Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3430203d3e203539393230.roa
File:                     326130613a363034303a363030303a3a2f34302d3430203d3e203539393230.roa (raw, json)
Hash identifier:          VTYjkh0J0IeLAR4M3bVR8jLNNaoIUOFyOU3+SG2mTFU=
Subject key identifier:   27:FD:DA:80:00:21:84:4C:AD:36:D1:5B:65:ED:D4:30:90:1A:54:95
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       54EE094627C2EF5BA1C4263BDBA18638AE979B6E
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3430203d3e203539393230.roa
Signing time:             Tue 19 Dec 2023 13:02:13 +0000
ROA not before:           Tue 19 Dec 2023 12:57:13 +0000
ROA not after:            Tue 17 Dec 2024 13:02:13 +0000
asID:                     59920
IP address blocks:        2a0a:6040:6000::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 03:53:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ee:09:46:27:c2:ef:5b:a1:c4:26:3b:db:a1:86:38:ae:97:9b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Dec 19 12:57:13 2023 GMT
            Not After : Dec 17 13:02:13 2024 GMT
        Subject: CN=27FDDA800021844CAD36D15B65EDD430901A5495
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:07:04:ae:e3:1d:b1:e6:51:18:d5:5e:4e:ae:
                    ff:4a:90:62:b2:8c:9f:68:80:2f:fd:db:57:b2:d9:
                    dd:1a:65:e8:0b:9d:05:e0:23:4a:93:6c:81:6c:3b:
                    20:35:23:e9:d7:eb:be:50:98:ec:59:bb:b9:19:01:
                    78:da:16:5d:45:6d:4b:da:55:ba:ba:c5:83:ab:a1:
                    51:fa:99:10:40:33:bd:85:f7:fc:55:72:e1:a9:2b:
                    7b:af:61:66:1f:a4:16:65:e4:a6:b6:8c:ff:85:be:
                    89:cd:77:e0:0c:5c:c1:bc:69:e9:79:5c:0d:ec:ba:
                    cc:c9:b3:90:66:1a:f8:dd:60:22:77:c6:66:f7:76:
                    2c:7b:41:92:08:0a:40:3b:68:8c:9f:99:30:7d:a8:
                    36:82:0d:bf:04:ab:04:76:af:33:b7:41:0d:1f:a4:
                    12:58:eb:ed:8a:c2:39:a7:80:d2:7e:ec:7f:d6:58:
                    76:1f:38:3c:90:ec:70:79:6f:4c:7c:42:23:31:ab:
                    46:ab:b8:7b:7a:ca:85:7b:69:e5:90:9d:20:34:3c:
                    c1:7d:d4:f4:4e:f6:19:e7:06:e5:fd:e4:6c:7b:1f:
                    94:2e:d8:23:ab:1b:77:8f:e6:0f:2a:41:43:3f:74:
                    97:b7:d3:f5:95:f5:f3:ad:e5:09:a1:04:6d:75:4d:
                    9c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:FD:DA:80:00:21:84:4C:AD:36:D1:5B:65:ED:D4:30:90:1A:54:95
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3430203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         94:53:11:ee:7c:da:a2:3f:da:96:06:98:32:ef:cf:60:11:91:
         9c:4e:fe:54:a9:a2:db:7b:f5:b3:ce:f4:78:d3:8c:89:d0:aa:
         92:d4:44:86:ce:05:4f:ff:27:cc:b8:7d:28:4c:3b:84:5a:a8:
         fe:f1:0a:4c:8d:98:c9:61:9c:09:39:5c:7b:51:21:f9:ee:06:
         66:ab:87:01:41:8b:3b:ab:cc:1c:d4:de:ff:8c:c1:56:bf:d1:
         52:3e:c3:15:29:f8:ea:4e:4a:57:56:1a:fc:2e:0e:ce:5d:b6:
         5c:84:61:26:f3:92:70:94:7c:95:eb:35:22:9f:1b:5d:7a:53:
         0f:ac:dc:e8:06:9f:01:46:bf:ca:f8:8d:e6:37:66:cd:45:d6:
         bc:4e:59:1f:60:10:cf:44:5d:ad:32:bd:a4:6d:5b:a1:1c:fd:
         ac:c6:b5:7c:1e:9c:18:7c:33:b4:13:05:4c:62:a3:8f:b2:e7:
         ee:de:d5:d6:67:22:52:9e:0f:ef:b8:b9:37:88:94:d2:18:c9:
         b7:a6:33:c3:b2:82:02:80:a2:ba:cf:0a:7b:21:33:13:7e:0a:
         f2:78:87:9f:f4:7b:44:af:29:18:bb:07:da:15:09:e1:8e:9a:
         8c:c5:c2:75:19:ff:ac:3e:f8:4e:ee:ee:8e:81:d5:23:3d:c6:
         7a:b0:dd:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 14:11:48 2024 by rpki-client on console-fra.rpki-client.org