Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a363030303a3a2f33362d3336203d3e203530323234.roa
File:                     326130373a353463313a363030303a3a2f33362d3336203d3e203530323234.roa (raw, json)
Hash identifier:          kWFh8Rqc2ZSvXf5b8D5NBX+sy+1GUN8Gc+/7lKgiwbc=
Subject key identifier:   AB:9C:2A:32:67:E1:EA:34:6F:1E:B9:49:A2:82:F9:76:B7:3A:6C:3C
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       5A32432E6B1ABDE5F92F654401557945884B1381
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a363030303a3a2f33362d3336203d3e203530323234.roa
Signing time:             Mon 04 Nov 2024 12:56:06 +0000
ROA not before:           Mon 04 Nov 2024 12:51:06 +0000
ROA not after:            Mon 03 Nov 2025 12:56:06 +0000
asID:                     50224
IP address blocks:        2a07:54c1:6000::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 17:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:32:43:2e:6b:1a:bd:e5:f9:2f:65:44:01:55:79:45:88:4b:13:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Nov  4 12:51:06 2024 GMT
            Not After : Nov  3 12:56:06 2025 GMT
        Subject: CN=AB9C2A3267E1EA346F1EB949A282F976B73A6C3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:a1:40:dd:e9:5a:b0:37:ec:eb:4b:d3:59:
                    8e:06:49:c0:e6:33:bf:57:d8:c2:cd:02:12:ce:4f:
                    37:8d:c3:d5:c1:16:58:ed:35:f3:a5:42:79:8f:fa:
                    f0:b9:cf:3f:65:1b:e5:e5:a2:24:5e:9f:dc:b6:30:
                    16:5b:c9:10:59:a4:0d:cb:80:05:fd:5b:de:63:38:
                    bc:97:64:e4:7a:0f:d6:4c:4f:70:06:d7:8c:a0:dd:
                    9c:b3:60:dc:6e:ab:a0:db:be:4c:5e:bc:93:a4:a6:
                    01:b7:64:e1:33:54:59:66:e5:8f:64:c8:bb:1e:11:
                    01:58:54:ad:4a:35:05:ef:e8:69:ef:13:80:7d:d9:
                    ea:d2:98:ad:d1:5f:bd:6a:7f:20:bb:b4:3e:95:6f:
                    a0:04:0c:7e:3b:51:38:0f:e7:16:fe:60:b6:0e:10:
                    02:90:d6:83:a4:d6:c0:52:56:33:4c:1a:5b:e8:38:
                    36:d0:4b:d8:c3:a1:4d:9b:f4:b3:18:37:35:1e:a9:
                    42:a4:de:67:4f:22:02:80:a0:3d:f6:54:6a:09:be:
                    f3:9b:25:f5:09:5f:f9:cb:8f:16:7f:c6:6f:2a:9d:
                    12:19:e3:86:db:d0:d5:d6:e2:03:a3:e0:4d:aa:94:
                    17:07:b7:b8:9b:67:0f:e8:9c:74:87:d1:54:14:95:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:9C:2A:32:67:E1:EA:34:6F:1E:B9:49:A2:82:F9:76:B7:3A:6C:3C
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a363030303a3a2f33362d3336203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:6000::/36

    Signature Algorithm: sha256WithRSAEncryption
         18:90:bf:86:05:9b:a3:79:e7:b7:59:2a:23:3f:bf:02:fa:3f:
         e6:8e:3d:fd:1a:a6:0a:47:fc:c7:4b:6f:d9:9c:5c:1b:42:d9:
         38:73:59:15:bc:f7:a0:79:04:1c:b0:40:fb:ca:0f:42:3a:de:
         16:e8:ee:c4:50:b5:c0:67:fc:5b:95:84:55:75:44:64:21:78:
         24:0b:9d:16:60:9f:13:71:78:55:02:b9:36:33:32:f6:f8:0d:
         e9:fd:52:b1:bd:db:c9:63:f4:db:d4:13:6c:4c:84:5d:64:20:
         e1:46:b0:c0:3c:20:34:80:b9:32:4c:c4:2d:90:56:97:77:16:
         74:5a:05:3d:1e:43:66:c0:49:1f:09:19:ea:69:c9:44:04:82:
         4d:14:ba:e4:d8:02:d7:d2:f2:55:01:29:9a:0d:44:ff:6a:de:
         d2:ae:b9:5e:04:84:0e:64:f4:c3:3f:67:a7:41:4f:18:37:e3:
         b3:f0:37:b6:3e:d6:56:bf:35:eb:f3:7e:ca:7f:62:a8:b5:f0:
         9d:c0:79:75:55:9f:e5:b9:82:7c:12:22:3f:31:b2:47:35:9f:
         b0:1e:7f:b8:db:e6:1d:cc:9b:64:46:89:70:ed:8e:e3:23:92:
         5c:5e:b0:78:2d:17:10:22:21:75:29:38:ec:6a:94:ba:2a:46:
         75:95:e8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:57:45 2024 by rpki-client on console-fra.rpki-client.org