Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3438203d3e203438353831.roa
File:                     326130353a646663313a3a2f34302d3438203d3e203438353831.roa (raw, json)
Hash identifier:          BBJ6q6jZbonqQNmplX/W5NeiLtoNc1w0+RM5q8ckSAE=
Subject key identifier:   52:F4:E1:4B:57:F8:AC:73:EA:E1:78:9D:55:94:B7:D1:93:CA:49:AD
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       76924394CB22BA243ACFB41B1A748CD1E66AA889
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3438203d3e203438353831.roa
Signing time:             Fri 22 Mar 2024 12:15:51 +0000
ROA not before:           Fri 22 Mar 2024 12:10:51 +0000
ROA not after:            Fri 21 Mar 2025 12:15:51 +0000
asID:                     48581
IP address blocks:        2a05:dfc1::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 20 Apr 2024 13:47:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:92:43:94:cb:22:ba:24:3a:cf:b4:1b:1a:74:8c:d1:e6:6a:a8:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 22 12:10:51 2024 GMT
            Not After : Mar 21 12:15:51 2025 GMT
        Subject: CN=52F4E14B57F8AC73EAE1789D5594B7D193CA49AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:ce:e1:4c:3e:ac:9b:b6:b6:e9:30:87:99:a2:
                    9c:2a:e6:df:6d:5f:1a:81:bc:38:b2:12:93:cd:20:
                    f7:95:81:13:0d:b2:64:43:ad:0b:38:b1:0f:15:fc:
                    1b:15:e7:dc:0a:71:9d:54:fe:8f:b4:9e:a8:aa:e7:
                    50:15:a0:91:c0:33:ac:84:14:64:70:97:f9:ae:a2:
                    d4:4a:69:55:3f:d1:dd:bd:d5:2b:e5:76:4a:12:fa:
                    33:82:d3:c2:b2:a9:9e:01:1f:0a:61:a0:bb:2f:7d:
                    ff:33:61:ae:0c:d4:92:27:7f:98:75:cc:98:8c:0f:
                    d2:75:10:02:7f:92:77:62:c3:ba:9f:f0:fe:97:3f:
                    79:45:02:1d:26:17:b0:ab:99:de:be:84:ea:fd:46:
                    d8:bc:0e:6d:76:6b:0d:95:17:bc:37:cd:46:4b:0b:
                    2d:c7:ac:a1:b1:0d:95:09:7d:ec:a4:26:d3:3d:f5:
                    75:6f:fd:d6:8f:ed:ca:dc:b6:94:15:38:19:79:8a:
                    b1:68:29:d3:c1:63:83:79:63:2c:b7:38:cb:78:38:
                    06:c5:ac:5e:be:a0:ce:59:42:f8:25:f9:40:cf:67:
                    a0:e7:57:38:ad:61:39:a9:2b:bb:e5:eb:f9:4b:7f:
                    04:c5:dc:8b:b7:7e:36:56:49:eb:50:bb:4a:98:3c:
                    b5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:F4:E1:4B:57:F8:AC:73:EA:E1:78:9D:55:94:B7:D1:93:CA:49:AD
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/40

    Signature Algorithm: sha256WithRSAEncryption
         b3:02:2d:d6:d0:ca:b7:8f:d9:6b:0b:5f:37:15:cd:44:00:b3:
         4c:e5:1f:68:ae:3c:ec:4b:6b:2c:0f:11:36:0f:34:48:77:f4:
         be:ab:52:77:d4:35:55:13:f8:46:09:c8:39:10:81:75:8f:05:
         0c:2d:64:55:c5:70:5d:cc:49:48:1d:aa:b8:d2:53:5c:e7:f1:
         fa:1e:e3:7d:02:c7:80:fe:69:2e:c1:02:44:c7:a2:10:54:54:
         6d:a7:80:fd:c5:30:7e:25:f1:16:17:dc:cb:b8:1e:15:4f:f1:
         65:9d:82:6c:1a:cb:1f:ef:20:ce:f7:2e:1f:dc:16:87:4a:fd:
         9e:8a:0d:67:6c:4f:28:45:5d:e7:3f:b3:76:92:9c:8f:2d:00:
         68:a1:e8:8f:21:3d:53:6b:3d:d0:ed:cc:2c:5a:36:f9:67:cf:
         3b:ae:ee:80:e2:d6:5d:81:4a:a6:82:ed:e0:88:0d:7d:f7:82:
         f4:67:26:91:6a:01:1d:f6:4d:b3:30:78:87:a6:e0:97:e6:eb:
         f1:5d:dc:72:51:45:0c:19:2d:56:12:cd:59:4d:f2:8b:56:12:
         b8:f5:6f:49:cc:4d:c3:87:ee:93:52:aa:54:60:67:a7:bc:53:
         0b:fb:6f:0b:a1:28:30:02:0f:fc:13:75:30:47:35:61:9c:a1:
         b3:c6:a2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 19 22:25:52 2024 by rpki-client on console-ams.rpki-client.org