Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3430203d3e203539393230.roa
File:                     326130613a363034303a3a2f34302d3430203d3e203539393230.roa (raw, json)
Hash identifier:          r9BL7JAh6ICiGYZOlB3V59b7r1BGGY5Uxa3cBxMCLk8=
Subject key identifier:   9F:03:5B:20:EF:30:56:A8:BC:53:73:8F:D1:E1:60:13:53:3E:26:A1
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       0E02904CDD468F7C52814901E9AFD5C7C6E39316
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3430203d3e203539393230.roa
Signing time:             Tue 19 Nov 2024 13:56:14 +0000
ROA not before:           Tue 19 Nov 2024 13:51:14 +0000
ROA not after:            Tue 18 Nov 2025 13:56:14 +0000
asID:                     59920
IP address blocks:        2a0a:6040::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 17:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:02:90:4c:dd:46:8f:7c:52:81:49:01:e9:af:d5:c7:c6:e3:93:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Nov 19 13:51:14 2024 GMT
            Not After : Nov 18 13:56:14 2025 GMT
        Subject: CN=9F035B20EF3056A8BC53738FD1E16013533E26A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:be:31:35:fa:f1:34:58:70:5b:38:e6:9e:d9:
                    bd:a8:0e:86:c2:68:26:f6:fe:28:dc:a6:73:e3:9f:
                    7c:2d:27:70:49:da:da:c1:8d:fd:fe:d9:a3:d8:2a:
                    f1:e3:e9:67:1d:b6:e7:aa:92:77:51:7d:0f:f6:b9:
                    92:9f:57:ee:f2:e5:11:e7:6a:b1:f7:3b:e9:db:5c:
                    ee:2d:55:0e:ed:bb:32:f4:44:3e:50:ee:bb:5f:d9:
                    83:b7:9e:46:30:e9:12:66:19:1d:66:1d:7a:1f:b9:
                    97:1f:95:bb:9f:fa:30:77:fb:2c:33:cb:7d:26:a4:
                    cb:0f:61:ff:67:4b:f1:97:36:25:ac:a9:4b:3c:48:
                    7a:96:8e:cb:ac:c9:bc:38:aa:e1:ca:83:d0:92:7d:
                    90:4b:84:f8:f1:88:6e:8b:6e:9c:3e:8e:2e:e5:e3:
                    41:72:59:5f:05:f6:86:60:ff:97:3b:a7:76:b5:67:
                    91:6a:e1:81:e2:0c:55:ee:46:e9:93:74:bd:ac:4d:
                    60:48:2b:6d:ca:9e:7b:08:26:58:b9:ef:13:e3:11:
                    ae:28:1b:4a:28:1b:81:16:a9:42:26:0c:46:a4:93:
                    e1:0f:4f:f6:1e:ce:92:71:31:c4:90:ce:f9:19:ab:
                    06:20:05:c5:31:21:d3:b8:a5:b0:4b:0d:a3:ce:d6:
                    b8:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:03:5B:20:EF:30:56:A8:BC:53:73:8F:D1:E1:60:13:53:3E:26:A1
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3430203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:0f:d6:d3:56:78:ef:e6:79:61:8d:a1:c1:95:0e:0f:02:64:
         b6:32:2d:81:9c:9a:df:f2:b6:6a:9d:86:e6:f2:1e:54:32:58:
         3c:e5:56:af:a6:d8:37:65:ef:9b:14:b3:5a:ef:57:a4:18:f7:
         89:bc:1e:c3:86:9f:36:ea:28:03:95:4b:15:3d:d5:17:7a:a5:
         06:cf:f2:e1:3d:10:61:f8:22:ad:a3:99:5b:b7:41:85:47:49:
         59:b8:19:4e:f8:13:43:05:c5:0f:46:be:c4:40:a7:c4:cb:f8:
         9e:94:8b:1a:7d:21:0f:50:2d:1f:25:3c:4b:9f:5e:de:d5:a7:
         e5:32:c0:96:85:ff:de:b5:65:d6:3a:1a:fa:d0:d7:99:3e:4f:
         47:d7:c2:21:f3:39:f5:bd:56:58:cc:f4:27:20:4b:dc:bd:8e:
         c4:91:d9:0a:25:2d:b7:23:4e:a2:3e:c6:36:4b:94:8b:ab:9a:
         a3:c5:c5:48:f4:2e:f0:05:b9:d2:34:e6:80:fa:a8:bd:67:f4:
         31:cc:f2:44:31:f3:5a:c1:d7:f8:07:c8:5e:20:4d:c3:16:19:
         b1:48:d7:17:c5:04:71:4c:53:ca:27:8b:16:19:64:f3:7a:15:
         e3:d9:d8:4a:75:24:c7:bf:49:c4:2f:3f:5d:ea:ec:f9:04:39:
         25:6e:01:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:52:37 2024 by rpki-client on console-ams.rpki-client.org