Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa
File:                     326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa (raw, json)
Hash identifier:          7rXzu6lHqrCopcvJRaGOjAHuYCy2XzMnqnQBKY9LpDI=
Subject key identifier:   BD:EB:94:95:85:7A:BB:3B:D4:72:CB:37:18:3D:9C:34:2B:EB:D6:68
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       372E31573C15C11C9036F9DBA39E0C4EE9E4038C
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa
Signing time:             Wed 26 Feb 2025 21:58:41 +0000
ROA not before:           Wed 26 Feb 2025 21:53:41 +0000
ROA not after:            Wed 25 Feb 2026 21:58:41 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c00::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Apr 2025 21:21:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:2e:31:57:3c:15:c1:1c:90:36:f9:db:a3:9e:0c:4e:e9:e4:03:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Feb 26 21:53:41 2025 GMT
            Not After : Feb 25 21:58:41 2026 GMT
        Subject: CN=BDEB9495857ABB3BD472CB37183D9C342BEBD668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:91:1b:8b:aa:fc:b4:14:ee:55:69:c1:4d:69:
                    4b:c6:31:20:b9:95:ec:01:e1:78:6b:ec:3e:ca:db:
                    7d:34:bc:8a:7f:74:f3:de:e1:c9:c0:94:a8:13:99:
                    8b:ee:c0:6f:56:14:29:2b:6a:e3:cd:60:88:cc:65:
                    21:08:5a:80:67:a1:dd:61:04:4b:ec:4c:ca:fb:0b:
                    f3:46:97:e3:a0:9d:e6:88:e8:cb:bc:14:12:0c:7e:
                    72:91:07:b0:4e:d3:a9:8e:83:b6:e0:78:ce:42:a8:
                    be:28:9a:59:05:17:c5:10:7b:f8:fb:67:56:c1:5d:
                    ac:61:74:35:97:4d:80:a2:b5:10:3c:02:ed:d5:0b:
                    ab:dd:1f:bd:0f:6a:99:a2:db:96:24:0c:c3:c9:a5:
                    5c:3f:c2:6c:9a:a5:ad:d4:03:85:72:75:0c:a4:7a:
                    9b:41:7c:a0:77:eb:97:03:b4:00:31:14:3e:95:e3:
                    70:8f:24:d1:3e:e7:93:ac:1f:28:bb:6c:37:6c:e1:
                    67:54:d1:2b:6e:25:d0:34:8a:36:98:dc:f7:99:18:
                    03:8c:af:19:6c:9a:76:c8:d6:d7:cd:9d:3d:93:a0:
                    6b:17:b7:75:e7:f9:41:41:3d:68:06:f3:25:ac:e3:
                    30:72:b0:e2:95:9d:ee:d9:01:73:00:39:c3:4d:c3:
                    b6:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EB:94:95:85:7A:BB:3B:D4:72:CB:37:18:3D:9C:34:2B:EB:D6:68
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a386330303a3a2f34302d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:08:7c:b9:b2:be:07:e7:43:97:6c:e8:63:bd:80:35:00:05:
         4b:a7:92:5d:62:6d:24:f6:43:e9:b7:9e:44:53:3c:01:f7:0a:
         81:0b:e8:6e:3e:e9:03:d3:46:0a:40:c1:dc:cf:49:91:16:0a:
         52:84:10:f6:2c:2c:aa:f9:ff:c0:71:98:6a:8c:0b:b4:f8:dc:
         6e:ab:b3:58:1e:56:e3:1a:22:2e:bd:1d:02:a1:d6:10:96:58:
         ad:fc:57:fb:60:fb:d0:b5:26:1a:a7:43:16:51:26:c9:1a:62:
         2f:a3:32:79:4b:32:15:17:69:3b:65:16:e9:6a:fa:4b:9f:b7:
         07:4c:41:ff:8a:c0:e4:e9:bd:49:c4:99:2a:52:e9:f4:ec:c6:
         82:b0:df:9d:58:44:b2:61:91:98:2a:73:0c:f2:db:f4:fe:0b:
         3b:35:d6:86:a9:76:5e:8b:e5:29:ed:44:04:d4:3a:6b:f5:c5:
         60:5e:ee:ae:34:e2:b5:ca:9f:b2:b0:34:d6:3c:21:f4:a2:db:
         0e:2d:fc:8d:7c:bf:f6:5b:e3:3b:1b:bc:2d:c9:f1:c2:e0:a0:
         a2:32:71:38:e9:af:c4:f4:23:89:da:ab:03:23:49:e6:3e:bd:
         97:2c:ba:71:66:5a:0e:12:66:1e:9f:cd:2a:f1:ea:12:7c:82:
         ba:19:38:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 10:59:32 2025 by rpki-client