Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31363a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a31363a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          IQGaKQF90GOb+lSjT6+iQvnLrXjNNlXIsGQLZGngvBI=
Subject key identifier:   C6:62:65:CA:B0:31:69:68:1F:D0:05:39:56:45:E3:E1:9D:8D:81:0C
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       158C650CFCED68949B60A8A1520A6FE557647481
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31363a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 22 Apr 2024 11:13:11 +0000
ROA not before:           Mon 22 Apr 2024 11:08:11 +0000
ROA not after:            Mon 21 Apr 2025 11:13:11 +0000
asID:                     50224
IP address blocks:        2a0a:6040:16::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:8c:65:0c:fc:ed:68:94:9b:60:a8:a1:52:0a:6f:e5:57:64:74:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Apr 22 11:08:11 2024 GMT
            Not After : Apr 21 11:13:11 2025 GMT
        Subject: CN=C66265CAB03169681FD005395645E3E19D8D810C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2e:53:0c:7d:27:64:5a:3d:ce:4d:9f:2a:e9:
                    39:c0:f8:33:ac:41:2c:be:94:f3:73:6d:81:74:00:
                    15:4e:c2:ad:df:1d:c5:b4:d3:7a:ba:08:d5:0a:08:
                    a2:9c:ce:8b:ff:d6:99:d4:64:ac:d6:e7:7e:7c:07:
                    a8:9e:9e:9a:8d:79:55:e7:52:7c:e7:1e:fc:e5:16:
                    cb:3e:b3:a8:44:6d:78:27:92:99:45:18:6c:00:53:
                    e7:64:1c:97:39:d7:f3:2d:1f:b8:c8:97:7f:75:c1:
                    8e:5d:a8:89:b8:f0:9a:18:25:45:6c:9b:4d:f0:04:
                    71:a3:71:ec:a4:f5:98:be:00:76:80:f2:c6:97:76:
                    a7:5e:44:78:98:24:0a:eb:7a:01:8e:f0:ee:58:45:
                    e7:1a:04:c0:4c:db:28:34:89:c3:16:07:e1:80:a8:
                    75:e5:ca:a2:6e:65:fc:fb:dd:b3:0f:74:a1:f5:71:
                    af:11:cc:35:8e:ce:c2:45:48:44:e4:e4:e4:82:99:
                    ac:c3:1a:68:e2:1e:4a:a1:00:3a:c3:93:9a:22:7f:
                    3f:44:ea:13:b1:ad:84:df:74:4a:d0:73:9f:70:73:
                    fd:fd:af:9c:28:69:b6:29:be:9d:fb:bb:fc:c0:09:
                    f6:4b:e7:b9:60:4a:86:14:9c:77:1e:55:08:94:33:
                    54:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:62:65:CA:B0:31:69:68:1F:D0:05:39:56:45:E3:E1:9D:8D:81:0C
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31363a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:16::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:5e:4f:de:71:6d:ef:c7:3e:41:e0:50:2c:fe:1c:66:41:5b:
         49:fb:36:50:53:1e:9e:d2:c0:73:b2:07:2d:b0:57:df:c5:67:
         3d:ed:f0:e6:bc:f7:1c:ee:55:cf:28:28:c9:0f:5a:c2:e0:84:
         83:5e:83:52:a6:9c:12:df:bb:73:f5:90:e3:9f:fe:e3:4c:34:
         40:80:a9:cb:9e:ab:63:af:79:96:65:cd:9a:3d:3d:00:b9:ae:
         4e:bc:dc:41:e3:42:0a:e7:db:0c:9b:b1:fb:2f:89:16:6c:b6:
         d3:34:ae:51:41:48:d8:4a:ac:c7:56:ee:14:70:db:a9:26:dc:
         1f:16:2e:0b:25:d1:5d:73:6c:ff:4e:00:f2:4d:9a:b0:eb:12:
         40:07:6a:21:64:59:c6:f8:9a:93:96:11:91:9d:02:a9:31:24:
         8c:b3:ed:63:87:cc:6c:a4:4c:ce:e3:cb:77:d3:dd:b1:38:f4:
         45:4c:ab:74:c7:07:0f:ac:a6:e9:bb:6e:1c:cb:e1:7f:cb:4a:
         64:1a:12:42:57:28:40:5e:d2:90:4b:a7:ec:3f:8b:ec:49:1e:
         6e:52:6e:f6:b7:2d:90:a4:36:08:7f:2a:a3:7a:6f:bf:6b:d4:
         fc:ce:3c:a4:8e:ba:db:7d:78:ad:ce:db:8d:db:5d:ff:71:36:
         26:e8:96:61
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUFYxlDPztaJSbYKihUgpv5VdkdIEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yNDA0MjIxMTA4MTFaFw0yNTA0MjExMTEzMTFaMDMxMTAvBgNV
BAMTKEM2NjI2NUNBQjAzMTY5NjgxRkQwMDUzOTU2NDVFM0UxOUQ4RDgxMEMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxLlMMfSdkWj3OTZ8q6TnA+DOs
QSy+lPNzbYF0ABVOwq3fHcW003q6CNUKCKKczov/1pnUZKzW5358B6ienpqNeVXn
UnznHvzlFss+s6hEbXgnkplFGGwAU+dkHJc51/MtH7jIl391wY5dqIm48JoYJUVs
m03wBHGjceyk9Zi+AHaA8saXdqdeRHiYJArregGO8O5YRecaBMBM2yg0icMWB+GA
qHXlyqJuZfz73bMPdKH1ca8RzDWOzsJFSETk5OSCmazDGmjiHkqhADrDk5oifz9E
6hOxrYTfdErQc59wc/39r5woabYpvp37u/zACfZL57lgSoYUnHceVQiUM1SLAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUxmJlyrAxaWgf0AU5VkXj4Z2NgQwwHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYI
KwYBBQUHMAuGZHJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEv
MzI2MTMwNjEzYTM2MzAzNDMwM2EzMTM2M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMDMyMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoKYEAAFjANBgkqhkiG9w0BAQsFAAOCAQEA
eF5P3nFt78c+QeBQLP4cZkFbSfs2UFMentLAc7IHLbBX38VnPe3w5rz3HO5Vzygo
yQ9awuCEg16DUqacEt+7c/WQ45/+40w0QICpy56rY695lmXNmj09ALmuTrzcQeNC
CufbDJux+y+JFmy20zSuUUFI2Eqsx1buFHDbqSbcHxYuCyXRXXNs/04A8k2asOsS
QAdqIWRZxviak5YRkZ0CqTEkjLPtY4fMbKRMzuPLd9PdsTj0RUyrdMcHD6ym6btu
HMvhf8tKZBoSQlcoQF7SkEun7D+L7EkeblJu9rctkKQ2CH8qo3pvv2vU/M48pI66
2314rc7bjdtd/3E2JuiWYQ==
-----END CERTIFICATE-----
Generated at Tue May 7 22:26:35 2024 by rpki-client on console-fra.rpki-client.org