Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a3a2f33362d3336203d3e203539393230.roa
File:                     326130373a353463313a3a2f33362d3336203d3e203539393230.roa (raw, json)
Hash identifier:          W05S4NdY/KjRl+YGCIOi222wZj7z1gOCC02eUFG+5Do=
Subject key identifier:   1D:7F:3C:06:7C:20:EB:8A:22:68:89:6D:24:C4:6E:22:B1:16:18:A2
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       5FBE09E8D3E46FDF2F1F53EBAAEC59D2CBAF4918
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a3a2f33362d3336203d3e203539393230.roa
Signing time:             Tue 19 Dec 2023 13:01:31 +0000
ROA not before:           Tue 19 Dec 2023 12:56:31 +0000
ROA not after:            Tue 17 Dec 2024 13:01:31 +0000
asID:                     59920
IP address blocks:        2a07:54c1::/36 maxlen: 36

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 07 Jun 2024 18:22:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:be:09:e8:d3:e4:6f:df:2f:1f:53:eb:aa:ec:59:d2:cb:af:49:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Dec 19 12:56:31 2023 GMT
            Not After : Dec 17 13:01:31 2024 GMT
        Subject: CN=1D7F3C067C20EB8A2268896D24C46E22B11618A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:69:02:1c:c0:e9:6a:b0:1f:6f:53:09:28:0a:
                    74:c5:2c:38:3f:29:6a:ba:87:7d:a6:6d:bd:e5:aa:
                    c1:6c:15:d2:6a:94:aa:91:a8:fa:0e:e5:b3:aa:6e:
                    66:f6:2b:f4:86:97:c2:b5:16:c7:df:03:cb:9e:39:
                    14:46:83:2a:69:2e:22:af:3a:a6:92:79:fa:07:06:
                    69:8a:83:58:13:ea:e9:65:ef:b3:83:6f:d2:22:85:
                    2a:2c:af:24:b1:26:05:f2:af:7d:a5:0b:27:af:a6:
                    ab:a1:9e:a7:6f:59:10:7a:93:ea:29:01:59:d0:8d:
                    3e:68:bc:e6:56:6e:92:15:79:30:ca:85:e2:7a:d6:
                    cd:13:bc:3d:d7:33:f4:11:11:a2:f4:d4:75:54:f4:
                    f5:76:a9:4f:c5:4f:95:1e:33:55:2a:b5:d7:ca:f3:
                    5d:d7:d0:9b:a8:ff:bc:36:de:b5:fd:70:29:12:83:
                    99:dc:bf:3f:b6:0d:1b:33:3a:e3:1f:61:fb:c3:58:
                    73:e5:19:48:eb:24:10:76:14:ab:79:39:b9:e3:79:
                    d6:82:72:fe:f6:53:f3:c6:4a:65:20:db:86:24:5e:
                    5e:65:37:95:0b:1c:b2:d7:f6:cf:a6:c4:33:15:d4:
                    8c:ec:f5:3a:d9:9e:5f:50:77:0b:71:5e:6f:69:92:
                    ab:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:7F:3C:06:7C:20:EB:8A:22:68:89:6D:24:C4:6E:22:B1:16:18:A2
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a3a2f33362d3336203d3e203539393230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1::/36

    Signature Algorithm: sha256WithRSAEncryption
         39:20:f0:08:22:18:89:c1:2f:3d:15:4b:e5:01:25:aa:57:b1:
         a4:26:6b:19:ee:bf:9b:e0:ff:b1:c5:81:3c:7b:3c:c8:cc:08:
         b4:77:5e:8f:26:76:af:09:e4:29:2b:9c:7b:e9:c3:e3:82:0e:
         b8:32:61:b0:06:dd:92:2c:54:11:cc:0f:5d:dc:a1:35:71:0a:
         e6:96:c9:b9:1b:78:3b:e4:70:af:23:cc:8c:c5:34:b4:ce:e8:
         3f:5c:0b:6b:2f:b5:20:2f:52:d1:34:39:f6:73:b8:3a:fa:a6:
         f8:aa:28:fe:67:38:68:c4:31:7d:fb:a3:f4:1e:db:83:1e:41:
         66:21:88:bb:aa:9c:30:da:1e:32:f5:19:cb:4a:66:f7:41:58:
         e8:0d:fd:2c:21:32:14:8b:b4:d5:8c:93:ec:ad:13:07:9b:19:
         b9:32:0a:3f:60:45:f6:f3:c7:10:2a:f2:c7:ed:18:1d:f4:d2:
         6d:d2:b2:35:df:ab:4e:de:f7:cf:43:96:31:a4:19:26:f0:a7:
         7f:36:2d:e9:79:14:91:52:81:7e:f7:aa:74:98:9d:47:9d:e9:
         64:04:ea:4a:11:30:54:42:11:5f:94:cd:f9:f5:05:0f:9e:75:
         ef:77:ff:65:16:8c:23:66:0f:2b:bc:50:df:1b:1a:e1:3a:b6:
         9a:59:1c:e5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 7 00:16:48 2024 by rpki-client on console-ams.rpki-client.org