Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a32343a3a2f34382d3438203d3e203438353831.roa
File:                     326130613a363034303a32343a3a2f34382d3438203d3e203438353831.roa (raw, json)
Hash identifier:          Z4wjpNkIY9pwlxZAEsPWcPWpNxYdADJV2jYwUw2ZT6k=
Subject key identifier:   39:44:79:4C:8F:60:45:CB:20:C9:D9:7A:0E:26:05:15:1E:5A:53:40
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       2F706B12F07E55105D5105738277C200909BEC21
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32343a3a2f34382d3438203d3e203438353831.roa
Signing time:             Wed 09 Aug 2023 13:17:10 +0000
ROA not before:           Wed 09 Aug 2023 13:12:10 +0000
ROA not after:            Wed 07 Aug 2024 13:17:10 +0000
asID:                     48581
IP address blocks:        2a0a:6040:24::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:70:6b:12:f0:7e:55:10:5d:51:05:73:82:77:c2:00:90:9b:ec:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Aug  9 13:12:10 2023 GMT
            Not After : Aug  7 13:17:10 2024 GMT
        Subject: CN=3944794C8F6045CB20C9D97A0E2605151E5A5340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f1:8d:f5:fb:f7:9e:41:fb:99:23:63:33:a4:
                    a1:21:4d:6b:87:08:7f:20:da:62:c5:58:27:f7:94:
                    2b:36:c2:d3:c0:db:63:8b:79:a2:bd:c4:4c:38:f4:
                    b4:9b:aa:a4:4a:32:4f:41:3b:5b:c1:b2:3b:76:29:
                    17:9e:b8:7a:c2:98:68:74:31:f2:9c:62:b4:1e:e2:
                    b8:f9:ec:55:11:68:60:5d:03:56:5f:5f:77:18:f2:
                    c3:81:e5:3d:19:b1:c4:51:39:78:6a:19:04:47:2a:
                    c4:97:07:c5:58:a8:39:3b:45:52:22:fc:5e:58:c7:
                    40:64:35:72:4e:d9:37:81:0c:fb:ef:e2:a1:3b:0b:
                    2e:06:57:b8:81:47:ca:f6:a2:53:5d:50:d8:d3:38:
                    cc:fe:c4:72:f0:7b:8a:12:e3:e9:d7:85:9f:31:45:
                    14:86:a4:c1:eb:65:77:8f:02:7c:57:88:4e:db:24:
                    e8:4f:70:c3:26:59:0a:19:48:33:88:84:bd:5a:31:
                    80:bb:a8:52:0b:db:d5:13:16:f3:44:33:95:33:cb:
                    7d:01:71:10:c7:7c:dd:c8:bf:69:6c:74:75:94:bc:
                    a6:05:b7:1a:ee:77:cb:01:b5:99:f7:de:e0:94:5d:
                    c5:db:76:de:ce:5c:a1:7d:d6:71:03:31:ad:6f:7d:
                    5e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:44:79:4C:8F:60:45:CB:20:C9:D9:7A:0E:26:05:15:1E:5A:53:40
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a32343a3a2f34382d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:24::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:18:bd:62:66:c3:c8:71:3e:49:5e:6b:bf:2c:ce:41:d9:7a:
         c5:02:9c:6c:ae:a4:55:56:b3:fd:62:e0:29:18:3c:63:5c:11:
         cb:79:79:be:e1:a5:ce:33:99:ef:d7:26:fd:22:f8:63:f1:2a:
         a1:61:5c:28:78:50:73:96:0a:63:ee:25:74:22:95:a3:9a:e6:
         38:68:6e:ce:4f:b3:df:2d:d5:f0:4e:58:62:e2:9b:97:5e:f2:
         71:3d:d7:63:af:2b:f2:6c:62:2e:89:11:4a:bd:5f:4e:31:54:
         bd:c0:3e:32:f9:4e:84:a5:b3:84:de:38:52:cc:b6:2d:68:27:
         e4:3f:c6:91:60:c9:d8:91:ee:d8:b0:2c:f8:40:48:5f:84:03:
         17:38:e8:4f:8f:2d:4d:b1:c1:6a:58:8d:28:a5:a8:de:6b:6f:
         c0:b7:20:58:95:38:08:67:a7:57:0d:7e:a2:4a:f6:d4:8c:49:
         ea:67:45:e9:f8:03:9f:42:87:56:a0:90:94:78:1b:ee:16:16:
         01:1e:f2:61:37:0c:bb:8d:a0:9f:75:1f:34:e2:d5:21:bf:94:
         07:50:b4:d0:b8:b4:88:be:00:de:cb:67:e8:80:ed:b5:50:c0:
         e0:ae:56:d5:d9:7c:78:f7:29:f5:0a:71:a3:b6:a0:15:f9:3d:
         8f:29:ee:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 16:12:32 2024 by rpki-client on console-fra.rpki-client.org