Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a383030303a3a2f34302d3438203d3e20323134383632.roa
File:                     326130373a353463313a383030303a3a2f34302d3438203d3e20323134383632.roa (raw, json)
Hash identifier:          DyqnYBA22BrxBtkC9eU4/63b/HZedZ0Vy0ET+B0IOE0=
Subject key identifier:   6F:C9:63:BF:31:D4:91:36:81:62:02:33:28:63:69:3C:98:14:2D:30
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       1395A906EB84DA5E79C1A9C3A9A384E9E12B181F
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383030303a3a2f34302d3438203d3e20323134383632.roa
Signing time:             Wed 22 May 2024 10:57:48 +0000
ROA not before:           Wed 22 May 2024 10:52:48 +0000
ROA not after:            Wed 21 May 2025 10:57:48 +0000
asID:                     214862
IP address blocks:        2a07:54c1:8000::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:95:a9:06:eb:84:da:5e:79:c1:a9:c3:a9:a3:84:e9:e1:2b:18:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: May 22 10:52:48 2024 GMT
            Not After : May 21 10:57:48 2025 GMT
        Subject: CN=6FC963BF31D49136816202332863693C98142D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:39:46:f8:72:9e:79:bf:57:16:cb:8f:3b:41:
                    4b:78:79:d1:06:00:91:cb:2e:3d:9c:7e:7f:b3:07:
                    8d:19:44:01:88:50:5a:25:9c:4c:76:38:bd:5a:46:
                    c7:ba:5d:47:e0:81:a5:ca:a1:c6:38:97:15:05:dd:
                    12:e6:bc:15:af:c3:88:b4:6c:be:49:59:1e:1c:29:
                    07:2d:1f:6b:5b:3f:98:86:78:36:dc:d0:11:ec:0e:
                    1d:4c:fa:6b:2a:cb:d8:c5:9e:d5:cb:55:ae:ac:b2:
                    8d:d0:97:24:93:ca:14:84:1e:1d:0d:09:1f:a4:8d:
                    31:7c:16:ed:a3:08:47:2a:b2:28:af:23:a9:fe:7b:
                    b6:aa:11:38:9e:73:32:2d:d2:13:39:00:df:0c:16:
                    c3:27:eb:6c:bd:a7:68:2d:4b:3a:74:9f:b5:03:7f:
                    38:53:1f:f2:26:68:c5:44:76:59:59:e2:f6:4d:14:
                    dd:e2:6e:f4:d9:ff:2d:69:86:ab:c5:9c:f7:ef:9c:
                    ca:68:7b:eb:84:a7:c3:aa:51:f0:9c:a8:16:ec:41:
                    e9:29:49:df:e0:40:60:10:4c:33:4e:25:4f:0a:b5:
                    fe:76:d4:ef:14:cb:61:c2:25:1f:79:f4:06:8b:2a:
                    d1:2b:9e:ec:73:33:d2:26:f2:f9:6f:10:01:fc:a3:
                    77:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C9:63:BF:31:D4:91:36:81:62:02:33:28:63:69:3C:98:14:2D:30
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383030303a3a2f34302d3438203d3e20323134383632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         3b:a7:cb:86:9e:56:70:24:0d:7e:f3:d7:11:2d:05:71:5a:d4:
         9b:57:89:15:fa:ac:63:60:54:06:48:b0:40:bf:5d:a2:9d:d9:
         4c:67:62:d5:56:52:51:9f:6a:00:4c:59:c2:02:6e:ed:6f:ca:
         e9:16:9a:3e:20:5e:eb:93:23:f3:a6:e4:7b:4f:17:fb:9d:87:
         2f:dd:88:e2:5b:c6:c0:40:e9:37:44:ca:61:1e:60:b9:34:04:
         fa:9c:4b:f4:99:33:b5:a6:cc:3a:f3:b3:1f:a2:6e:b7:ae:c5:
         67:86:fa:1b:57:5e:c5:6f:0b:f1:d7:97:d5:3f:83:c6:52:f0:
         8f:88:ac:4f:78:f8:8e:8a:f8:e1:c5:70:8a:ad:1c:e6:61:60:
         76:62:ba:3a:cc:6b:f5:bc:be:31:fc:92:fd:0c:ca:ab:f5:3c:
         97:ac:02:1a:ce:8c:20:1c:09:01:99:c0:e4:15:27:d2:7a:44:
         34:9a:fc:86:aa:89:b6:dc:3d:df:dc:76:ec:a7:9c:62:d7:d5:
         69:53:59:bb:bf:e6:56:24:87:97:54:df:cb:85:91:8a:ef:57:
         e1:b5:c5:11:23:04:ba:66:8e:cb:f7:52:b0:41:d9:54:96:3e:
         a6:fb:07:01:1e:ea:5f:fa:8b:67:ae:e7:f7:ec:8d:66:80:99:
         7b:11:e8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:52:37 2024 by rpki-client on console-ams.rpki-client.org