Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323135333738.roa
File:                     326130373a353463313a383430303a3a2f33382d3438203d3e20323135333738.roa (raw, json)
Hash identifier:          op+NCEO10xj9EQEHAUxnwpTx70/Zr0cuVyik2wih9xs=
Subject key identifier:   D6:06:E0:E3:C6:B7:3E:B3:E7:CB:17:59:21:05:14:90:16:05:8D:FD
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       5B7A732E68F8488DEA1E6FFD080A8FB7BD6CA585
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323135333738.roa
Signing time:             Mon 03 Feb 2025 22:58:16 +0000
ROA not before:           Mon 03 Feb 2025 22:53:16 +0000
ROA not after:            Mon 02 Feb 2026 22:58:16 +0000
asID:                     215378
IP address blocks:        2a07:54c1:8400::/38 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:7a:73:2e:68:f8:48:8d:ea:1e:6f:fd:08:0a:8f:b7:bd:6c:a5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Feb  3 22:53:16 2025 GMT
            Not After : Feb  2 22:58:16 2026 GMT
        Subject: CN=D606E0E3C6B73EB3E7CB17592105149016058DFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:98:50:e2:f1:d5:ae:c5:72:8d:39:df:51:58:
                    09:a2:66:fc:6b:54:48:18:79:8f:f3:00:b0:b4:3b:
                    d9:72:d2:e7:7f:10:59:fa:df:45:5d:5f:c3:88:e7:
                    af:2e:b2:da:7a:42:fd:0e:48:95:ce:27:82:2d:19:
                    a0:1b:1b:c1:9b:09:b2:89:7f:31:1b:8a:79:1e:16:
                    c5:2a:b9:7b:8f:b4:39:af:5d:96:eb:7f:f2:5f:6e:
                    b9:c6:2e:e0:eb:9c:b9:b4:5d:5a:66:98:5f:fb:d6:
                    01:a5:79:70:7d:eb:ca:a2:fc:4a:3a:97:ba:e5:f5:
                    91:9c:a9:b1:42:ea:b1:a8:f2:7a:1d:b5:7f:5f:9f:
                    06:0b:b4:fa:ea:85:8b:aa:ef:b0:e2:df:df:5a:75:
                    30:ec:7d:ec:b2:d7:79:90:51:03:6b:e4:9a:e1:ac:
                    c7:7a:d4:e3:f0:c3:22:08:3e:f5:9f:15:5f:bf:aa:
                    00:a4:fe:f4:04:05:a8:8f:ac:07:74:bb:5c:c8:f8:
                    4e:ef:f7:27:e9:10:d8:21:bc:a5:f2:06:16:e7:a7:
                    f6:28:b0:a0:d1:04:58:41:2a:d7:a4:98:54:0f:88:
                    f4:f5:3e:3c:af:c5:ce:79:41:2b:05:39:e7:63:b0:
                    a7:07:45:e8:a0:46:8f:8a:d4:89:2d:30:bf:3f:d1:
                    51:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:06:E0:E3:C6:B7:3E:B3:E7:CB:17:59:21:05:14:90:16:05:8D:FD
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383430303a3a2f33382d3438203d3e20323135333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8400::/38

    Signature Algorithm: sha256WithRSAEncryption
         3c:88:e1:0a:66:24:80:3e:cc:57:f5:c7:81:43:e8:b6:c4:ab:
         e7:c4:e9:c7:d1:34:2d:6c:63:3b:ef:e0:19:85:9c:57:6c:38:
         5d:34:d4:1c:9d:d2:1c:33:dd:57:3a:7a:5f:2c:df:95:14:dc:
         97:22:8f:2f:f1:5d:a5:a9:22:8b:13:56:ff:f4:0e:f8:15:0a:
         06:5c:66:61:e1:ec:04:e9:ef:00:cd:58:e9:7a:b4:ef:c5:00:
         23:0c:c0:d2:a8:d5:98:b7:f9:35:c2:f3:12:b3:1e:46:06:9e:
         67:4a:69:36:c3:72:0e:24:f5:68:a3:94:38:71:bf:9d:7d:93:
         67:62:4c:49:3b:bc:de:91:ec:8e:f4:0c:e9:e4:a1:7e:6a:2a:
         8d:33:94:8e:52:55:19:df:0a:2c:d2:a0:ed:59:a7:a1:02:38:
         c8:b4:c7:73:1e:c6:e8:aa:fb:b0:f3:cf:d9:ec:8b:a0:45:4f:
         c9:57:c0:70:f5:a6:f1:6a:d1:d0:09:ce:9d:d4:2a:d8:2f:a4:
         bb:54:93:e3:07:51:79:15:2f:df:16:59:fa:d3:87:86:30:09:
         b5:e3:04:93:a8:75:d1:3d:2f:fc:d6:57:55:03:ed:3e:fa:2d:
         7c:f4:00:a7:c2:77:01:58:bd:b9:38:e2:fe:e7:03:35:7d:35:
         2f:98:ba:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 13:14:19 2025 by rpki-client