Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31303a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a31303a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          Mktc7vZTxg7AJrM8bXt2HZ//X0y2z9WdEBqVw8XMt4Q=
Subject key identifier:   53:45:52:47:D9:1D:53:E4:8B:03:D3:D7:1C:29:9B:84:5C:AF:59:7D
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       71EDE82084D712476218F9703C15F31EC46237C2
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31303a3a2f34382d3438203d3e203530323234.roa
Signing time:             Fri 15 Mar 2024 15:41:15 +0000
ROA not before:           Fri 15 Mar 2024 15:36:15 +0000
ROA not after:            Fri 14 Mar 2025 15:41:15 +0000
asID:                     50224
IP address blocks:        2a0a:6040:10::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ed:e8:20:84:d7:12:47:62:18:f9:70:3c:15:f3:1e:c4:62:37:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 15 15:36:15 2024 GMT
            Not After : Mar 14 15:41:15 2025 GMT
        Subject: CN=53455247D91D53E48B03D3D71C299B845CAF597D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:35:cd:79:02:f9:d7:07:ee:02:6f:99:ed:4b:
                    48:36:2d:52:36:db:37:92:15:36:7d:9b:2a:ca:68:
                    91:09:1b:98:13:dd:e8:44:52:be:b2:2b:aa:e6:db:
                    e4:61:83:65:11:a4:bc:19:7e:d3:12:46:74:88:2f:
                    ab:d6:e9:bf:2a:75:4b:96:0a:3c:07:e3:ee:0d:94:
                    ee:ec:ec:e7:d4:61:3d:c4:47:39:bc:61:6f:54:65:
                    c2:0e:cc:8b:2c:eb:e3:7b:ec:d0:ae:32:30:b7:4d:
                    cf:f2:a8:89:d5:ab:7a:de:36:64:bf:9c:fc:f7:76:
                    29:7f:f3:95:de:44:b7:b4:ae:02:19:53:9a:30:07:
                    2a:80:69:cd:fa:72:72:e3:ad:f2:da:18:c8:24:2e:
                    65:90:e4:2a:b6:b9:a9:9d:32:38:a9:05:c1:9e:da:
                    11:61:39:b9:48:2e:f7:ac:47:ae:ba:7b:ad:22:68:
                    c2:ee:4b:19:67:0d:8c:13:38:d4:e4:8d:2f:36:83:
                    06:f7:ad:61:c5:09:af:7e:f7:9f:a4:53:16:d9:4a:
                    83:78:37:c3:c6:41:e8:ab:b8:61:77:59:fc:9d:a2:
                    6f:a0:5a:35:35:28:83:3c:d8:84:ab:54:c4:a3:4f:
                    95:88:6e:56:9f:1c:96:f2:0b:ff:2f:b6:08:aa:7e:
                    82:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:45:52:47:D9:1D:53:E4:8B:03:D3:D7:1C:29:9B:84:5C:AF:59:7D
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31303a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         59:73:5a:ce:02:86:93:c2:6b:a1:51:77:91:c2:80:e0:c3:26:
         7c:9f:57:50:ed:17:b3:c8:65:4b:89:c4:cd:4e:1f:dc:d9:68:
         97:66:8a:07:07:f8:f6:d1:16:a5:bf:60:c8:5f:e4:ba:2b:0a:
         97:c6:62:51:e3:7e:50:32:f5:af:58:b7:96:f0:83:f0:d9:63:
         e1:84:73:2d:27:f5:f5:40:fc:b5:f3:c5:67:ba:bd:a1:51:ec:
         bf:66:5a:1b:eb:c7:a6:bf:7e:b6:31:9e:26:6d:56:fb:03:ae:
         0f:2e:7a:1f:fe:ff:d2:ae:98:7e:66:7f:eb:62:d3:b7:18:6b:
         26:fe:7c:76:29:f5:fd:ef:89:e3:ae:56:0d:54:78:70:23:1b:
         03:2d:a5:ab:a6:9a:e1:b0:3d:8f:92:62:11:d1:a2:78:2b:f3:
         da:d8:e7:ed:f0:12:22:9b:81:51:c4:80:1b:cd:9e:88:b0:9a:
         a3:ba:9c:64:87:51:ba:3d:4c:b4:8b:27:49:d4:1a:b9:15:81:
         de:a2:2b:76:db:4f:1a:d6:a5:29:19:41:25:c1:53:fd:5b:5b:
         9d:85:4c:a8:56:40:0e:6d:2d:fa:37:87:f8:7e:a0:6d:6b:12:
         db:92:1a:ff:9b:e4:15:b3:0f:9e:bc:a4:aa:47:5a:ab:9d:c3:
         42:3b:c7:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:37:38 2024 by rpki-client on console-ams.rpki-client.org