:B5:BB:C1:55:1B:9E
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3430203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/40

    Signature Algorithm: sha256WithRSAEncryption
         aa:20:13:30:90:42:bd:6f:8f:20:1a:4b:05:7d:fa:22:b6:8d:
         32:bc:76:23:b6:11:f1:72:3b:b9:ed:54:a3:4b:93:40:ea:87:
         bc:6f:da:82:6d:31:6e:cf:11:44:45:5a:2b:e6:4c:d8:a3:9b:
         02:09:1d:58:9b:f5:87:17:dd:fa:8a:32:04:b4:e9:d3:e4:0f:
         02:02:7a:84:be:8f:c2:ab:80:22:2f:97:e2:24:33:08:5d:ab:
         e0:17:a2:ab:e6:dd:77:62:c7:1d:0b:02:6b:5a:47:ab:a9:85:
         a5:a5:9c:74:a4:4f:42:fc:c9:b7:03:77:f5:a6:d1:7c:0d:4e:
         1c:79:45:92:c8:cb:8a:d7:9a:ac:d8:58:99:72:26:30:3f:34:
         de:de:1e:3d:14:b9:6d:4d:f0:9e:b6:6b:b2:73:83:e2:21:49:
         60:00:92:af:07:0e:ea:34:0e:29:22:24:bc:96:7f:c4:e3:85:
         90:4a:2a:11:fc:db:f9:5c:d6:67:db:46:68:b6:ee:aa:90:49:
         04:78:8b:58:a7:f5:22:52:10:a9:69:62:d7:62:86:15:25:06:
         07:18:74:88:26:13:b8:26:0d:43:55:9e:18:98:80:a9:f2:dc:
         62:28:33:31:c1:3c:36:20:69:37:79:f9:5f:10:8b:a9:28:c2:
         2d:81:dc:fd
-----BEGIN CERTIFICATE-----
MIIE5DCCA8ygAwIBAgIUHXV5s/3jSzoVLIrhycySBZp/DUswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yNDAzMTUxNTExMjZaFw0yNTAzMTQxNTE2MjZaMDMxMTAvBgNV
BAMTKEQ0MkI0M0Y3QzIxMEIxMjA5MEJENDJDNUQ2NUNCNUJCQzE1NTFCOUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwedq+GjXcsCWwOIgzTR6UcVOb
QQMJpY92ifKryZCD9K0L/6HFEJ5mnkyxoHzSR66GfS1C0uDK9GGruNWA8LIyFoki
GYod2cEr/5d4v5llxl1x4/dI5IuKckRgWXFfQiiMJ4jEeEG3JAyGlsZMUEm7fGNR
Symax6PXpXsDuee6zkV0lXdo+EVABM+5bOub3usd7jqzZ2CnGC7iz34pDoddUVED
kKx1owMNp0YrErCG3qiruJrECOrEnCEPtw6NCFHCMiRyGaf9ZOe2rcDhN7hqBlEg
YIP4DDGkwbdE79XJETL8+eXQF+OzypBImoFduiPEkr4VQrOBfPjn3ayAoTspAgMB
AAGjggHuMIIB6jAdBgNVHQ4EFgQU1CtD98IQsSCQvULF1ly1u8FVG54wHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMHoGCCsGAQUFBwELBG4wbDBqBggr
BgEFBQcwC4ZecnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMS8z
MjYxMzAzNTNhNjQ2NjYzMzEzYTNhMmYzNDMwMmQzNDMwMjAzZDNlMjAzNTMwMzIz
MjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/
BBIwEDAOBAIAAjAIAwYAKgXfwQAwDQYJKoZIhvcNAQELBQADggEBAKogEzCQQr1v
jyAaSwV9+iK2jTK8diO2EfFyO7ntVKNLk0Dqh7xv2oJtMW7PEURFWivmTNijmwIJ
HVib9YcX3fqKMgS06dPkDwICeoS+j8KrgCIvl+IkMwhdq+AXoqvm3Xdixx0LAmta
R6uphaWlnHSkT0L8ybcDd/Wm0XwNThx5RZLIy4rXmqzYWJlyJjA/NN7eHj0UuW1N
8J62a7Jzg+IhSWAAkq8HDuo0DikiJLyWf8TjhZBKKhH82/lc1mfbRmi27qqQSQR4
i1in9SJSEKlpYtdihhUlBgcYdIgmE7gmDUNVnhiYgKny3GIoMzHBPDYgaTd5+V8Q
i6kowi2B3P0=
-----END CERTIFICATE-----
Generated at Sat Apr 20 16:12:32 2024 by rpki-client on console-fra.rpki-client.org