Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa
File:                     326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa (raw, json)
Hash identifier:          NZSA6Qt///36kSMBZAI7S/JPGgy7nwPx37QHLw1gGiA=
Subject key identifier:   60:CF:4D:64:F5:95:84:A8:B8:CF:88:23:FB:F7:26:19:4C:69:80:74
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       5F3D50D529CCEA573EBD18B4392A83C160A9512E
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa
Signing time:             Wed 26 Jun 2024 11:08:21 +0000
ROA not before:           Wed 26 Jun 2024 11:03:21 +0000
ROA not after:            Wed 25 Jun 2025 11:08:21 +0000
asID:                     203867
IP address blocks:        2a07:54c1:8400::/38 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:3d:50:d5:29:cc:ea:57:3e:bd:18:b4:39:2a:83:c1:60:a9:51:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Jun 26 11:03:21 2024 GMT
            Not After : Jun 25 11:08:21 2025 GMT
        Subject: CN=60CF4D64F59584A8B8CF8823FBF726194C698074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b4:5e:5f:90:5f:be:34:91:f3:95:55:e2:13:
                    4f:b3:28:08:71:ea:ab:50:2b:01:b5:51:a5:54:9f:
                    00:5c:ca:e9:20:d0:b1:15:e5:60:a3:02:7b:56:b9:
                    4d:3b:e7:a6:a2:f7:b1:e0:f3:72:1d:0c:61:d9:ee:
                    fa:03:15:20:2b:aa:5f:bd:a8:e0:9f:75:8c:e4:e9:
                    0e:ea:43:bb:c3:a1:11:4d:3a:6c:a0:96:ad:0e:cb:
                    8b:45:c9:be:6d:d5:6c:01:e4:d7:6f:93:24:7f:5d:
                    6f:be:f5:89:e2:81:57:56:ac:2d:2d:f8:f4:95:fe:
                    5d:96:c3:43:28:d6:fe:f8:8b:65:e7:89:ae:1d:35:
                    6c:35:6e:c1:83:64:ae:5c:85:f1:30:41:d4:5f:5e:
                    79:92:28:09:17:e2:65:dc:6f:fc:d1:c6:9d:06:55:
                    f1:8a:0c:2c:64:43:e9:28:f3:7e:79:05:23:61:42:
                    e4:13:7d:ab:11:e1:66:c4:f5:e1:16:25:7d:f8:f6:
                    ab:b9:03:dd:ca:08:ef:7c:0e:c5:0f:9c:2c:60:e3:
                    48:6f:33:15:c3:79:40:cc:c5:6e:09:f3:f6:54:11:
                    28:d6:3f:f1:a5:f5:01:5f:94:a4:f3:e4:ad:ae:b9:
                    19:0c:1e:0a:f3:ba:23:a1:9b:82:70:d9:fe:4a:40:
                    ed:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:CF:4D:64:F5:95:84:A8:B8:CF:88:23:FB:F7:26:19:4C:69:80:74
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323033383637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8400::/38

    Signature Algorithm: sha256WithRSAEncryption
         62:a2:a6:be:36:8f:dd:5a:b7:93:d2:bd:3e:4d:21:7e:c4:d5:
         8c:df:d0:4c:d0:91:6f:09:a1:70:7a:96:51:77:34:a6:c0:f3:
         87:33:e8:12:ee:75:9f:90:77:47:5d:d8:27:52:70:f4:d8:57:
         4e:88:1b:7e:39:8c:26:ec:30:ba:6d:30:eb:67:8d:ce:14:f4:
         30:0c:63:81:64:1b:7b:ee:d5:2d:84:5a:ac:ec:a5:8e:5d:63:
         86:7e:c0:4a:8d:ab:6f:52:2f:ed:b5:fc:cc:ce:c4:57:72:5b:
         4c:8f:84:90:a1:61:c9:b9:99:bf:7f:77:aa:0b:8d:ae:d3:92:
         93:b4:0b:ce:6d:71:3d:85:e5:3a:4f:d8:51:3d:30:00:c5:25:
         33:2d:aa:bf:cb:7d:b5:ae:f5:52:a7:77:2e:9e:ad:a1:d5:fa:
         5c:7d:a5:5a:cc:a3:d3:c8:7a:3b:b5:80:7a:a0:b9:53:1b:07:
         f9:19:13:ee:d7:ea:2a:5c:59:99:4f:16:c2:4d:44:49:2a:e3:
         c8:6a:fc:ea:f4:51:ca:84:c8:6e:54:b9:59:e0:41:fb:63:8c:
         c3:02:15:2e:9d:3c:91:60:73:aa:7b:7f:a8:7f:76:3a:85:c6:
         6e:27:fb:39:04:f8:99:4c:10:f0:68:1b:ad:be:5d:39:5d:d8:
         bd:6c:dd:67
-----BEGIN CERTIFICATE-----
MIIFGDCCBACgAwIBAgIUXz1Q1SnM6lc+vRi0OSqDwWCpUS4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0OEQwMEY5
RjQ3MjMwRTAeFw0yNDA2MjYxMTAzMjFaFw0yNTA2MjUxMTA4MjFaMDMxMTAvBgNV
BAMTKDYwQ0Y0RDY0RjU5NTg0QThCOENGODgyM0ZCRjcyNjE5NEM2OTgwNzQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDStF5fkF++NJHzlVXiE0+zKAhx
6qtQKwG1UaVUnwBcyukg0LEV5WCjAntWuU0756ai97Hg83IdDGHZ7voDFSArql+9
qOCfdYzk6Q7qQ7vDoRFNOmyglq0Oy4tFyb5t1WwB5NdvkyR/XW++9YnigVdWrC0t
+PSV/l2Ww0Mo1v74i2Xnia4dNWw1bsGDZK5chfEwQdRfXnmSKAkX4mXcb/zRxp0G
VfGKDCxkQ+ko8355BSNhQuQTfasR4WbE9eEWJX349qu5A93KCO98DsUPnCxg40hv
MxXDeUDMxW4J8/ZUESjWP/Gl9QFflKTz5K2uuRkMHgrzuiOhm4Jw2f5KQO09AgMB
AAGjggIiMIICHjAdBgNVHQ4EFgQUYM9NZPWVhKi4z4gj+/cmGUxpgHQwHwYDVR0j
BBgwFoAU+YEZiLqszYFGw8esT0jQD59HIw4wDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzEyL0Y5ODExOTg4QkFBQ0NEODE0NkMzQzdBQzRGNDhEMDBGOUY0NzIzMEUuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1
LWJiZDMtNWNjYTYzM2NhZTNmLzAvRjk4MTE5ODhCQUFDQ0Q4MTQ2QzNDN0FDNEY0
OEQwMEY5RjQ3MjMwRS5jZXIwgYcGCCsGAQUFBwELBHsweTB3BggrBgEFBQcwC4Zr
cnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTIvMzI2MTMwMzcz
YTM1MzQ2MzMxM2EzODM0MzAzMDNhM2EyZjMzMzgyZDM0MzgyMDNkM2UyMDMyMzAz
MzM4MzYzNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcB
BwEB/wQSMBAwDgQCAAIwCAMGAioHVMGEMA0GCSqGSIb3DQEBCwUAA4IBAQBioqa+
No/dWreT0r0+TSF+xNWM39BM0JFvCaFwepZRdzSmwPOHM+gS7nWfkHdHXdgnUnD0
2FdOiBt+OYwm7DC6bTDrZ43OFPQwDGOBZBt77tUthFqs7KWOXWOGfsBKjatvUi/t
tfzMzsRXcltMj4SQoWHJuZm/f3eqC42u05KTtAvObXE9heU6T9hRPTAAxSUzLaq/
y321rvVSp3cunq2h1fpcfaVazKPTyHo7tYB6oLlTGwf5GRPu1+oqXFmZTxbCTURJ
KuPIavzq9FHKhMhuVLlZ4EH7Y4zDAhUunTyRYHOqe3+of3Y6hcZuJ/s5BPiZTBDw
aButvl05Xdi9bN1n
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:11:58 2024 by rpki-client on console-fra.rpki-client.org