Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31353a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a31353a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          rheA8wW7aD8B0Q4eKmVYISRLVLZg6jcNCwyuKC1t1Bo=
Subject key identifier:   C4:91:A6:26:58:54:EA:49:51:5A:8A:47:48:A5:08:06:BB:BC:61:60
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       1F19F8D1900C9E5B27F7763781637A9A0B8506BF
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31353a3a2f34382d3438203d3e203530323234.roa
Signing time:             Sun 10 Mar 2024 05:55:49 +0000
ROA not before:           Sun 10 Mar 2024 05:50:49 +0000
ROA not after:            Sun 09 Mar 2025 05:55:49 +0000
asID:                     50224
IP address blocks:        2a0a:6040:15::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 23:04:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:19:f8:d1:90:0c:9e:5b:27:f7:76:37:81:63:7a:9a:0b:85:06:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 10 05:50:49 2024 GMT
            Not After : Mar  9 05:55:49 2025 GMT
        Subject: CN=C491A6265854EA49515A8A4748A50806BBBC6160
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:04:a4:d1:5c:34:5c:52:3c:de:88:54:ee:b7:
                    d7:91:d1:ca:af:3d:bb:5f:b1:89:aa:92:e2:95:c4:
                    61:4c:ea:15:c6:2f:e1:1c:17:8b:b9:05:2f:0c:4e:
                    fb:36:ca:82:16:1e:6f:d4:70:18:6b:45:98:98:f3:
                    a9:57:0a:ad:4a:e5:40:96:00:cc:a7:58:52:95:a3:
                    26:52:44:d9:13:a8:80:1b:07:5d:a4:5c:39:3a:78:
                    a1:3f:03:13:58:23:0e:8d:a8:99:72:8f:af:96:cd:
                    e9:68:6c:f6:c0:f6:ba:aa:9d:85:ff:66:eb:74:22:
                    2e:98:c0:c1:6d:71:be:3b:fd:f1:71:62:54:e5:46:
                    5d:cd:6e:97:f3:83:a6:51:4b:f4:d5:8d:55:3a:21:
                    0b:5f:96:17:81:26:eb:84:d7:68:1a:26:7b:5c:0d:
                    15:9d:af:2b:de:5e:ee:4a:e4:da:90:4d:ba:7f:5a:
                    dd:cb:59:44:a1:f9:69:17:b6:9c:00:d2:ea:4c:c3:
                    5e:f8:85:3b:9e:d4:33:68:2c:2d:e4:13:79:3b:3f:
                    0f:1e:63:b0:e3:16:d4:5b:de:c0:1b:d0:06:5e:1a:
                    bb:02:d9:23:14:91:f5:d1:c1:2c:6f:dd:ba:1f:23:
                    bb:ed:10:13:bf:30:66:91:da:07:61:f1:06:7a:b2:
                    9c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:91:A6:26:58:54:EA:49:51:5A:8A:47:48:A5:08:06:BB:BC:61:60
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31353a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:13:a3:44:d5:a7:e3:c5:9b:5d:4f:4d:d9:38:d3:85:fc:20:
         35:26:0e:c4:2a:bc:91:a3:94:bd:b1:c0:6c:99:79:d8:dd:d0:
         b0:cf:a6:ad:6a:48:a2:c0:3f:b0:ec:4b:79:d3:97:cf:36:d0:
         25:46:0b:95:a3:34:53:63:ab:86:b7:dc:e0:29:6a:61:14:47:
         04:37:94:9e:db:74:3d:98:4c:78:76:e4:83:ef:d9:c5:54:54:
         be:cb:04:3f:57:85:7d:04:1f:37:3d:e7:e6:35:9e:4e:d7:97:
         8d:1f:f3:6c:eb:5c:20:ce:13:22:11:e0:d0:0a:fe:e0:51:e4:
         0f:d4:50:97:62:c4:03:f3:64:81:d8:6f:9b:6c:e4:e8:a3:12:
         3a:31:ce:3d:94:54:60:4f:e6:5d:d1:bf:af:d3:f1:a9:e0:33:
         ce:7d:30:bd:bf:4e:cc:6e:0b:c4:fd:17:da:10:92:58:84:47:
         ba:c9:25:24:0c:81:32:e8:ae:63:ae:c6:64:1b:be:4b:a0:27:
         8e:98:6f:b8:ef:a3:47:c4:c9:6b:76:eb:10:6f:29:72:6b:08:
         75:df:4b:ec:77:6c:79:0c:3c:8d:b8:5f:6c:54:a2:5c:ab:ae:
         29:ec:c6:bc:a8:91:a9:eb:58:ba:f3:5c:99:29:1a:5f:c6:93:
         24:78:e7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 8 15:35:38 2024 by rpki-client on console-fra.rpki-client.org