Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31393a3a2f34382d3438203d3e203438353831.roa
File:                     326130613a363034303a31393a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          zCbK5XECjENF7WNL5aVOOmqlsiCYk3Eu/BpyVdM2muw=
Subject key identifier:   7F:F7:C5:48:96:5A:C1:F1:9F:80:E2:AF:73:F3:B5:61:FD:AB:66:C9
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       449FD80E7980A33E1784C090A4F79DA87801D4EE
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31393a3a2f34382d3438203d3e203438353831.roa
Signing time:             Sun 24 Mar 2024 10:15:51 +0000
ROA not before:           Sun 24 Mar 2024 10:10:51 +0000
ROA not after:            Sun 23 Mar 2025 10:15:51 +0000
asID:                     48581
IP address blocks:        2a0a:6040:19::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:9f:d8:0e:79:80:a3:3e:17:84:c0:90:a4:f7:9d:a8:78:01:d4:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 24 10:10:51 2024 GMT
            Not After : Mar 23 10:15:51 2025 GMT
        Subject: CN=7FF7C548965AC1F19F80E2AF73F3B561FDAB66C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:ed:16:9f:00:52:34:1b:6d:7f:8e:35:13:
                    ac:d4:8a:ee:16:78:8a:53:e0:45:87:34:72:d4:e3:
                    a5:40:de:63:72:88:90:e5:61:4b:15:bc:47:1d:52:
                    89:ee:12:f0:9c:20:29:f4:b8:89:9c:ac:f7:86:60:
                    d1:62:57:c2:8d:61:28:b0:ee:93:59:5d:2d:9e:5e:
                    ef:e7:0c:53:5a:89:11:13:7f:57:b4:26:64:af:86:
                    50:71:a0:89:20:94:f0:e0:2b:a7:78:57:0e:1b:0e:
                    32:39:fe:12:0c:fc:67:3a:c8:df:78:ef:d2:f4:55:
                    fe:cf:cd:fd:f0:d5:b4:0c:f7:e2:e3:cf:55:58:5d:
                    65:e5:42:d2:96:7d:e5:36:45:c7:db:11:b3:c1:62:
                    af:0f:a9:cc:84:c0:d9:d6:c3:a8:20:0b:50:c0:5a:
                    c2:01:e7:10:d9:6b:81:0b:f0:b9:fb:0a:5a:07:0c:
                    d2:29:35:29:76:d9:cb:73:8f:e9:a7:cb:d5:55:76:
                    d1:f0:cf:0b:9a:fa:4d:73:f5:8a:43:22:d9:d7:a1:
                    bc:59:d0:5a:3c:6e:b7:c0:8b:29:78:84:4d:f2:a2:
                    87:94:a0:b2:c0:52:f0:81:de:60:8f:93:2e:15:56:
                    3e:74:cd:a9:01:ad:df:e0:40:13:99:09:7c:37:30:
                    4d:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F7:C5:48:96:5A:C1:F1:9F:80:E2:AF:73:F3:B5:61:FD:AB:66:C9
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31393a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:e1:a9:18:aa:7c:40:93:67:06:94:a3:7a:fe:0e:c1:fe:ae:
         8d:35:c6:0f:f5:90:b5:e1:3e:d7:68:65:f1:7b:30:5d:f3:19:
         be:d4:34:71:fc:ff:9a:13:75:11:8d:8f:73:29:72:99:b3:c7:
         f2:cf:9b:67:10:ac:dc:76:34:1a:86:58:d4:69:b0:03:f1:d2:
         9f:e4:c0:58:32:f0:94:2f:0c:11:5a:44:22:87:7b:01:83:91:
         bd:6c:46:93:76:32:80:3e:8c:63:43:1f:f2:99:a7:f3:1e:39:
         4a:5b:96:df:a6:66:fd:8a:8a:cf:c4:cd:0e:da:70:89:9f:df:
         0c:a7:2d:38:e4:7a:63:7e:c9:eb:ac:19:12:e0:ad:29:6c:9e:
         47:15:34:f1:d6:51:2b:03:21:fd:23:6b:9a:74:77:0f:4e:71:
         e2:69:3d:5b:65:7c:45:76:92:40:06:71:6f:a0:7e:97:e7:97:
         21:1e:d2:79:49:f7:e3:62:fc:0d:3e:a1:ad:27:44:bb:7d:fd:
         ba:44:c1:89:25:aa:a6:6a:2b:a2:f1:02:ee:d8:81:42:7f:2c:
         04:f2:b0:08:3e:17:dc:e6:da:34:55:ec:35:bb:5b:82:57:56:
         18:35:1e:d5:58:2c:01:6c:1d:47:22:9d:43:ce:52:a7:f0:e8:
         03:ff:bc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 16:12:32 2024 by rpki-client on console-fra.rpki-client.org