Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa
File:                     326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa (raw, json)
Hash identifier:          O0YE0BBCk3zxlg1c9e39YqagcRPNpdWN2ORyKzdX98Q=
Subject key identifier:   07:E5:CC:CD:83:78:B3:72:F3:BC:45:7D:61:34:D7:CF:94:DE:7E:C5
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       54C72BFB6D280AAC32F2352ADD20D1C171BBF91B
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa
Signing time:             Wed 27 Mar 2024 21:33:08 +0000
ROA not before:           Wed 27 Mar 2024 21:28:08 +0000
ROA not after:            Wed 26 Mar 2025 21:33:08 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c00::/40 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c7:2b:fb:6d:28:0a:ac:32:f2:35:2a:dd:20:d1:c1:71:bb:f9:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Mar 27 21:28:08 2024 GMT
            Not After : Mar 26 21:33:08 2025 GMT
        Subject: CN=07E5CCCD8378B372F3BC457D6134D7CF94DE7EC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7b:f2:a9:c8:2f:18:12:af:a6:b9:6b:84:3a:
                    61:bf:ee:4e:18:97:ea:0d:8c:59:40:dd:25:98:97:
                    93:52:c2:7b:16:72:c5:ce:c1:75:8e:61:d3:2d:16:
                    f7:7b:b7:f5:9e:1a:19:71:2b:1e:6d:f5:38:2b:c4:
                    5d:9d:02:64:5e:1d:1f:45:f7:63:4b:22:c4:26:22:
                    5b:70:7f:d5:43:e6:81:c4:ac:a0:0b:cf:a1:d3:81:
                    b7:70:8f:b5:b5:aa:7b:c9:84:e2:8d:38:42:40:9a:
                    30:91:29:69:f7:f8:49:58:91:82:6b:67:62:7e:c0:
                    6f:58:7b:d6:ef:7d:4a:97:c9:63:e1:df:4a:a4:70:
                    28:ee:60:8c:ff:9e:ca:42:11:ea:5b:b4:34:f1:16:
                    a1:c6:0b:21:d4:c0:5d:23:8f:2f:0e:88:d2:cd:47:
                    ff:45:f2:55:95:af:06:21:ba:96:5a:7c:c3:6d:a8:
                    e5:77:20:35:f9:27:34:0a:f1:71:33:f9:3d:9a:26:
                    d6:91:ed:8c:76:f0:8a:4f:8c:41:1a:03:a1:e9:94:
                    00:39:91:5a:2f:e5:eb:38:c4:e2:78:c5:ee:7f:f1:
                    ca:98:8c:e9:c3:80:dd:35:4d:bc:76:73:3b:6b:80:
                    bd:bb:56:97:f5:18:aa:3a:72:28:a7:8e:fa:c8:4c:
                    ff:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:E5:CC:CD:83:78:B3:72:F3:BC:45:7D:61:34:D7:CF:94:DE:7E:C5
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:0c:df:4e:4a:3b:27:af:db:78:6f:76:bf:cb:0c:27:aa:df:
         88:2b:d9:19:0b:75:de:80:68:a9:e0:82:bb:f6:aa:4e:4d:61:
         c8:89:80:0b:2c:06:52:3a:f2:48:12:92:b8:fc:e6:50:74:52:
         02:e7:9d:0b:9e:be:71:5a:45:90:ce:a5:d3:4d:3c:24:9b:93:
         67:bf:72:0b:a0:e7:fd:55:7c:32:1c:ce:07:d3:a3:32:67:ad:
         16:e1:7c:e0:56:84:e4:23:73:57:25:71:61:72:27:b9:f1:e2:
         ef:9d:b6:9b:a7:a0:9e:ba:89:dc:ef:98:11:0e:11:46:ac:8c:
         4d:94:17:33:48:5a:b7:69:f7:1d:a8:a5:ac:a6:b4:6c:f2:43:
         10:eb:c4:32:0d:32:f6:57:2b:47:7b:84:1f:c2:0b:89:e8:dc:
         b4:2d:98:05:df:a9:bc:87:b8:1f:78:40:d8:51:0a:c8:d0:89:
         e4:73:3e:15:79:d2:50:63:b6:cc:39:7a:8b:67:b4:28:6b:74:
         af:eb:e2:d2:51:8a:56:94:b1:f8:da:e9:ec:aa:af:87:9c:e4:
         8a:70:40:28:76:e8:b6:3c:8a:40:27:17:e2:11:1b:fe:3e:c5:
         3d:95:4f:3f:48:44:93:23:98:ce:8e:ea:89:70:90:84:10:04:
         23:a0:e6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:11:58 2024 by rpki-client on console-fra.rpki-client.org