Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3430203d3e203539393230.roa
File:                     326130353a646663313a3a2f34302d3430203d3e203539393230.roa (raw, json)
Hash identifier:          uBBfA1RL5n3jIgXgDYQqmzyAw+DF3tYk2KeIAsKeDsE=
Subject key identifier:   84:C3:D3:1E:2A:59:FB:49:67:05:08:2F:66:C1:5C:79:F0:C2:50:36
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       78D4B8AB23DFBA04A21029319AD6C5F5CEDCB84D
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3430203d3e203539393230.roa
Signing time:             Tue 19 Dec 2023 13:01:24 +0000
ROA not before:           Tue 19 Dec 2023 12:56:24 +0000
ROA not after:            Tue 17 Dec 2024 13:01:24 +0000
asID:                     59920
IP address blocks:        2a05:dfc1::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 23:47:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:d4:b8:ab:23:df:ba:04:a2:10:29:31:9a:d6:c5:f5:ce:dc:b8:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Dec 19 12:56:24 2023 GMT
            Not After : Dec 17 13:01:24 2024 GMT
        Subject: CN=84C3D31E2A59FB496705082F66C15C79F0C25036
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:e9:03:19:f9:e1:db:01:0f:f7:46:d8:3a:34:
                    90:1b:67:b8:17:fa:ba:54:ca:f5:74:ac:e1:cb:c6:
                    ac:c4:d0:1b:91:f5:b2:47:e0:7f:e8:5e:b7:b1:66:
                    c7:a1:b5:6e:9c:d9:43:95:85:46:db:1e:47:11:e8:
                    34:92:c7:c3:54:ce:e7:7d:d1:da:12:26:f4:40:6f:
                    10:0c:88:9e:3f:79:8d:08:93:7f:be:ba:c8:49:02:
                    1a:b0:26:5e:0f:57:8f:ad:49:85:29:6d:9a:af:b2:
                    dd:50:fd:6a:31:54:20:cd:6f:45:9f:90:8d:2c:3a:
                    83:4e:38:0c:4f:56:d4:ce:10:07:a1:e6:0a:d5:3e:
                    17:ed:e9:54:37:9a:2a:79:5b:36:f1:0f:ea:f9:ce:
                    a5:ac:0f:a0:46:67:42:4d:65:fb:09:2c:72:43:ff:
                    4c:3d:bc:ac:1e:5c:3f:fc:18:bb:34:ea:9f:fe:a4:
                    bb:0b:f3:44:d6:ba:14:6a:6a:2c:92:66:b2:d0:04:
                    a0:2a:ed:8a:ab:04:cd:35:fc:d4:63:30:d8:a0:33:
                    de:88:59:7a:b2:9c:08:b4:89:d9:8c:a5:8a:74:a1:
                    36:b5:81:38:97:c4:d5:33:d1:ad:97:1b:21:7a:df:
                    cd:d0:f0:4b:7c:06:05:0f:c1:04:32:89:db:1c:2d:
                    33:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:C3:D3:1E:2A:59:FB:49:67:05:08:2F:66:C1:5C:79:F0:C2:50:36
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3430203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/40

    Signature Algorithm: sha256WithRSAEncryption
         39:a5:ed:93:b5:f7:50:fa:ee:7a:c7:02:37:01:43:86:3c:e6:
         fb:6b:89:15:6b:2e:54:e1:af:b2:4f:a5:a5:c1:bb:64:d5:fa:
         0e:57:24:a9:9c:5c:de:fb:e9:f9:ab:63:10:62:17:68:be:4f:
         5f:2b:5d:16:9a:50:65:c0:27:e3:1c:fe:35:5e:77:bd:25:31:
         05:c6:88:6d:ee:ef:14:a6:43:cd:3d:d1:d8:f2:96:01:19:74:
         3e:5f:44:5b:cf:9c:21:c8:54:2f:03:8a:90:a5:91:85:9d:bb:
         7c:74:74:53:d7:a7:3c:bc:c2:ca:63:12:67:24:31:43:17:47:
         b5:78:b1:10:e1:9e:53:08:a4:21:21:fd:72:72:f3:d2:a2:80:
         c7:5e:fd:b4:3f:26:a5:58:59:45:92:36:4a:df:2b:16:88:f3:
         05:9d:2a:7e:bc:e5:c4:79:4d:62:24:b6:09:56:d0:64:d4:50:
         85:13:4c:89:e1:34:df:24:8c:0f:49:d7:36:6a:bd:01:28:fe:
         ef:cf:b7:9b:e5:c3:01:e2:e7:22:cf:1c:9e:7c:fc:fb:ea:a3:
         f4:29:02:78:7d:dd:2a:10:ed:4d:24:d5:b6:ff:c6:05:a9:0b:
         45:47:9c:3e:f2:75:b4:51:95:a9:0e:d5:7c:eb:d1:88:25:47:
         e8:5d:19:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 21 06:41:55 2024 by rpki-client on console-fra.rpki-client.org