Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a32313a3a2f34382d3438203d3e203530323234.roa
File:                     326130613a363034303a32313a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          CdKtD93n2aqbb/BD7/C0QvTkGeCr882uAxGi00XQrbs=
Subject key identifier:   F3:62:8E:94:34:1A:06:0E:F5:1E:37:1B:F8:DB:A3:8E:7A:3E:47:CD
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       5BB67598D030278C5719FF274087140ABD1566B2
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32313a3a2f34382d3438203d3e203530323234.roa
Signing time:             Wed 28 Feb 2024 13:24:44 +0000
ROA not before:           Wed 28 Feb 2024 13:19:44 +0000
ROA not after:            Wed 26 Feb 2025 13:24:44 +0000
asID:                     50224
IP address blocks:        2a0a:6040:21::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 08 May 2024 10:28:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:b6:75:98:d0:30:27:8c:57:19:ff:27:40:87:14:0a:bd:15:66:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Feb 28 13:19:44 2024 GMT
            Not After : Feb 26 13:24:44 2025 GMT
        Subject: CN=F3628E94341A060EF51E371BF8DBA38E7A3E47CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ad:f6:5f:d3:03:e8:17:c1:cc:c1:d1:90:a4:
                    c5:0f:93:05:9d:c6:1c:ad:db:49:59:21:b5:fa:27:
                    59:4f:5b:c7:1b:80:59:96:60:db:26:61:d0:6e:8e:
                    9a:2c:bf:1f:48:5d:09:c8:29:d8:57:e7:e6:25:e8:
                    01:ec:bd:24:18:1c:17:1f:e4:d0:fd:49:f6:b2:7a:
                    a8:5e:a4:65:05:49:d6:5c:be:bc:0b:74:f4:bc:ef:
                    f5:31:13:b4:86:b1:b6:8b:f1:fa:fc:dd:db:46:63:
                    b1:75:06:a0:7c:0b:0e:86:14:ba:64:f3:b8:ff:77:
                    86:cb:c0:fe:78:1e:dd:98:41:45:93:82:8c:e9:97:
                    69:12:74:03:5a:f5:fe:be:29:d1:4b:5b:f4:40:b6:
                    5e:e0:18:07:b1:bc:fe:48:55:9d:5c:8b:14:50:11:
                    0a:c6:64:06:3d:6a:df:02:c0:7f:90:f7:ed:87:00:
                    09:f7:4b:06:df:6a:cb:40:cc:73:16:2d:27:92:24:
                    90:d0:09:de:a9:cb:1f:ce:e5:82:a6:db:8f:00:1f:
                    a1:7a:65:41:3a:91:ff:22:df:24:a5:56:43:87:94:
                    b7:09:5d:d0:e1:bc:a7:15:09:85:81:7d:94:d4:f6:
                    a0:aa:3f:61:84:b4:b3:6f:01:5c:0c:62:5b:e0:7a:
                    92:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:62:8E:94:34:1A:06:0E:F5:1E:37:1B:F8:DB:A3:8E:7A:3E:47:CD
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32313a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:21::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:82:cc:65:5e:d0:14:79:87:c1:5a:3f:07:1e:4a:f7:a1:2e:
         6c:49:f5:2f:33:75:4a:08:11:53:e2:ed:66:2a:e6:2d:fc:af:
         c0:92:f1:50:ec:ad:4c:28:31:96:62:74:19:70:02:8e:93:8c:
         49:86:3a:86:0c:08:cc:d2:c6:e0:ed:0e:2a:e7:bf:b4:6e:26:
         f4:99:24:f5:54:ad:85:8c:a6:e8:d9:d4:33:60:0b:0e:aa:fd:
         17:86:4b:1f:34:a7:57:9e:b5:57:7d:cc:a2:77:8c:ab:17:3f:
         0a:0f:fd:a2:24:f7:6b:87:de:b8:a8:7c:37:77:24:6b:8e:5a:
         8a:bb:f6:05:fe:31:8c:26:75:fe:11:61:72:59:b1:e1:0b:11:
         a5:5f:3f:93:c9:86:c2:c4:82:67:54:30:d7:ec:3d:cf:85:fd:
         a4:5b:b0:c8:70:9b:68:ed:e3:54:74:0c:10:2b:84:bb:c8:6c:
         48:f6:80:d4:7c:98:ca:4b:24:01:76:b9:62:59:59:2e:0d:55:
         2d:04:8b:52:5c:c6:ba:d6:98:52:ae:d5:3a:08:f8:cd:f5:12:
         c9:de:27:81:52:84:23:a0:ad:2e:79:46:6b:51:8e:6f:40:37:
         8d:a8:46:1f:d1:d7:46:9b:63:5c:a1:38:19:d1:21:6e:ac:9b:
         1c:a7:01:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 7 22:26:35 2024 by rpki-client on console-fra.rpki-client.org