Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31353a3a2f34382d3438203d3e203438353831.roa
File:                     326130613a363034303a31353a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          WdPsgE1hKRtVGsNQ8CUNwSS7mHUw41i4vXtWN83BXz0=
Subject key identifier:   C9:A1:5A:F6:CA:1B:AC:8E:F8:C7:87:41:F0:17:B3:D1:38:66:07:D4
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       0664F8DD83AEE2723C880DE00D2F2980D5B5D467
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31353a3a2f34382d3438203d3e203438353831.roa
Signing time:             Sun 24 Mar 2024 10:15:51 +0000
ROA not before:           Sun 24 Mar 2024 10:10:51 +0000
ROA not after:            Sun 23 Mar 2025 10:15:51 +0000
asID:                     48581
IP address blocks:        2a0a:6040:15::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:64:f8:dd:83:ae:e2:72:3c:88:0d:e0:0d:2f:29:80:d5:b5:d4:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 24 10:10:51 2024 GMT
            Not After : Mar 23 10:15:51 2025 GMT
        Subject: CN=C9A15AF6CA1BAC8EF8C78741F017B3D1386607D4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:45:71:d4:93:f4:ba:28:31:47:04:30:5b:
                    40:dc:f1:92:2c:e2:f9:c4:ab:78:d8:b8:80:88:1b:
                    2c:7d:38:01:6c:80:38:59:f2:ce:47:70:cf:89:dd:
                    a3:64:34:bb:89:be:93:03:a7:9d:dd:fe:64:a7:43:
                    f8:01:ff:c1:6a:13:48:b3:f6:f9:ae:c3:48:98:5b:
                    41:53:3b:b6:2c:5b:b0:10:4c:d2:32:36:ff:ea:f5:
                    5d:df:c5:00:e7:93:7b:4d:c1:58:90:b7:26:3f:46:
                    05:16:ad:b9:37:ca:25:ac:7a:5f:84:c3:a2:b2:31:
                    18:f1:ca:5c:c8:f7:4e:c5:22:b4:33:93:de:3b:ff:
                    f9:4e:f4:c9:0b:9a:ba:a1:0a:ed:cb:ef:1b:c4:1c:
                    8a:5d:0e:62:a2:c3:4d:9e:9f:b2:1c:df:8e:ff:e3:
                    a1:59:cf:04:f8:12:23:63:2b:62:34:b0:b9:45:2f:
                    08:aa:44:2e:45:0f:cf:44:89:4c:1f:05:17:49:77:
                    ba:b2:13:25:da:f5:f1:84:e6:bf:8e:14:4b:40:f9:
                    8e:e8:5f:7e:3d:13:44:63:2e:36:f0:77:84:1b:d9:
                    7b:01:e7:9f:a6:b7:4b:0f:b1:f6:d4:c7:0f:72:bc:
                    79:61:21:99:b6:2d:3a:5b:af:a6:d6:70:40:70:6e:
                    5f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:A1:5A:F6:CA:1B:AC:8E:F8:C7:87:41:F0:17:B3:D1:38:66:07:D4
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31353a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:8a:eb:e3:e6:77:ec:7d:91:08:5f:76:e9:c2:ba:0c:a2:a0:
         c8:82:2f:81:43:a2:a6:74:c8:2b:7a:db:af:a2:ed:c1:ba:13:
         06:ff:ca:c4:40:be:97:c9:af:64:3a:bf:6b:57:64:10:bd:00:
         db:4f:87:09:64:38:48:fc:55:c2:90:33:66:c0:ca:b2:71:d7:
         07:14:9a:30:3f:ad:bc:86:54:19:51:b7:c5:da:bf:f2:c3:3a:
         ea:aa:ab:76:fe:24:b6:e9:0c:0a:03:18:ae:7c:41:22:99:13:
         e4:9c:47:49:2b:dd:3d:c2:05:97:03:77:b5:01:c3:45:c1:84:
         9f:f0:7b:29:c4:7d:0b:67:01:31:1a:ab:b8:4b:a4:a1:47:08:
         4e:f8:5e:d1:41:d2:60:45:3b:69:95:f2:81:c8:f0:c8:e9:30:
         be:ac:88:e1:dd:c2:58:5a:fd:02:b7:72:a1:93:4b:6b:00:35:
         76:b5:d5:7a:c5:e6:d6:31:85:1b:d1:a5:62:a8:d5:56:f1:23:
         18:fd:c7:fd:c2:d0:e8:5a:1a:f6:f0:51:32:87:f9:5e:ea:e9:
         2a:3d:69:6d:84:49:c5:f6:ac:2e:9b:1e:83:72:7b:62:2b:32:
         69:0d:d7:12:1e:7b:3e:b3:6c:3b:80:ae:ac:97:6b:32:64:d3:
         ac:1c:f6:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 16:25:10 2024 by rpki-client on console-ams.rpki-client.org