Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a32313a3a2f34382d3438203d3e203438353831.roa
File:                     326130613a363034303a32313a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          7ACZWzQzlmbcxotQMTHTcidvd9wpfI6P3WygShNDkag=
Subject key identifier:   11:0C:EB:3C:D9:33:34:4B:C9:6E:0D:4C:C1:46:0C:CE:16:7C:02:61
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       718825E5240E934388D3F1F4B32EC5D6DCBFAC6D
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32313a3a2f34382d3438203d3e203438353831.roa
Signing time:             Fri 21 Jul 2023 18:30:44 +0000
ROA not before:           Fri 21 Jul 2023 18:25:44 +0000
ROA not after:            Fri 19 Jul 2024 18:30:44 +0000
asID:                     48581
IP address blocks:        2a0a:6040:21::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:88:25:e5:24:0e:93:43:88:d3:f1:f4:b3:2e:c5:d6:dc:bf:ac:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Jul 21 18:25:44 2023 GMT
            Not After : Jul 19 18:30:44 2024 GMT
        Subject: CN=110CEB3CD933344BC96E0D4CC1460CCE167C0261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:bc:72:3e:ab:ac:f8:6e:72:e4:75:d5:15:ef:
                    cf:b4:9b:64:b2:10:cd:46:6a:d4:e2:8e:02:e9:22:
                    a0:e6:71:88:68:48:25:ef:86:5d:1a:9e:a0:1a:10:
                    87:39:ce:cc:de:81:d9:10:60:cf:7f:03:a1:68:a4:
                    0c:35:d0:5d:b5:72:51:c8:94:ad:1a:5b:39:db:96:
                    c2:1d:ca:ed:46:91:ec:d8:b9:8f:28:d7:bd:9f:af:
                    84:5a:1b:f0:73:07:c5:c2:dd:d8:01:13:9c:f7:83:
                    79:da:21:f1:8e:4a:68:da:70:7c:54:f6:bd:bb:ca:
                    bd:b7:5e:39:76:d5:92:11:09:3b:33:73:d0:74:1a:
                    00:bb:04:66:1d:e2:64:27:2e:16:fd:28:c0:b8:80:
                    fc:6e:4a:87:9a:76:00:4b:4a:27:14:11:52:35:ab:
                    ad:b0:c4:ac:22:21:c7:0d:fe:e4:a6:8a:e3:54:32:
                    ff:d3:b6:39:2e:c0:93:00:bb:33:cc:37:a0:4b:96:
                    5d:a9:a5:ad:57:57:89:cb:21:36:68:34:6a:ed:3a:
                    18:ca:f6:5d:1f:df:fe:e8:8e:8f:23:50:63:c7:e1:
                    4a:5c:aa:31:d0:e7:fe:bd:f1:94:d7:9a:38:99:53:
                    50:3b:d9:23:23:05:e3:f4:c7:3f:e5:f0:cf:65:1d:
                    03:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:0C:EB:3C:D9:33:34:4B:C9:6E:0D:4C:C1:46:0C:CE:16:7C:02:61
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32313a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:21::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:e8:c2:92:c8:65:e3:ae:69:32:ec:71:07:d4:76:39:3e:5f:
         e6:6f:77:ee:bb:7d:b0:25:e1:bd:d3:df:5b:2f:e4:61:df:19:
         1a:3b:ec:56:00:7c:cc:80:cd:d3:3d:26:96:5f:0c:d3:fa:46:
         3a:ba:6b:c9:89:09:ab:12:d7:3c:6b:2d:4b:22:4c:c2:33:25:
         28:b6:ce:d1:63:da:77:ad:28:41:9a:a5:46:46:b1:96:2c:88:
         21:79:2e:31:db:3f:65:34:99:5b:50:90:fa:2c:3d:16:b7:fe:
         01:e3:ea:1e:76:51:3f:7d:9f:74:7f:08:e4:a7:1b:a6:5f:7b:
         31:51:7d:71:78:3c:bc:54:69:40:aa:19:bf:51:22:bd:7b:15:
         c6:8b:5e:a6:f0:1c:d3:b7:e7:c8:1d:79:98:0c:97:d0:e1:66:
         83:0e:b4:88:6f:34:32:cd:06:09:0b:a4:57:c1:67:92:e2:d9:
         af:fb:88:40:df:38:90:f8:41:6d:31:e5:08:75:b0:e4:9b:b1:
         8d:01:f1:4b:e6:35:60:25:ad:21:ea:5c:fd:35:25:04:b2:97:
         0f:10:77:0f:60:b5:f6:d8:81:2b:b6:ea:9e:f1:06:21:7f:ce:
         fd:49:11:b2:19:54:07:69:72:7e:fd:c5:a1:30:ca:af:e9:96:
         2c:4f:10:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 16:25:10 2024 by rpki-client on console-ams.rpki-client.org