Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a383130303a3a2f34302d3438203d3e20323135323830.roa
File:                     326130373a353463313a383130303a3a2f34302d3438203d3e20323135323830.roa (raw, json)
Hash identifier:          UJqApoDD26th92zY+n1lgsJ28Tq9q9Cppb4zBYhFGXY=
Subject key identifier:   59:A6:62:71:48:89:AB:1C:AF:EE:0D:53:76:55:F8:69:DE:5C:83:59
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       1FBF5A7A493578FC3CEFAB75F6192BF50285C668
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383130303a3a2f34302d3438203d3e20323135323830.roa
Signing time:             Tue 19 Mar 2024 23:13:12 +0000
ROA not before:           Tue 19 Mar 2024 23:08:12 +0000
ROA not after:            Tue 18 Mar 2025 23:13:12 +0000
asID:                     215280
IP address blocks:        2a07:54c1:8100::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:bf:5a:7a:49:35:78:fc:3c:ef:ab:75:f6:19:2b:f5:02:85:c6:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Mar 19 23:08:12 2024 GMT
            Not After : Mar 18 23:13:12 2025 GMT
        Subject: CN=59A662714889AB1CAFEE0D537655F869DE5C8359
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:b2:74:a7:a8:2a:61:a9:4f:73:a1:0f:18:37:
                    e8:39:66:26:fa:b6:6b:ad:cd:60:6e:8a:89:45:8d:
                    9f:2d:4a:47:ed:b5:b5:55:da:17:a9:e8:51:ae:4e:
                    53:ac:d1:ab:70:a9:af:2a:74:0f:f4:e8:3f:0f:32:
                    b9:49:f1:52:fc:53:f0:7d:a4:01:bb:d9:ef:6f:48:
                    be:48:1e:03:f1:7d:3f:cd:8a:57:47:dd:58:ce:53:
                    d9:dc:20:c1:15:d7:36:7e:f7:39:8a:12:4b:fe:23:
                    72:54:07:9f:8a:b9:7e:e6:46:b2:e1:f1:95:22:ed:
                    31:4e:50:86:36:9a:65:1c:b3:96:50:32:60:f1:7b:
                    3f:38:84:19:70:e0:ad:ff:84:70:9a:06:6c:af:1a:
                    0d:b4:19:6a:21:6c:97:02:a4:dd:b5:d0:35:e5:3b:
                    1b:34:4a:94:ef:a4:f5:d1:9f:85:1b:2d:56:51:50:
                    40:6e:90:d5:98:55:b0:c7:95:46:8b:08:4b:fe:30:
                    3f:97:83:de:e3:a7:0e:87:55:9d:00:57:e7:ca:22:
                    42:37:46:1f:64:b1:0d:0d:80:7f:67:9a:2f:61:96:
                    4a:9c:00:8e:14:bf:bd:e2:e8:9d:b9:8b:24:a0:71:
                    b8:84:09:c5:80:21:5b:22:d4:95:d8:b9:de:bf:e5:
                    a1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:A6:62:71:48:89:AB:1C:AF:EE:0D:53:76:55:F8:69:DE:5C:83:59
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383130303a3a2f34302d3438203d3e20323135323830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:59:de:27:0a:e8:b1:3b:5b:60:2c:72:c1:20:6f:e8:b9:e0:
         50:88:e5:01:f1:d0:aa:71:5a:50:d6:c2:be:71:2a:de:24:5f:
         e2:4f:d5:d6:e1:93:a7:dc:9b:ab:1c:a5:92:06:01:c8:6e:32:
         d0:73:11:64:2a:21:5e:4e:81:9d:79:7d:a6:be:32:a2:ad:d3:
         b0:7e:b8:93:c0:34:eb:cc:da:1a:bc:d3:32:c3:a0:5a:5c:d0:
         ab:94:bd:14:63:5f:7e:3a:e5:c3:fa:27:ef:26:83:aa:28:20:
         e4:d5:92:5b:d6:40:cd:3a:4b:42:9f:e4:20:2d:56:ec:69:1a:
         3e:4a:e8:69:a2:55:19:c0:b9:35:8d:8e:47:86:d3:4a:3f:83:
         b2:1a:a5:42:f0:fa:ba:39:6c:d1:7f:f9:8a:16:a1:40:92:af:
         72:3d:aa:da:1d:d9:f5:09:76:64:ca:95:03:c0:1c:8a:f5:2b:
         81:be:58:4c:15:58:a0:4b:8b:d2:fc:cb:e0:7c:7b:4f:61:e4:
         ce:14:a0:ff:14:6d:f5:81:5a:7b:aa:4d:ed:a5:50:2e:fd:49:
         76:f9:a4:1d:98:51:95:4c:97:bb:8e:15:15:5d:5b:ff:eb:6a:
         4a:a2:fc:4f:ae:73:66:83:14:70:50:6b:54:a7:65:c8:30:bf:
         cc:ac:ae:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:11:58 2024 by rpki-client on console-fra.rpki-client.org