Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a383230303a3a2f34302d3438203d3e20323034353138.roa
File:                     326130373a353463313a383230303a3a2f34302d3438203d3e20323034353138.roa (raw, json)
Hash identifier:          FVubN6ioxapF9Za0zl8NSFU9S1KTR0iNgCVX+Hv0Nbk=
Subject key identifier:   61:7B:43:A4:3D:2F:5C:1F:53:4D:3F:73:EB:09:14:A3:73:39:7A:E7
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       119380FFCFB6A9E3264A53B0C30E793A61B80D45
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383230303a3a2f34302d3438203d3e20323034353138.roa
Signing time:             Mon 22 Apr 2024 10:29:42 +0000
ROA not before:           Mon 22 Apr 2024 10:24:42 +0000
ROA not after:            Mon 21 Apr 2025 10:29:42 +0000
asID:                     204518
IP address blocks:        2a07:54c1:8200::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:93:80:ff:cf:b6:a9:e3:26:4a:53:b0:c3:0e:79:3a:61:b8:0d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Apr 22 10:24:42 2024 GMT
            Not After : Apr 21 10:29:42 2025 GMT
        Subject: CN=617B43A43D2F5C1F534D3F73EB0914A373397AE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:f1:f1:0d:6e:a9:2e:72:fa:06:ed:9f:61:6a:
                    2a:2d:33:8c:e3:7a:a0:a8:0c:1d:3d:20:a8:a1:81:
                    50:29:17:e0:09:76:20:1a:18:82:f2:2a:9d:d7:3a:
                    d2:60:65:3e:eb:30:2f:07:89:23:e3:05:3f:94:6c:
                    8d:65:bc:a2:ab:f5:68:80:c0:d9:07:93:8b:7e:6a:
                    d8:79:db:3f:58:aa:21:1a:7d:c4:3e:68:0b:ef:6e:
                    12:09:52:1e:61:16:10:02:70:0b:8f:36:af:a3:b7:
                    b6:ea:88:9f:08:a4:eb:35:b9:c1:d9:c3:56:2c:34:
                    8e:66:cf:51:2a:be:46:9b:7e:99:dc:33:07:36:13:
                    e5:63:35:1d:1d:8c:19:6e:d4:18:00:1c:f0:d2:b5:
                    19:82:06:f2:99:a2:10:46:50:12:cd:a2:e5:9d:bd:
                    0a:52:06:40:9f:cd:c9:07:4a:fe:50:fc:38:75:09:
                    17:ae:ae:4e:9d:b0:c8:ff:6f:ca:aa:2b:de:68:cd:
                    e2:c8:bf:be:08:aa:5a:cd:b0:17:37:99:9b:b3:68:
                    a6:c4:31:1f:12:d7:7c:41:4d:df:3e:a4:58:9a:e9:
                    7a:16:bd:4e:a6:dd:f9:7b:93:0d:9b:ab:d8:6f:9c:
                    34:19:4d:4a:b6:d9:9f:64:9c:e2:ad:a4:9b:94:ce:
                    c9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:7B:43:A4:3D:2F:5C:1F:53:4D:3F:73:EB:09:14:A3:73:39:7A:E7
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383230303a3a2f34302d3438203d3e20323034353138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         41:bf:72:37:20:2b:83:f8:3f:2b:bf:65:39:04:7e:a0:0a:31:
         42:8f:0d:4a:e6:03:f1:1a:74:68:17:9c:a6:b8:9d:3d:2d:98:
         47:8f:91:34:31:e8:1b:26:52:06:f6:35:d8:c6:f0:fa:51:43:
         9a:9b:57:ad:6b:f0:df:c3:0f:1a:76:72:c2:d2:01:36:44:c2:
         c3:59:4b:71:41:b3:c9:2a:4f:76:6e:f7:a2:e5:55:ce:59:96:
         67:f9:4a:07:1e:4b:4d:12:7e:9d:62:35:25:af:4d:aa:d1:35:
         8a:d0:c8:34:68:ca:c4:a4:29:9e:16:71:32:3e:bf:07:92:47:
         50:89:da:70:4c:4d:be:44:0e:bb:b6:74:d9:50:cd:6a:5f:78:
         7c:ee:e7:37:31:cc:21:58:4a:0c:39:36:a4:9e:c8:51:88:5b:
         9d:b4:88:20:07:c3:3d:60:51:5d:f3:dc:33:ae:13:f7:df:b5:
         5c:07:95:08:03:f7:ae:08:2e:b0:26:f0:f8:50:69:ad:5a:74:
         64:b7:60:62:35:5b:26:8c:20:9b:3e:30:55:e2:01:8f:03:60:
         a8:83:af:19:56:c0:90:80:8b:2a:1b:15:3a:e2:5a:0b:ab:4c:
         87:a1:71:a9:36:db:bf:e3:8c:fc:3f:3c:a1:d9:1b:f7:13:35:
         8c:14:7a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:52:37 2024 by rpki-client on console-ams.rpki-client.org