Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3438203d3e203530323234.roa
File:                     326130353a646663313a3a2f34302d3438203d3e203530323234.roa (raw, json)
Hash identifier:          Xhnxn7qlqKORjavSJMdafxBtoSZSCiMTtmx8OJqFsOM=
Subject key identifier:   AA:58:34:12:69:E4:30:CA:A1:35:18:45:5F:75:4A:A1:49:A1:E0:FD
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       05302D41C7C274CB22EA3D378526CDCC6699B0D0
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3438203d3e203530323234.roa
Signing time:             Mon 18 Mar 2024 12:25:26 +0000
ROA not before:           Mon 18 Mar 2024 12:20:26 +0000
ROA not after:            Mon 17 Mar 2025 12:25:26 +0000
asID:                     50224
IP address blocks:        2a05:dfc1::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 18:11:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:30:2d:41:c7:c2:74:cb:22:ea:3d:37:85:26:cd:cc:66:99:b0:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 18 12:20:26 2024 GMT
            Not After : Mar 17 12:25:26 2025 GMT
        Subject: CN=AA58341269E430CAA13518455F754AA149A1E0FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0e:62:1a:9d:7a:b6:aa:a0:0e:40:54:5d:b9:
                    e6:20:a9:ad:2f:29:2f:20:72:41:9f:ae:5c:74:a7:
                    a9:f0:77:b3:60:54:d6:63:9b:e1:6e:f4:93:d5:0a:
                    92:de:41:09:f3:b3:9a:3a:97:35:95:c0:78:a1:94:
                    1b:d2:cd:07:da:94:e4:54:c4:4c:f3:7d:60:b1:bc:
                    4b:6d:bc:da:8d:55:22:61:f3:88:46:7f:72:57:0e:
                    8b:7a:4c:fd:42:b9:48:bb:b7:62:8e:60:ff:06:ec:
                    ee:57:b8:8d:ef:50:25:b0:3d:7c:72:56:19:05:5b:
                    0d:11:16:15:67:ba:af:e6:5a:b9:e8:21:42:7e:5c:
                    ef:f7:db:aa:ee:e6:d0:2a:be:38:d2:50:d3:df:de:
                    da:26:d6:6d:5d:d6:f1:31:0a:05:4d:e5:a0:22:d0:
                    c3:98:fd:f5:96:67:30:ee:c0:b9:90:d5:db:7d:0e:
                    a8:95:ca:9e:67:07:b9:79:80:f3:86:04:3a:d7:76:
                    cc:ec:a6:9d:64:44:80:55:96:fa:6b:76:0a:2a:5c:
                    9b:6a:89:0a:5d:85:a5:cf:38:fc:5c:a0:af:eb:f9:
                    b9:59:66:81:14:0c:b7:59:06:5f:30:6c:43:3c:82:
                    a5:01:79:3c:88:40:12:a1:cf:69:9e:04:dc:d4:ac:
                    bd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:58:34:12:69:E4:30:CA:A1:35:18:45:5F:75:4A:A1:49:A1:E0:FD
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130353a646663313a3a2f34302d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1::/40

    Signature Algorithm: sha256WithRSAEncryption
         af:b2:37:e8:b2:de:9e:1a:30:66:14:3e:e7:a8:de:77:ad:a8:
         6f:fb:66:c5:bd:c3:bc:bf:1e:f3:50:9b:b6:1b:17:9e:72:99:
         23:19:f6:08:09:f2:a1:e1:b3:66:08:b4:31:97:77:f5:78:90:
         80:a3:72:92:7c:8c:86:67:33:42:c8:27:d3:93:4f:8e:19:ed:
         27:75:52:af:74:29:c0:2f:9a:22:9f:e0:ca:83:06:a3:76:8f:
         70:09:84:1d:89:79:3d:6b:9b:f7:d8:a0:a8:bd:4b:1f:ab:75:
         c9:70:67:f7:37:da:5e:e9:cf:e2:4a:90:ba:c8:a9:be:e6:a8:
         e4:26:17:c9:bf:c0:2f:62:9e:fa:43:2c:98:f6:ae:11:53:f7:
         77:e2:04:e2:24:ea:51:84:79:d4:00:2b:9e:a3:62:8e:ba:08:
         89:58:53:1c:c7:c1:b6:58:f3:ad:a3:83:e2:44:b8:b3:59:eb:
         32:a1:f7:3f:a2:73:cb:87:01:41:ae:b6:38:62:ad:63:71:98:
         83:4e:98:96:2a:6e:24:c3:c6:d9:49:78:af:0f:08:7d:46:d1:
         4b:a4:08:69:75:f7:1a:f6:d1:f3:6c:aa:89:31:8a:77:d1:d0:
         17:28:1c:d7:c9:3b:37:6e:52:02:5b:7c:d3:0d:c8:1a:2d:97:
         76:8c:05:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 03:49:33 2024 by rpki-client on console-fra.rpki-client.org