Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a313a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a313a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          mkPBdTrVozGJ1tsQpPPg5No3MhJctCV6yqbgRLSqngU=
Subject key identifier:   C2:72:2A:EB:50:E9:98:79:06:E0:C6:8C:2D:9B:B0:95:D3:F8:6B:0E
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       77E10F99898114BB8CF22E8A2B5BC2D07E5AD198
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a313a3a2f34382d3438203d3e203530323234.roa
Signing time:             Fri 15 Mar 2024 15:41:08 +0000
ROA not before:           Fri 15 Mar 2024 15:36:08 +0000
ROA not after:            Fri 14 Mar 2025 15:41:08 +0000
asID:                     50224
IP address blocks:        2a0a:6040:1::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:e1:0f:99:89:81:14:bb:8c:f2:2e:8a:2b:5b:c2:d0:7e:5a:d1:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 15 15:36:08 2024 GMT
            Not After : Mar 14 15:41:08 2025 GMT
        Subject: CN=C2722AEB50E9987906E0C68C2D9BB095D3F86B0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:b4:a7:6d:85:95:30:5e:28:75:9b:26:b2:
                    5d:af:fc:16:df:53:f9:98:a5:a3:13:4a:c1:c3:e3:
                    1c:0e:3f:d2:4e:d8:a8:a4:fc:fe:9e:58:6d:56:79:
                    26:21:cb:d3:bd:fa:06:73:ee:69:e1:3a:85:7b:0f:
                    a5:bf:2a:75:84:ef:f6:4c:ab:28:92:e9:22:ca:b6:
                    f5:2f:b1:ff:ba:e0:90:d1:65:d1:cb:c2:f7:85:32:
                    97:43:30:f6:c1:1d:22:1e:4a:23:bc:62:32:ec:40:
                    e3:6b:65:e2:5c:88:b3:56:51:66:8e:e0:30:0e:e5:
                    90:59:56:a7:c7:12:9f:ad:61:6e:23:28:81:2d:4b:
                    de:17:45:91:41:13:41:96:92:88:de:1a:1e:e9:9e:
                    9b:81:93:5b:02:08:48:5b:17:b2:44:09:94:19:06:
                    3e:03:c7:18:18:58:fa:f7:40:51:51:3d:a8:17:95:
                    7d:59:2c:e6:97:bc:33:73:c2:f6:0e:dd:c3:6a:6e:
                    af:6b:9d:c3:a5:b4:65:8a:63:5a:f6:a4:09:fa:3c:
                    da:73:00:63:b0:b1:6d:cd:36:1f:00:a7:2c:66:15:
                    63:ec:b9:c6:f1:fa:bd:8a:62:5d:31:d2:4e:9a:eb:
                    89:cb:21:21:8a:e5:4b:51:17:f1:eb:70:bd:16:b8:
                    f7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:72:2A:EB:50:E9:98:79:06:E0:C6:8C:2D:9B:B0:95:D3:F8:6B:0E
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a313a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:b0:85:67:ce:c5:e2:4c:00:ee:73:24:ef:e0:6c:5d:30:34:
         22:74:92:e2:e9:3e:0c:41:a1:19:d2:ee:28:75:96:46:e8:96:
         d5:7d:ef:b9:89:06:ff:d2:45:32:64:d5:20:9d:39:af:70:72:
         23:26:0d:88:ba:ac:e9:0a:f4:91:0c:e1:8e:7a:f0:41:db:55:
         38:d2:c2:44:d9:60:ea:cb:de:a0:8c:24:5f:ab:d6:89:28:42:
         70:49:98:b6:55:f6:02:49:f7:7c:a1:f6:4e:22:d0:c1:5b:4d:
         12:6b:6a:c2:b8:00:cf:98:fa:7b:d4:b5:21:30:69:90:92:c8:
         d8:35:c2:d5:9b:8a:28:dc:16:aa:7a:8b:93:1b:f7:55:c8:9c:
         7e:3e:4d:66:d9:84:5e:37:b6:23:22:ca:d8:3e:42:33:e1:85:
         f7:73:c4:d8:a6:57:38:b8:01:b7:68:58:a5:8b:d8:75:b3:62:
         c3:fc:0f:d1:d7:06:25:3c:62:54:f5:33:b0:4a:d7:f5:ec:0b:
         da:9b:04:a7:ac:45:a5:6b:8f:8f:39:0a:76:dc:dd:9a:b1:14:
         85:dc:94:08:ba:ca:db:16:a2:31:0c:ff:f7:e6:23:13:8b:f9:
         e9:17:52:cf:01:a1:e2:d2:e6:51:bc:17:4b:2c:7b:91:87:dc:
         ee:cb:55:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:26:35 2024 by rpki-client on console-fra.rpki-client.org