Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a32303a3a2f34382d3438203d3e203438353831.roa
File:                     326130613a363034303a32303a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          KmXVj9aninHawQ1Qyzt3PSCAz1wc43jdITDg9FWHWXc=
Subject key identifier:   03:EF:25:8D:A6:9C:0B:6C:80:27:63:CC:B6:DC:2B:1B:7E:7D:C0:13
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       24ABC82280E398490672F91CC179F3FF470A691D
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32303a3a2f34382d3438203d3e203438353831.roa
Signing time:             Wed 09 Aug 2023 13:18:00 +0000
ROA not before:           Wed 09 Aug 2023 13:13:00 +0000
ROA not after:            Wed 07 Aug 2024 13:18:00 +0000
asID:                     48581
IP address blocks:        2a0a:6040:20::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ab:c8:22:80:e3:98:49:06:72:f9:1c:c1:79:f3:ff:47:0a:69:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Aug  9 13:13:00 2023 GMT
            Not After : Aug  7 13:18:00 2024 GMT
        Subject: CN=03EF258DA69C0B6C802763CCB6DC2B1B7E7DC013
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:f6:d1:0c:b1:0a:15:4b:a6:ad:9b:d6:b6:
                    90:f8:36:08:99:ee:83:fc:45:39:a4:53:64:f2:a8:
                    93:f8:3e:25:88:5d:33:cd:5f:ff:99:a5:76:0a:3d:
                    37:53:b3:67:00:9b:07:db:ee:2b:01:65:fc:98:f2:
                    4b:5f:b0:35:6f:d9:20:63:ff:a7:39:51:f8:3e:30:
                    73:14:3c:fa:84:d3:80:ba:e0:d1:e2:c3:34:6d:2f:
                    da:4a:53:4a:60:b2:75:32:1a:bf:a8:b3:20:1b:b4:
                    11:d4:15:7f:9e:21:3a:7b:1c:6c:18:99:54:dd:6b:
                    85:68:20:b4:18:a4:1e:e6:06:5d:ed:70:9a:28:92:
                    42:d0:2d:ce:80:8f:e2:ce:45:f8:1f:64:e3:4f:21:
                    dc:3c:31:73:41:a5:bc:05:4c:a2:42:ff:d6:8c:78:
                    15:97:63:f8:f8:23:2f:fd:b9:5d:53:7a:bc:83:39:
                    c8:8e:a5:0b:57:0e:e4:73:7d:60:dc:be:96:bf:f4:
                    77:e2:59:a1:7c:f2:79:e1:aa:23:3b:ba:3a:1d:3a:
                    81:f3:7a:43:04:86:19:0b:39:b1:3f:6a:72:31:33:
                    8f:dc:e5:6f:de:51:ac:97:56:e5:d9:67:9d:cb:c4:
                    ff:b3:10:93:1b:07:fc:bb:9f:57:80:52:f0:72:be:
                    b4:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:EF:25:8D:A6:9C:0B:6C:80:27:63:CC:B6:DC:2B:1B:7E:7D:C0:13
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32303a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:20::/48

    Signature Algorithm: sha256WithRSAEncryption
         b9:6e:5c:64:d3:91:17:84:9e:01:4a:85:e7:fe:29:64:a7:41:
         13:d3:8f:15:f0:74:b7:fd:7c:cd:d7:21:c5:50:6c:e2:f5:f2:
         a2:45:a4:2e:44:9b:f5:8e:74:5c:0f:a9:c3:0e:de:9c:10:02:
         a2:75:96:24:8a:ba:2d:f0:32:6d:cc:54:66:ec:6f:83:04:af:
         1d:dc:93:51:4d:d2:95:6a:e8:5f:6e:74:e0:0e:ca:87:93:8f:
         4c:84:4c:fc:ef:f2:6c:61:a4:5c:0d:5f:78:51:46:5f:b9:52:
         48:37:e8:4e:3d:52:fc:46:cf:e3:7f:65:85:99:92:90:e0:7a:
         80:99:0c:2c:1a:60:21:5a:59:ec:86:28:8f:7a:09:07:ff:ba:
         d5:fe:6a:7d:42:0a:f1:af:5f:d0:d1:32:97:ac:f4:06:ab:63:
         73:c3:ac:3b:97:2b:00:79:b6:01:d3:17:27:e5:65:d6:dc:08:
         9d:0a:11:19:0c:b1:cf:8e:eb:f4:e2:69:36:1b:23:50:49:7f:
         cc:68:56:91:db:ef:0c:d3:33:16:a2:34:ce:3d:5c:43:99:26:
         b8:ad:42:49:c9:4b:61:b7:ff:dd:25:6a:98:ff:51:d5:8b:3d:
         0f:32:6e:09:f7:7a:d1:63:7e:a2:07:a3:6c:2a:ce:b7:c4:f7:
         75:c6:a0:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 16:12:32 2024 by rpki-client on console-fra.rpki-client.org