Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a383830303a3a2f34302d3438203d3e20323134333730.roa
File:                     326130373a353463313a383830303a3a2f34302d3438203d3e20323134333730.roa (raw, json)
Hash identifier:          9uOcrNc2WRnvoHsUsAr5bEJXpdQN2j+iPOHux4/7CkM=
Subject key identifier:   94:63:B1:67:0D:68:DC:B8:B9:FE:7B:DB:00:1A:19:41:46:09:E2:0B
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       476239DECD200102401B352C636C4FED3678C2D4
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383830303a3a2f34302d3438203d3e20323134333730.roa
Signing time:             Tue 13 Aug 2024 00:28:49 +0000
ROA not before:           Tue 13 Aug 2024 00:23:49 +0000
ROA not after:            Tue 12 Aug 2025 00:28:49 +0000
asID:                     214370
IP address blocks:        2a07:54c1:8800::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:62:39:de:cd:20:01:02:40:1b:35:2c:63:6c:4f:ed:36:78:c2:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Aug 13 00:23:49 2024 GMT
            Not After : Aug 12 00:28:49 2025 GMT
        Subject: CN=9463B1670D68DCB8B9FE7BDB001A19414609E20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:98:49:18:6e:d6:66:26:63:0f:36:4e:71:f3:
                    2a:f8:d0:8a:61:c3:94:b5:84:f4:ec:b3:82:66:55:
                    30:87:ad:22:d1:f6:29:21:2c:2b:db:56:c2:45:e3:
                    3d:85:73:66:9c:58:de:1c:4e:f7:ac:c0:7e:4d:a7:
                    76:46:70:e4:40:ba:36:62:89:e9:34:6b:31:85:4a:
                    26:62:07:4b:31:16:ed:71:02:a5:25:8e:3c:16:09:
                    38:08:e9:e4:0b:72:de:55:9d:f7:72:2e:50:63:60:
                    dc:1d:b8:bd:ae:a5:c0:6e:db:22:ea:00:3b:c1:9f:
                    a3:75:da:00:66:5a:b4:1a:0f:a6:6c:fb:95:5c:6d:
                    1c:7c:81:ec:1d:c9:48:91:74:2c:4f:17:7f:79:ae:
                    b8:82:68:b8:b3:34:95:25:ce:98:9c:5a:f6:08:d5:
                    5f:13:9c:7e:b7:9b:e4:12:3e:c0:7d:6a:1f:63:b7:
                    49:6e:4d:33:19:16:15:7c:2f:c5:be:82:25:e8:21:
                    d2:cb:be:aa:83:28:1e:a3:12:00:e3:7a:93:21:b3:
                    51:6d:5b:8a:2d:4e:e6:0b:5a:f6:f0:b6:6e:ae:13:
                    3a:8a:b9:c1:5f:9e:f3:c8:c4:f9:40:32:1a:9f:d5:
                    95:1e:85:91:db:c1:2c:ab:61:98:fa:1f:60:64:92:
                    6b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:63:B1:67:0D:68:DC:B8:B9:FE:7B:DB:00:1A:19:41:46:09:E2:0B
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a383830303a3a2f34302d3438203d3e20323134333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8800::/40

    Signature Algorithm: sha256WithRSAEncryption
         86:9e:35:8d:c1:8d:f9:13:d2:03:e1:38:31:2e:80:d1:e2:8b:
         1b:ae:f8:13:d8:a9:13:19:98:47:a5:23:70:37:7d:3a:85:08:
         ea:53:a3:dc:fe:87:a6:28:7b:8c:22:76:2d:fa:b2:21:46:f1:
         1e:6b:b3:d4:4c:28:e1:15:e4:ea:2b:9d:59:0d:9a:6e:10:9b:
         ac:1c:87:08:a8:74:0a:f6:75:9e:aa:8d:f3:0d:0a:63:4e:25:
         8e:c3:97:97:cd:8e:7c:fb:d5:64:7f:53:af:c4:15:e8:bf:83:
         60:2c:cd:4e:60:11:bd:d5:73:0f:8c:9c:9a:ff:94:ff:02:33:
         39:6e:a8:3d:c9:91:e8:27:85:3d:d9:db:28:16:5c:f5:ed:34:
         a7:29:8d:fe:8e:f5:a8:78:fd:05:a2:3a:58:57:6e:1a:de:96:
         d2:84:3f:3d:b5:4c:ac:ba:93:19:c9:0c:78:25:7c:76:b0:41:
         e2:c0:74:6f:19:d9:71:4f:d4:4a:e7:6f:37:c0:17:de:4f:26:
         e0:6b:66:54:1e:13:c2:54:e5:f0:d1:19:a1:28:20:48:bb:73:
         5a:d2:54:da:f8:61:84:58:8c:b8:3b:84:f1:b6:9a:d4:c6:d2:
         41:9f:a4:96:95:ee:32:80:c9:0a:a1:33:d3:63:b5:3b:8e:3a:
         af:fb:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:11:58 2024 by rpki-client on console-fra.rpki-client.org