Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a383330303a3a2f34302d3430203d3e20323034383537.roa
File:                     326130373a353463313a383330303a3a2f34302d3430203d3e20323034383537.roa (raw, json)
Hash identifier:          kMoFbGxFD0ty1D/6Wl8zEmJiyT8Dwl3svDpvnw2HDPo=
Subject key identifier:   C7:BE:BC:0E:69:07:FE:19:33:AC:88:CC:A8:50:6C:5B:09:B9:5D:30
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       395CDD8F9F4B703A42E0C17E8DBA3485EFBBE00B
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383330303a3a2f34302d3430203d3e20323034383537.roa
Signing time:             Thu 27 Jun 2024 15:16:45 +0000
ROA not before:           Thu 27 Jun 2024 15:11:45 +0000
ROA not after:            Thu 26 Jun 2025 15:16:45 +0000
asID:                     204857
IP address blocks:        2a07:54c1:8300::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 21 Nov 2024 17:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:5c:dd:8f:9f:4b:70:3a:42:e0:c1:7e:8d:ba:34:85:ef:bb:e0:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jun 27 15:11:45 2024 GMT
            Not After : Jun 26 15:16:45 2025 GMT
        Subject: CN=C7BEBC0E6907FE1933AC88CCA8506C5B09B95D30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3c:34:e4:14:a1:b9:71:81:1b:40:aa:7d:3d:
                    65:2b:e9:37:ae:59:7a:9b:ce:39:74:f7:12:53:a8:
                    56:1d:bf:be:bb:8f:b8:c3:b1:d4:e8:91:b3:58:37:
                    d1:72:b7:2f:81:ef:b3:50:fb:65:77:29:7f:6d:55:
                    74:4b:9b:2b:8c:2f:b0:11:7d:85:27:d6:4e:9e:07:
                    aa:04:1c:46:69:de:45:ec:bd:52:b6:8e:b6:14:b4:
                    93:90:36:08:77:71:49:7f:b7:b9:ef:a0:00:28:e9:
                    54:bf:c4:b5:8e:f3:ad:ad:b6:e5:bb:62:fc:d5:7c:
                    47:74:bb:41:63:7e:1d:5c:09:6a:f1:d3:41:44:42:
                    41:9d:ba:db:fe:3a:2a:4d:84:06:d8:53:aa:d3:31:
                    35:e8:b8:e0:f2:41:ba:a7:ed:20:1e:29:0e:09:b4:
                    49:a9:6f:a4:9a:b1:7f:e3:ac:ad:98:cb:08:93:53:
                    74:e5:64:ed:1f:a7:6b:60:03:f8:9f:ec:e1:29:eb:
                    50:d7:fa:ec:a7:01:e6:b5:c9:23:98:a2:bc:dd:a1:
                    25:21:87:e5:66:f9:fa:60:49:00:44:82:a4:29:18:
                    87:b0:ec:08:ef:78:a6:74:de:d4:0c:f6:0c:71:49:
                    7b:a9:26:46:87:c7:70:f3:e3:4c:14:d6:d6:a3:00:
                    56:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:BE:BC:0E:69:07:FE:19:33:AC:88:CC:A8:50:6C:5B:09:B9:5D:30
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383330303a3a2f34302d3430203d3e20323034383537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8300::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:aa:c9:87:32:17:0b:84:8e:de:77:46:dc:1b:3b:52:0a:01:
         60:47:39:1c:c3:1a:a8:ce:39:55:86:77:aa:be:4e:11:8a:d1:
         63:9e:c9:c4:96:4e:44:7b:37:d6:ed:94:9d:e8:90:81:be:cf:
         1c:97:c4:a4:eb:c7:ab:15:3b:26:d1:a0:bf:0a:b5:12:1b:96:
         8d:26:80:00:7e:22:b4:3b:94:d6:7d:c0:88:d9:f8:f1:fd:be:
         22:0d:e8:4c:5f:00:3f:5f:72:39:04:69:27:6a:d4:2a:d0:3a:
         99:fa:cd:ae:e0:44:96:0e:b9:0b:0e:1b:92:4d:29:1b:76:58:
         7d:0b:98:12:e6:1b:07:b0:15:b1:c8:a9:a7:fa:71:5e:12:09:
         4b:7b:60:bd:c4:a1:f7:06:b1:da:4c:90:46:1b:fa:cf:c8:a7:
         d5:2a:40:0b:58:33:45:36:9c:2c:37:7d:1e:67:c8:0f:73:c3:
         89:36:1b:5c:a0:d1:df:ff:50:fd:c8:df:4c:d2:31:f5:dd:c3:
         8a:9d:1f:e5:58:b7:c9:18:ab:da:b8:22:99:85:3c:22:c2:a0:
         ff:7e:17:5f:10:dc:ad:6d:27:e7:a5:63:90:61:09:59:6a:a1:
         cb:7f:ae:36:fb:68:03:04:5f:e0:e0:92:15:a3:c4:42:2e:54:
         c4:49:b6:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 01:55:04 2024 by rpki-client on console-ams.rpki-client.org