Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e203438353831.roa
File:                     326130613a363034303a3a2f34302d3438203d3e203438353831.roa (raw, json)
Hash identifier:          XyJ5jnZhuBEMJxY0FNWtxVIoc01J4/yZysrLBjfxLX0=
Subject key identifier:   8B:91:FA:99:1F:07:C0:CA:D6:0F:DA:FF:FF:EC:64:C4:24:0D:64:B8
Certificate issuer:       /CN=85560E86F645F1E903C8627A31BDB65C534860B9
Certificate serial:       2F230C43792A23C30135DA3D282CD986D37D2394
Authority key identifier: 85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e203438353831.roa
Signing time:             Fri 22 Mar 2024 12:15:51 +0000
ROA not before:           Fri 22 Mar 2024 12:10:51 +0000
ROA not after:            Fri 21 Mar 2025 12:15:51 +0000
asID:                     48581
IP address blocks:        2a0a:6040::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl
                          rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:23:0c:43:79:2a:23:c3:01:35:da:3d:28:2c:d9:86:d3:7d:23:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85560E86F645F1E903C8627A31BDB65C534860B9
        Validity
            Not Before: Mar 22 12:10:51 2024 GMT
            Not After : Mar 21 12:15:51 2025 GMT
        Subject: CN=8B91FA991F07C0CAD60FDAFFFFEC64C4240D64B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:14:7a:2f:a9:31:b5:d8:69:0e:e4:98:33:9c:
                    11:b0:b8:6e:4a:d0:b5:2a:78:a6:48:e3:1a:f2:ea:
                    bc:33:9e:ad:f5:de:d5:13:c7:07:2f:70:d2:ad:be:
                    11:e5:da:91:46:e9:7e:04:7f:8c:93:56:9a:8a:22:
                    70:fb:fd:c6:e5:bf:f1:90:2f:1c:cd:ff:a7:d8:0d:
                    91:02:b2:bc:5f:cb:43:3e:f5:a7:50:01:eb:19:cf:
                    a4:8d:71:af:3b:37:83:c2:6a:10:93:6a:d3:c9:50:
                    b5:8c:55:00:02:3f:ae:ce:ca:0e:4e:e1:a7:23:85:
                    91:ff:b3:e6:e4:7a:84:95:97:a3:3a:61:ec:3e:61:
                    1b:ba:7c:ea:ce:cb:c9:20:86:99:27:89:01:cb:bd:
                    25:87:0f:1d:83:af:9b:2e:aa:f4:77:37:34:af:b2:
                    0d:b5:88:1b:3b:16:86:25:c3:7a:fa:f6:06:5b:7d:
                    d6:ff:f9:14:fd:05:c9:f9:40:ee:e6:c1:9c:46:fe:
                    74:2f:fb:02:9a:4f:75:be:eb:0c:17:73:13:86:85:
                    e2:f1:77:47:43:c7:ed:1b:f1:17:98:76:b0:2d:ac:
                    7d:c3:1c:cb:52:ca:63:74:3e:d2:b2:ef:23:e5:7a:
                    a0:b9:43:86:98:eb:f5:d8:4d:45:25:03:d0:58:de:
                    2d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:91:FA:99:1F:07:C0:CA:D6:0F:DA:FF:FF:EC:64:C4:24:0D:64:B8
            X509v3 Authority Key Identifier:
                keyid:85:56:0E:86:F6:45:F1:E9:03:C8:62:7A:31:BD:B6:5C:53:48:60:B9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/1/85560E86F645F1E903C8627A31BDB65C534860B9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/85560E86F645F1E903C8627A31BDB65C534860B9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/1/326130613a363034303a3a2f34302d3438203d3e203438353831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a0a:6040::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:2c:4f:be:12:98:7a:d6:c7:31:a1:8a:70:e9:98:ab:5b:63:
         74:fb:ab:a6:73:ae:02:0f:bb:11:dd:6b:d1:e9:a5:8a:d1:7d:
         c7:09:d7:d1:5b:3f:80:ad:b2:2f:91:32:9e:05:4a:27:d2:fc:
         5f:e3:b8:1c:f4:5c:c5:de:d6:2c:92:11:d4:0a:04:1c:50:bc:
         e4:aa:39:8b:96:12:be:ce:3c:60:00:4c:1d:3e:73:77:34:24:
         da:02:6f:6c:6a:41:5b:ed:24:b7:76:ce:4f:cf:d5:14:dd:96:
         1a:5b:15:81:57:15:1f:e3:21:e1:21:c7:f3:66:26:c3:1c:39:
         7c:e1:9d:b2:77:24:1d:b8:e3:23:72:1b:ff:01:6b:2d:43:4c:
         dd:ad:bd:61:48:2b:8e:15:42:ee:e5:42:78:4c:20:bb:14:4c:
         a5:b5:5c:e3:7b:17:45:fc:45:46:f5:64:05:70:19:1f:53:39:
         31:97:50:a8:6f:d0:dc:ca:c2:b8:0f:79:f7:31:91:dd:ac:54:
         09:18:c3:e9:9f:be:e2:56:76:d6:92:aa:d8:9b:81:10:e0:99:
         ff:20:47:a7:61:cd:fb:ae:26:10:b8:d5:1a:16:c1:e8:2c:b6:
         a7:ba:e7:a3:cf:91:a2:91:87:97:31:d8:1b:b9:be:c2:8b:a4:
         c9:3e:12:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 16:12:32 2024 by rpki-client on console-fra.rpki-client.org