Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a383030303a3a2f33382d3438203d3e203630333130.roa
File:                     326130373a353463313a383030303a3a2f33382d3438203d3e203630333130.roa (raw, json)
Hash identifier:          iT5Eo9/zrD5Hei3oR8dDibkUevKPG2mC7RleOyNIEXA=
Subject key identifier:   91:48:58:3C:83:B9:ED:83:A0:00:0C:78:84:3B:7E:DD:DF:4E:A5:74
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       5B78A212801886338B0618B69CAAEA71FB1D1A8E
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383030303a3a2f33382d3438203d3e203630333130.roa
Signing time:             Thu 27 Jul 2023 03:55:51 +0000
ROA not before:           Thu 27 Jul 2023 03:50:51 +0000
ROA not after:            Thu 25 Jul 2024 03:55:51 +0000
asID:                     60310
IP address blocks:        2a07:54c1:8000::/38 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 21 Apr 2024 06:14:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:78:a2:12:80:18:86:33:8b:06:18:b6:9c:aa:ea:71:fb:1d:1a:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jul 27 03:50:51 2023 GMT
            Not After : Jul 25 03:55:51 2024 GMT
        Subject: CN=9148583C83B9ED83A0000C78843B7EDDDF4EA574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5e:70:69:54:a0:44:ee:ce:d8:12:86:1f:81:
                    bc:67:5d:b1:d6:90:01:87:2e:91:e2:35:5a:45:c3:
                    19:1e:2a:a3:a0:65:91:91:9b:5c:65:c4:30:c3:50:
                    1b:92:ef:5d:55:a5:0b:7e:36:d5:7b:8b:e4:91:ef:
                    b6:74:d0:16:c7:2f:77:12:7c:98:4a:02:38:6e:b9:
                    76:de:00:da:02:87:95:48:2b:a0:1a:c1:25:82:8a:
                    a0:3c:fb:a3:80:8a:d2:9c:b9:7d:91:32:11:2b:41:
                    f3:8e:a4:55:c1:fd:b8:f0:a6:d4:72:11:46:1b:65:
                    88:c5:d7:a7:4c:72:32:ad:dc:69:dc:87:c1:27:65:
                    15:b1:39:88:7f:e7:a4:18:84:1e:cb:fa:35:32:64:
                    40:53:68:1b:a0:36:a8:56:9c:77:02:0c:49:05:f8:
                    0f:5d:30:16:40:66:1c:64:2d:4b:e7:3a:34:37:71:
                    b1:41:ca:7c:da:48:b7:0a:d0:54:a0:cf:62:3c:ab:
                    6c:2a:6e:36:03:78:13:9b:51:df:10:c2:be:77:8e:
                    d0:6b:c9:2f:c6:0c:08:40:2d:23:80:7a:f3:04:97:
                    82:c3:57:42:0a:95:74:b5:33:be:9e:da:7f:e4:c4:
                    97:e6:f0:56:04:44:2e:bd:9d:58:6d:db:0e:f0:3b:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:48:58:3C:83:B9:ED:83:A0:00:0C:78:84:3B:7E:DD:DF:4E:A5:74
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.zappiehost.com/repo/NORTHLAYER_UID_13864/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383030303a3a2f33382d3438203d3e203630333130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8000::/38

    Signature Algorithm: sha256WithRSAEncryption
         87:96:99:92:9b:0b:4c:dd:55:fd:c8:4c:2d:75:21:ae:a5:22:
         3e:99:ee:82:af:c4:18:ae:84:7a:b0:88:72:c0:b7:f1:46:23:
         10:52:9f:5c:2f:2f:29:b9:52:e7:c9:ab:e9:3c:61:5c:db:d3:
         21:07:e2:b0:f8:e1:d2:fb:e0:14:79:61:71:76:d2:4c:d3:53:
         84:59:0d:5d:18:b2:30:d3:0f:70:cd:76:a0:de:5a:8d:8d:6b:
         57:b4:dc:b9:05:b5:85:6c:5a:01:64:36:fe:eb:79:6a:90:e1:
         ad:48:b2:ae:47:3f:43:55:b7:06:7f:94:20:bf:53:26:25:78:
         e5:df:a8:de:db:5f:93:90:5f:db:c3:c4:82:85:a3:86:09:38:
         40:ad:94:ed:80:9e:79:68:69:f1:59:16:ff:d3:89:ea:7e:50:
         3c:a8:30:46:ae:11:9d:dc:3f:16:8e:73:93:55:c0:40:60:5d:
         7f:f1:4b:50:e4:79:7c:6c:3a:ed:4b:65:13:07:36:e7:f5:8e:
         e1:8f:fe:88:76:c4:2e:e0:57:4e:1c:60:65:e1:93:46:4c:36:
         a3:2b:6b:5c:0d:6c:24:71:e4:5a:47:09:70:b9:80:dc:0b:7d:
         90:8d:e0:79:16:9d:4a:73:7e:9c:c1:c4:82:bd:46:99:cf:f7:
         3d:12:77:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 20 18:35:32 2024 by rpki-client on console-fra.rpki-client.org