Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a3a2f33362d3336203d3e203539393230.roa
File:                     326130373a353463313a3a2f33362d3336203d3e203539393230.roa (raw, json)
Hash identifier:          TzRiIpNedrsQLc40cjn+IJSub5TOegmwDZVuxK9YqJk=
Subject key identifier:   C8:43:D3:D9:16:EC:99:A0:20:7B:25:64:14:3C:AB:63:20:55:DA:0D
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       3170E610B9B6BADC24EC8239DD56FB9CD262152B
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a3a2f33362d3336203d3e203539393230.roa
Signing time:             Tue 19 Nov 2024 13:56:14 +0000
ROA not before:           Tue 19 Nov 2024 13:51:14 +0000
ROA not after:            Tue 18 Nov 2025 13:56:14 +0000
asID:                     59920
IP address blocks:        2a07:54c1::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 13:15:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:70:e6:10:b9:b6:ba:dc:24:ec:82:39:dd:56:fb:9c:d2:62:15:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Nov 19 13:51:14 2024 GMT
            Not After : Nov 18 13:56:14 2025 GMT
        Subject: CN=C843D3D916EC99A0207B2564143CAB632055DA0D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:54:8c:4b:6a:6c:b2:e6:b0:96:e2:1e:aa:36:
                    fe:ef:92:5f:53:af:8f:e4:10:56:b7:a2:7b:79:31:
                    85:d2:cc:6f:61:8c:7b:8b:71:6d:b2:59:26:4d:f5:
                    26:08:18:93:a1:41:0d:cb:88:8d:26:aa:05:50:44:
                    35:ec:c8:ad:37:8f:03:eb:ef:0e:c8:73:cf:37:57:
                    ff:6b:97:dd:b6:38:b3:3d:35:ec:6d:08:ca:5b:5c:
                    be:c5:89:e7:09:0e:0a:e1:d4:ef:41:ad:a2:3e:e5:
                    ab:64:4f:17:85:22:8a:07:fd:92:f2:56:5f:a3:3e:
                    a2:4c:ec:8c:de:23:09:12:6d:14:8a:12:e7:fa:3f:
                    09:d3:3c:26:61:61:cc:d4:ad:d3:3d:d3:c3:8b:63:
                    33:33:e1:b5:a5:c8:05:b8:fd:ae:8b:ac:00:ae:16:
                    ad:56:2c:f9:b4:06:40:11:b2:43:39:43:5c:38:8e:
                    95:3e:4d:f4:43:8a:65:30:3f:a1:ba:54:15:1a:0f:
                    d7:3a:ed:5b:e1:9f:fd:00:51:e5:d7:08:5d:8b:58:
                    d6:a6:bb:d7:8d:73:29:68:70:2c:38:b4:5a:84:f8:
                    ef:79:59:bc:16:04:b4:f7:09:41:63:af:24:fe:1e:
                    1a:a5:17:b1:ae:6d:cd:c5:6e:f6:58:91:81:34:21:
                    f6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:43:D3:D9:16:EC:99:A0:20:7B:25:64:14:3C:AB:63:20:55:DA:0D
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a3a2f33362d3336203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1::/36

    Signature Algorithm: sha256WithRSAEncryption
         20:31:6a:b8:53:fa:3c:91:37:b7:71:31:6f:b3:76:45:40:7d:
         da:19:68:05:94:58:ef:71:5b:b3:ce:4d:77:e2:6b:03:39:b7:
         32:11:60:b7:2d:a0:5c:33:90:1f:16:ef:cf:12:48:18:c0:6a:
         0f:7e:66:ce:8c:d7:70:4d:7d:fb:f8:26:d3:61:3d:70:7f:29:
         d0:b6:c9:1b:e7:85:f4:43:c2:3c:09:3a:6e:8f:77:77:5c:9f:
         7f:d5:e1:45:ca:a6:2d:67:ce:5a:06:eb:b2:75:0e:86:4c:db:
         f3:76:8e:51:e2:9a:62:11:8b:50:c3:12:e9:74:83:2b:8b:2a:
         b0:fc:4d:af:c4:fe:ad:b1:5c:f7:b7:dd:95:53:68:4d:1e:83:
         c2:60:78:cf:1d:44:5c:33:ce:f4:ff:cd:ac:2d:04:f4:e3:e5:
         67:a6:71:44:ff:43:59:09:5d:89:8c:f4:5b:45:59:08:31:71:
         d9:fc:3b:b4:ea:d8:bc:58:51:6d:9c:46:f4:6f:f5:cd:aa:17:
         1f:ca:7e:db:af:41:13:a7:de:b6:4f:5c:6e:93:74:15:ab:54:
         3b:79:d4:28:95:57:36:0d:80:6d:6d:c7:ea:f6:cb:10:0d:bd:
         c1:a6:21:1a:a9:4f:ad:5b:1a:67:15:bf:3d:0c:21:cd:43:be:
         49:69:fc:4d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Nov 21 21:11:58 2024 by rpki-client on console-fra.rpki-client.org