Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323135333738.roa
File:                     326130373a353463313a383430303a3a2f33382d3438203d3e20323135333738.roa (raw, json)
Hash identifier:          7ZTMxzz0PCKn2WGQw9dfROI08mYli0gS8xV0aRwPcqM=
Subject key identifier:   1B:4F:1C:59:FF:8E:AB:18:D8:30:B6:F8:41:52:B3:AB:C1:57:50:78
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       2AD75455BA9B873A4B41C86AC1450D064F027191
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323135333738.roa
Signing time:             Mon 04 Mar 2024 22:04:03 +0000
ROA not before:           Mon 04 Mar 2024 21:59:03 +0000
ROA not after:            Mon 03 Mar 2025 22:04:03 +0000
asID:                     215378
IP address blocks:        2a07:54c1:8400::/38 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 14:24:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:d7:54:55:ba:9b:87:3a:4b:41:c8:6a:c1:45:0d:06:4f:02:71:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Mar  4 21:59:03 2024 GMT
            Not After : Mar  3 22:04:03 2025 GMT
        Subject: CN=1B4F1C59FF8EAB18D830B6F84152B3ABC1575078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c1:18:af:92:3a:3f:f1:46:ba:a5:1d:d1:dc:
                    e6:b5:ff:d0:29:db:4d:d5:66:ee:00:04:f9:a7:be:
                    4f:15:7f:20:3b:ad:93:0c:8c:0d:c5:44:ba:ad:2b:
                    63:77:18:ae:e1:78:d9:92:0b:81:a9:e2:e9:fb:8e:
                    cb:bc:12:a9:b2:66:37:6d:66:92:57:55:a8:19:cd:
                    ea:62:86:9b:53:f3:6f:06:3b:50:f4:95:d7:56:26:
                    f0:64:c5:b0:89:8a:9f:82:f1:eb:54:aa:04:e9:ad:
                    36:a1:b5:9d:6d:b9:10:d3:82:45:0b:06:0c:c4:b6:
                    f3:ed:a0:32:05:1c:94:f9:df:42:7b:bd:e7:b6:34:
                    2a:24:d3:60:91:98:c3:d5:46:73:a6:c8:ef:95:c9:
                    0a:65:32:96:23:42:a1:6b:b2:e6:fc:07:14:66:43:
                    d0:c1:75:3f:09:9c:3e:62:8a:27:e8:50:fa:6f:8b:
                    0c:6a:4d:e0:6c:67:b1:d8:6a:78:de:c0:6c:7c:7e:
                    b3:6b:5d:8a:b8:37:16:02:18:2f:1f:fa:d9:97:53:
                    dc:7e:88:6d:7c:2f:74:ac:ac:91:b8:0d:c5:46:fe:
                    3d:9d:bf:bd:7f:e1:d2:eb:c5:4f:03:61:0c:90:c0:
                    d6:9e:9c:d1:76:40:2d:f7:fc:61:e3:ff:93:b8:5e:
                    db:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:4F:1C:59:FF:8E:AB:18:D8:30:B6:F8:41:52:B3:AB:C1:57:50:78
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323135333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8400::/38

    Signature Algorithm: sha256WithRSAEncryption
         a2:cb:85:d9:5f:da:c3:91:11:3d:16:a2:d4:4d:db:df:b5:f4:
         c6:fd:31:f0:3b:fe:c9:b7:ef:aa:c8:af:40:ea:7e:a9:be:cf:
         fa:f5:fc:9a:3d:18:20:bb:19:8f:31:46:07:a7:88:03:1a:38:
         0e:7f:8f:76:94:de:cd:80:da:33:48:7c:b1:ed:80:8c:15:22:
         71:a7:3f:55:80:a8:16:13:3e:77:72:32:1f:90:fb:b4:22:4c:
         08:40:a0:bb:f8:8e:46:7a:86:97:f7:30:15:2e:07:13:00:f0:
         bb:00:db:54:99:b2:8d:27:3e:49:a4:f3:ce:3c:4e:6d:42:99:
         59:f1:37:80:4d:28:98:86:b5:ba:6f:ae:89:50:93:40:1b:44:
         88:46:26:99:68:be:73:79:92:82:75:81:c8:de:e1:86:ef:7b:
         aa:d2:ae:99:f7:86:61:a5:19:52:3e:0f:e3:3d:3b:ca:b8:b5:
         ba:4e:03:b7:1b:cd:6b:a9:9e:3d:7a:02:4c:d5:46:88:4d:33:
         1a:78:f7:57:cc:38:81:07:e1:7c:de:f4:e3:8c:9a:21:48:00:
         6f:aa:e7:f6:e5:d6:ea:b7:96:cb:2f:4c:60:86:3b:30:93:21:
         5f:80:f3:49:eb:14:03:0e:d6:46:89:2b:45:f3:ef:7f:76:c8:
         3e:d6:b1:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 24 01:59:49 2024 by rpki-client on console-ams.rpki-client.org