Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a313a3a2f34382d3438203d3e203438353831.roa
File:                     326130613a363034303a313a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          MN0kG9kzbsDPRWhEXAKIJzRJfPZgpeXk05KXNHIWQ3I=
Subject key identifier:   6F:2F:E0:56:B3:86:C3:16:F3:27:74:40:65:A9:7D:38:6F:21:53:B4
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       67A26994ADC284C63ACF3AB25541E8C1A067755B
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a313a3a2f34382d3438203d3e203438353831.roa
Signing time:             Sun 24 Mar 2024 09:15:51 +0000
ROA not before:           Sun 24 Mar 2024 09:10:51 +0000
ROA not after:            Sun 23 Mar 2025 09:15:51 +0000
asID:                     48581
IP address blocks:        2a0a:6040:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:a2:69:94:ad:c2:84:c6:3a:cf:3a:b2:55:41:e8:c1:a0:67:75:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 24 09:10:51 2024 GMT
            Not After : Mar 23 09:15:51 2025 GMT
        Subject: CN=6F2FE056B386C316F327744065A97D386F2153B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0e:b3:68:59:a0:7c:bf:bd:1c:49:3f:5c:a2:
                    3a:0b:8f:0f:f9:72:ec:e7:87:0d:34:be:a8:40:f3:
                    0d:4c:03:a4:a1:d9:36:65:2c:7a:2e:e9:d7:c6:d6:
                    4f:ac:01:62:b6:bc:52:12:3c:d7:c6:f0:2a:9c:ef:
                    ef:a9:06:8c:bc:25:f4:16:3f:e2:82:b6:a2:ea:cf:
                    f0:ff:9d:2a:4f:a2:9a:68:19:6b:2d:cd:b7:76:ed:
                    56:12:7a:00:56:2d:05:4e:d8:7f:4f:80:76:3b:8e:
                    f4:68:ef:4c:04:cc:13:7c:3e:70:6f:81:3c:e6:e5:
                    fe:21:7a:5f:c3:9f:be:b2:b7:8e:80:d7:72:7a:18:
                    d1:a5:65:fc:08:59:e9:4b:a1:58:0e:55:f5:eb:43:
                    12:f1:42:1e:44:11:6e:9e:1b:d6:fb:df:9b:58:31:
                    8f:8d:f5:2d:48:bf:41:d0:64:44:32:78:1b:fe:a2:
                    99:34:c7:d4:a1:ac:cb:c2:59:85:64:e3:19:2a:85:
                    0f:c5:c3:4e:8c:05:76:ac:a8:e3:ed:ce:2d:23:ff:
                    59:98:14:19:fe:1a:31:86:17:f7:7a:3c:ab:4c:ac:
                    73:fd:7c:2f:d9:bd:80:69:0a:85:cb:e8:7e:dd:8a:
                    ae:4d:83:a8:69:dd:c2:12:ed:dc:d2:a5:7c:03:20:
                    9f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:2F:E0:56:B3:86:C3:16:F3:27:74:40:65:A9:7D:38:6F:21:53:B4
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a313a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:f5:fa:83:85:64:59:a4:ce:38:f1:6b:6e:d9:75:ee:1b:d5:
         e9:c7:f0:f3:60:ed:12:8c:fb:89:66:64:ac:89:02:31:38:1d:
         41:5f:0a:da:30:28:30:9e:8a:ef:57:7f:a3:74:ec:a7:17:29:
         4e:87:21:36:7a:c7:ac:10:8e:49:cd:09:e2:87:ad:0e:63:c0:
         b6:42:67:19:b4:05:06:d5:39:e4:cf:19:ec:04:46:3b:c4:a0:
         80:de:ac:3c:c1:66:a5:07:cc:6f:a1:93:a6:03:4a:95:ea:95:
         e5:0a:85:a1:f6:cf:be:a0:b0:b2:b6:cb:11:d1:07:18:bb:46:
         77:ea:ae:51:66:7e:6c:22:1c:23:c3:ec:a6:a6:6e:45:95:fd:
         44:25:35:4f:8e:21:35:f5:d7:51:26:10:08:6b:06:aa:db:91:
         7d:d0:de:84:12:16:02:d1:08:20:cf:63:b2:ba:42:87:57:28:
         aa:6c:13:ff:01:8a:1a:96:8c:b3:9f:4c:31:3e:4b:dd:23:9f:
         92:27:a0:88:67:51:1a:85:b2:71:7a:3c:8d:a7:bf:30:aa:b4:
         f1:24:d5:b7:1f:e1:50:f3:60:09:09:eb:c9:5f:78:34:a6:60:
         e5:94:7f:70:2a:03:f1:1d:83:79:05:c8:ea:7e:d6:23:98:c1:
         70:01:92:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 16:25:10 2024 by rpki-client on console-ams.rpki-client.org