Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a31393a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a31393a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          uyNGAsULScExDuUVVei8r9dBLfmCpldPQNYp+rLg15c=
Subject key identifier:   63:C4:BE:EE:8F:3C:FB:38:B8:75:B1:4D:29:46:32:2F:6D:8B:06:47
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       7303057CB014D38639450041D39BA0E1182C46CF
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31393a3a2f34382d3438203d3e203530323234.roa
Signing time:             Mon 22 Apr 2024 11:13:18 +0000
ROA not before:           Mon 22 Apr 2024 11:08:18 +0000
ROA not after:            Mon 21 Apr 2025 11:13:18 +0000
asID:                     50224
IP address blocks:        2a0a:6040:19::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:30:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:03:05:7c:b0:14:d3:86:39:45:00:41:d3:9b:a0:e1:18:2c:46:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Apr 22 11:08:18 2024 GMT
            Not After : Apr 21 11:13:18 2025 GMT
        Subject: CN=63C4BEEE8F3CFB38B875B14D2946322F6D8B0647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:a4:6e:6e:bb:f5:d2:b2:05:49:65:de:cb:
                    84:53:89:ba:6c:36:5f:16:71:74:c3:ad:89:1c:ca:
                    dc:ca:b4:a0:e9:0b:86:ca:81:46:56:95:1a:33:5c:
                    5d:73:6f:12:9a:7c:89:80:36:01:86:90:a4:58:6a:
                    e8:5b:3e:65:f8:41:14:ae:e3:38:a8:40:40:7e:aa:
                    e0:55:8d:6b:07:20:53:c6:98:19:75:7d:0a:4b:6b:
                    2d:93:79:0b:33:f4:e4:33:32:e0:9e:c9:1a:3d:e9:
                    ff:a3:36:81:9d:4f:82:0f:db:78:78:aa:53:84:3f:
                    0b:23:76:ed:53:e3:f5:e1:c9:22:8c:3e:62:59:ec:
                    ea:7d:28:53:de:df:b5:56:42:e3:68:8e:44:81:4a:
                    2d:9d:4a:65:61:5f:f0:2a:c0:b0:b9:5f:f0:84:52:
                    54:bd:89:1b:22:5f:45:b1:1a:aa:53:f4:fc:1b:91:
                    a1:b3:34:80:b4:bf:55:28:1b:b4:54:f6:37:11:fc:
                    a1:5e:19:e4:04:e7:ca:e5:53:2a:25:5b:b0:da:5a:
                    ed:86:d5:f0:35:81:aa:88:d0:af:a0:89:ca:6c:96:
                    a8:21:56:40:0e:5d:e4:f5:dd:b4:6b:bf:37:2c:88:
                    05:4a:f5:dc:b3:2d:f6:f7:3d:1c:1c:49:c3:8f:c3:
                    e7:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:C4:BE:EE:8F:3C:FB:38:B8:75:B1:4D:29:46:32:2F:6D:8B:06:47
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a31393a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:19::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:c2:06:f0:4e:f9:7b:0c:df:d5:eb:22:96:98:8f:d0:cb:34:
         a0:c1:78:54:37:83:aa:86:9f:50:ee:d9:41:99:4c:8f:6e:8e:
         50:e9:ef:c8:e0:72:bd:d7:56:e2:ec:06:d7:c4:f6:ed:af:6e:
         17:ca:54:e5:d5:24:65:5a:d9:03:10:3f:7c:7d:cc:35:4c:97:
         00:48:cf:26:ed:6c:96:4c:2d:7b:4d:5f:94:ce:c3:01:c7:d1:
         7a:31:f5:59:b8:3a:84:af:e4:fa:4a:7f:33:f0:ed:95:58:38:
         6a:22:3a:1d:a2:31:db:56:7b:8f:29:1a:d0:bc:99:22:e8:28:
         31:1d:b8:86:51:68:87:fc:64:5f:29:8e:3b:9a:c8:aa:e3:7d:
         ab:8b:c4:29:92:24:cf:28:8c:1a:3c:2a:ff:e9:9b:f4:06:3f:
         3e:63:de:88:79:46:da:35:75:8d:a1:82:a4:2c:00:3d:98:5b:
         d8:31:c2:c7:66:be:8e:5e:35:35:13:5a:fa:59:8f:97:fc:ce:
         8f:53:86:6c:e4:cd:54:78:d2:1d:81:21:cb:53:47:4e:d8:4a:
         83:60:7b:c5:f5:05:85:74:bb:9a:83:f3:c0:cc:96:54:6a:11:
         29:3a:ca:af:f2:f7:0b:0a:73:33:4d:5a:70:0c:4f:12:d7:02:
         00:c8:1a:f6
-----BEGIN CERTIFICATE-----
MIIE7DCCA9SgAwIBAgIUcwMFfLAU04Y5RQBB05ug4RgsRs8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1
MzQ4NjBCOTAeFw0yNDA0MjIxMTA4MThaFw0yNTA0MjExMTEzMThaMDMxMTAvBgNV
BAMTKDYzQzRCRUVFOEYzQ0ZCMzhCODc1QjE0RDI5NDYzMjJGNkQ4QjA2NDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCia6Rubrv10rIFSWXey4RTibps
Nl8WcXTDrYkcytzKtKDpC4bKgUZWlRozXF1zbxKafImANgGGkKRYauhbPmX4QRSu
4zioQEB+quBVjWsHIFPGmBl1fQpLay2TeQsz9OQzMuCeyRo96f+jNoGdT4IP23h4
qlOEPwsjdu1T4/XhySKMPmJZ7Op9KFPe37VWQuNojkSBSi2dSmVhX/AqwLC5X/CE
UlS9iRsiX0WxGqpT9PwbkaGzNIC0v1UoG7RU9jcR/KFeGeQE58rlUyolW7DaWu2G
1fA1gaqI0K+gicpslqghVkAOXeT13bRrvzcsiAVK9dyzLfb3PRwcScOPw+cBAgMB
AAGjggH2MIIB8jAdBgNVHQ4EFgQUY8S+7o88+zi4dbFNKUYyL22LBkcwHwYDVR0j
BBgwFoAUhVYOhvZF8ekDyGJ6Mb22XFNIYLkwDgYDVR0PAQH/BAQDAgeAMGMGA1Ud
HwRcMFowWKBWoFSGUnJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEvODU1NjBFODZGNjQ1RjFFOTAzQzg2MjdBMzFCREI2NUM1MzQ4NjBCOS5jcmww
egYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUtcmVw
by5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzg1NTYwRTg2RjY0NUYxRTkw
M0M4NjI3QTMxQkRCNjVDNTM0ODYwQjkuY2VyMIGABggrBgEFBQcBCwR0MHIwcAYI
KwYBBQUHMAuGZHJzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVuLzEv
MzI2MTMwNjEzYTM2MzAzNDMwM2EzMTM5M2EzYTJmMzQzODJkMzQzODIwM2QzZTIw
MzUzMDMyMzIzNC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEF
BQcBBwEB/wQTMBEwDwQCAAIwCQMHACoKYEAAGTANBgkqhkiG9w0BAQsFAAOCAQEA
ucIG8E75ewzf1esilpiP0Ms0oMF4VDeDqoafUO7ZQZlMj26OUOnvyOByvddW4uwG
18T27a9uF8pU5dUkZVrZAxA/fH3MNUyXAEjPJu1slkwte01flM7DAcfRejH1Wbg6
hK/k+kp/M/DtlVg4aiI6HaIx21Z7jyka0LyZIugoMR24hlFoh/xkXymOO5rIquN9
q4vEKZIkzyiMGjwq/+mb9AY/PmPeiHlG2jV1jaGCpCwAPZhb2DHCx2a+jl41NRNa
+lmPl/zOj1OGbOTNVHjSHYEhy1NHTthKg2B7xfUFhXS7moPzwMyWVGoRKTrKr/L3
CwpzM01acAxPEtcCAMga9g==
-----END CERTIFICATE-----
Generated at Sat Nov 23 05:09:59 2024 by rpki-client on console-fra.rpki-client.org