Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa
File:                     326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa (raw, json)
Hash identifier:          Ry+z0OrunY1JAxRdoAA+xYHNlg/fm+vJd+WQgsKu/Fw=
Subject key identifier:   96:83:62:BD:54:E4:88:67:92:B9:87:79:D1:9E:0E:AC:71:D1:48:9D
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       347AA43E06BC9749074321C8581E8F59026631FA
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa
Signing time:             Fri 22 Mar 2024 12:15:51 +0000
ROA not before:           Fri 22 Mar 2024 12:10:51 +0000
ROA not after:            Fri 21 Mar 2025 12:15:51 +0000
asID:                     48581
IP address blocks:        2a0a:6040:6000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Apr 2024 06:40:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7a:a4:3e:06:bc:97:49:07:43:21:c8:58:1e:8f:59:02:66:31:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 22 12:10:51 2024 GMT
            Not After : Mar 21 12:15:51 2025 GMT
        Subject: CN=968362BD54E4886792B98779D19E0EAC71D1489D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d9:a3:d2:c4:14:f7:97:bf:82:e8:94:2f:e2:
                    f9:84:e1:f5:8c:9c:99:14:5d:e6:45:32:3b:c5:d5:
                    f8:2e:50:b9:dc:43:dc:67:00:0c:83:60:87:ea:1c:
                    eb:3f:7c:94:62:6a:ef:e4:af:e7:6f:0f:b7:e6:75:
                    7f:c1:d4:07:9e:fc:c3:0e:3f:ad:bd:2f:5c:f8:9c:
                    b6:24:b7:d8:01:64:8f:93:dc:bc:97:29:aa:3b:ce:
                    99:9a:bf:10:dc:39:66:79:1c:76:49:ee:86:15:e3:
                    da:ae:75:ae:23:68:99:8b:0c:0f:45:e9:b3:22:26:
                    63:75:34:89:3f:b8:d3:62:39:3c:70:5d:ac:1b:c2:
                    59:65:4c:f6:b6:90:85:29:71:ed:23:c2:ba:57:a9:
                    21:8f:ff:f8:93:ce:87:19:95:b6:f8:25:aa:0c:e9:
                    81:f1:66:a9:ed:99:f4:c7:22:9b:18:74:6e:92:92:
                    84:0a:1b:48:9a:c7:fc:32:29:1c:85:1e:2f:4d:89:
                    3e:8c:ce:76:26:58:f9:c5:2b:de:c0:f5:83:a9:a2:
                    df:cd:7a:0c:6f:d0:35:c5:81:03:ec:3a:31:b1:1a:
                    c5:ac:59:6d:92:d3:87:1b:03:d8:b8:4b:4f:1b:9b:
                    c5:2b:ec:ac:30:65:0d:82:76:1c:69:2d:f9:80:87:
                    ae:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:83:62:BD:54:E4:88:67:92:B9:87:79:D1:9E:0E:AC:71:D1:48:9D
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:6000::/40

    Signature Algorithm: sha256WithRSAEncryption
         85:74:57:81:91:24:c0:e0:5e:ee:ce:93:4c:74:17:b0:d8:47:
         5e:3e:b0:67:18:2f:5b:7f:42:3d:2e:6b:85:85:2a:25:a1:eb:
         f3:50:30:8f:f2:00:68:bf:42:b8:49:38:9d:9f:a2:7f:a4:4e:
         5f:09:9d:af:13:65:7f:89:d2:68:86:91:00:5a:92:f0:6c:25:
         73:b2:bf:c4:27:10:4b:b5:4e:d3:47:fa:9e:26:d3:60:e3:42:
         a5:04:8f:89:3a:7c:97:91:e2:c6:a4:38:9f:c1:7e:eb:54:fe:
         49:ca:46:18:f9:8a:7e:66:dd:dd:3c:f9:07:52:fd:df:2f:e4:
         35:2a:40:dd:d9:4f:6f:8a:60:a6:5f:28:a2:d1:b6:04:e3:42:
         fe:d0:33:7e:fa:1f:72:7f:27:34:d0:d5:51:59:ea:4c:c2:eb:
         f4:92:7c:d5:d2:7c:e3:36:05:b1:08:f8:a2:30:93:67:fd:fa:
         4a:a5:28:c0:a5:08:d0:79:98:50:1e:65:3b:36:1e:74:10:1c:
         ad:bf:54:1e:02:71:bf:f8:01:fe:97:12:f7:c0:92:0a:cb:14:
         7f:cb:cc:f0:f5:be:42:c1:53:a4:60:47:c5:0f:f5:b9:a2:af:
         34:26:a2:18:1a:38:a9:12:eb:a4:87:66:c3:2b:f9:37:53:7e:
         6e:4b:cf:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 17 17:40:14 2024 by rpki-client on console-fra.rpki-client.org