Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa
File:                     326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa (raw, json)
Hash identifier:          PruXG9odfpvj4lMprapax7+MvUB9dvSUC9Xdulqx3jk=
Subject key identifier:   9C:87:D0:6B:0E:A1:D5:68:33:69:55:D4:E7:E4:1B:65:3F:CA:AA:C1
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       2A909AB1B444B282A052F2A59DB8185764B3613A
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa
Signing time:             Fri 22 Mar 2024 12:15:51 +0000
ROA not before:           Fri 22 Mar 2024 12:10:51 +0000
ROA not after:            Fri 21 Mar 2025 12:15:51 +0000
asID:                     203867
IP address blocks:        2a0a:6040:60e0::/44 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 May 2024 07:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:90:9a:b1:b4:44:b2:82:a0:52:f2:a5:9d:b8:18:57:64:b3:61:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 22 12:10:51 2024 GMT
            Not After : Mar 21 12:15:51 2025 GMT
        Subject: CN=9C87D06B0EA1D568336955D4E7E41B653FCAAAC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ec:ec:4e:1f:0b:bc:e0:e2:a1:56:94:38:33:
                    18:54:62:57:95:5a:ab:0b:26:3b:c9:61:bc:9d:f6:
                    e7:1e:98:90:28:24:5e:e1:4e:cd:fc:97:8b:4d:67:
                    f7:5c:18:c5:e6:c0:30:05:90:ab:3f:a6:4b:55:dd:
                    67:d9:56:ec:95:94:79:ae:ab:03:ee:3e:50:e4:90:
                    de:b4:3d:91:38:4d:1b:26:92:78:bd:9d:23:5f:24:
                    a1:a1:e8:ee:a3:98:d9:d1:d4:fd:4a:6a:f9:df:b3:
                    9b:49:5b:9a:d5:89:36:ad:50:ba:a7:b7:14:68:34:
                    dd:13:ad:37:43:9d:4c:8c:ef:e7:25:12:35:82:1d:
                    86:e9:b1:b7:1c:2f:12:a5:28:c6:50:73:93:96:df:
                    7b:e2:8b:1d:d7:68:f7:b1:12:7e:24:52:09:f6:92:
                    24:7a:23:79:8f:32:01:2d:45:27:0c:f0:36:d3:c4:
                    5b:aa:f5:c1:54:3f:ad:65:bc:07:5a:87:8d:d5:16:
                    05:a7:89:35:fe:36:e8:8d:98:76:9b:00:5b:70:8f:
                    11:3e:f9:db:06:55:3c:85:99:b7:09:62:0f:6c:e4:
                    44:be:f8:a7:32:ee:57:2f:0e:37:d3:35:0b:d0:b7:
                    0e:b7:2a:b3:2b:fe:94:9e:a8:64:14:0f:7c:c1:03:
                    5c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:87:D0:6B:0E:A1:D5:68:33:69:55:D4:E7:E4:1B:65:3F:CA:AA:C1
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040:60e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         95:b9:79:c6:8d:93:bf:5f:ab:35:bd:43:e0:13:e2:51:16:af:
         63:c8:95:ed:8f:bd:ce:0f:31:8f:cf:14:34:af:91:dd:a5:78:
         99:8f:bd:57:dc:c1:f6:2f:b8:89:5c:1a:3b:06:c7:17:83:26:
         cd:fe:8d:b5:bc:22:de:85:96:67:8b:15:d9:66:5c:2e:95:fc:
         bf:b5:71:8b:c4:08:50:03:9b:c3:94:f4:f9:21:dc:1c:35:a5:
         11:12:d1:b2:bb:5b:e3:59:e3:78:5f:38:c3:63:01:3a:af:3f:
         48:bf:bf:4d:a1:95:41:c2:f1:c9:8b:89:60:1f:9c:62:7a:f8:
         43:77:77:b4:f2:fd:f0:65:26:d7:d7:01:08:b8:fb:b3:36:95:
         4f:3a:5a:18:ee:f1:44:ae:6c:78:d4:17:58:24:35:0c:87:3a:
         a0:db:af:d5:2c:53:00:fb:53:d0:b9:d7:39:b8:63:65:a1:3e:
         11:14:bf:b4:e7:6f:9d:2c:48:a0:69:95:29:c9:58:22:f9:97:
         72:57:f2:1b:59:91:4c:ae:98:7e:0f:95:3a:40:5c:1e:d1:54:
         0d:25:ee:26:f3:e0:99:a5:bc:73:ff:12:59:97:87:ba:a9:b9:
         10:e8:b6:1a:ec:0c:2b:a3:41:73:d0:2d:84:33:1c:05:9c:74:
         27:d1:94:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 13:11:27 2024 by rpki-client on console-fra.rpki-client.org