Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31373a3a2f34382d3438203d3e203438353831.roa
File:                     326130613a363034303a31373a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          XrxhgRSf1Ku7YufELJl+1//YfnIUTywFsIJkoToNjgk=
Subject key identifier:   69:44:3E:55:27:C1:38:18:B0:31:C0:61:FD:D3:23:48:61:66:D5:4C
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       5B4009A2E1771B5D25518AA0C3545ADF5806BF19
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31373a3a2f34382d3438203d3e203438353831.roa
Signing time:             Sun 24 Mar 2024 10:15:51 +0000
ROA not before:           Sun 24 Mar 2024 10:10:51 +0000
ROA not after:            Sun 23 Mar 2025 10:15:51 +0000
asID:                     48581
IP address blocks:        2a0a:6040:17::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:40:09:a2:e1:77:1b:5d:25:51:8a:a0:c3:54:5a:df:58:06:bf:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 24 10:10:51 2024 GMT
            Not After : Mar 23 10:15:51 2025 GMT
        Subject: CN=69443E5527C13818B031C061FDD323486166D54C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:db:36:11:4a:2c:b0:e4:64:89:94:8c:b1:4b:
                    99:9f:65:e9:57:57:86:0b:98:8e:0c:a4:09:b6:5b:
                    8b:1b:67:fb:47:13:3a:97:73:ce:7c:21:72:c4:33:
                    5f:6d:48:8a:bc:36:1b:f6:26:aa:7d:90:20:fd:4f:
                    08:11:94:90:65:17:e1:83:a1:83:cd:93:41:ae:2c:
                    4d:e0:ef:9c:b3:3c:71:d5:6f:30:94:bb:bd:08:8e:
                    64:cd:c8:e6:7f:60:cd:28:d0:30:57:51:64:3a:ac:
                    5f:6c:48:ce:78:f1:ec:4e:ca:72:93:21:cb:76:5c:
                    5a:51:68:cc:e3:60:8d:df:55:39:24:ef:bf:32:58:
                    9b:d0:ef:d9:4b:28:00:05:05:0c:c9:bd:09:f4:37:
                    05:bb:9f:2f:d6:a7:5f:35:ef:2e:b7:ef:50:b6:85:
                    3a:47:6a:3b:54:d3:cc:47:7d:39:73:18:35:1b:b9:
                    4c:0d:be:54:c7:d6:60:5e:03:16:84:94:73:6e:6d:
                    9c:75:83:0e:42:b9:31:3e:96:ed:3c:51:20:ea:8f:
                    04:94:8b:a0:67:b4:58:33:98:14:9a:50:03:4b:b4:
                    3d:d2:de:a8:9a:d3:32:60:0a:c3:d4:4d:97:48:a3:
                    fd:02:24:c3:22:16:69:5c:ea:ec:08:bc:68:20:f4:
                    29:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:44:3E:55:27:C1:38:18:B0:31:C0:61:FD:D3:23:48:61:66:D5:4C
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31373a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:17::/48

    Signature Algorithm: sha256WithRSAEncryption
         39:29:9c:c1:d1:03:6f:9a:59:e5:30:53:15:18:2e:f6:89:49:
         63:de:73:f2:45:28:92:b9:9d:48:26:9e:2d:bf:5d:2d:13:82:
         fb:1b:a0:25:fe:1b:5f:f4:38:62:e8:c5:f7:8d:f0:3a:90:63:
         85:a1:06:98:61:b7:e0:e6:52:07:47:56:5a:4d:a2:51:83:fe:
         06:a5:40:8a:65:f1:70:31:b7:80:9c:7d:4d:3a:fa:4b:0a:b4:
         59:21:af:d7:2f:63:ed:14:05:6b:34:71:92:13:b7:04:af:c9:
         b0:1d:a6:0e:9e:34:d3:c2:fb:76:b1:36:72:f6:ff:48:d0:8e:
         ce:4e:53:20:3c:04:4c:c3:9e:d5:df:28:30:3c:ce:5b:41:a3:
         8b:53:53:4f:c0:e2:fd:88:f5:e4:ee:46:d7:0e:64:93:80:ee:
         a0:2b:98:a0:69:7e:4e:05:c5:43:61:a6:cb:13:3f:81:f6:0c:
         ef:a2:e3:67:ef:13:78:d8:05:d5:3e:a8:3c:9f:51:06:22:e9:
         4c:63:87:3a:77:32:da:06:66:7c:1b:69:c7:94:3e:ce:9f:00:
         83:58:46:ab:30:0f:e2:73:a5:52:1e:c6:84:de:ce:df:da:82:
         38:56:8c:04:84:bd:6e:e5:e1:ca:37:e2:08:56:4e:35:39:58:
         b3:81:02:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 16:25:10 2024 by rpki-client on console-ams.rpki-client.org