Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/12/326130373a353463313a3a2f33362d3438203d3e203530323234.roa
File:                     326130373a353463313a3a2f33362d3438203d3e203530323234.roa (raw, json)
Hash identifier:          L5YYwACWE9YIzKq7XS0SZwXUvXo7ugKa72DFBStfjVY=
Subject key identifier:   AB:AA:EF:CC:3E:3A:29:10:AE:DC:67:81:8F:13:83:C5:45:C2:F2:BE
Certificate issuer:       /CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
Certificate serial:       363EBBE28AAD8BDF47CBEA43AFD6E2F558E7DEF6
Authority key identifier: F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a3a2f33362d3438203d3e203530323234.roa
Signing time:             Thu 21 Mar 2024 05:41:37 +0000
ROA not before:           Thu 21 Mar 2024 05:36:37 +0000
ROA not after:            Thu 20 Mar 2025 05:41:37 +0000
asID:                     50224
IP address blocks:        2a07:54c1::/36 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl
                          rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 04 Dec 2024 04:23:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:3e:bb:e2:8a:ad:8b:df:47:cb:ea:43:af:d6:e2:f5:58:e7:de:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9811988BAACCD8146C3C7AC4F48D00F9F47230E
        Validity
            Not Before: Mar 21 05:36:37 2024 GMT
            Not After : Mar 20 05:41:37 2025 GMT
        Subject: CN=ABAAEFCC3E3A2910AEDC67818F1383C545C2F2BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:f1:b6:17:61:2f:63:6d:bf:59:2c:e8:13:ba:
                    bd:8a:97:1d:55:6a:2e:2e:4d:68:5e:b8:24:a1:cb:
                    fc:c4:cf:fd:ea:21:01:45:0f:6b:7e:9c:32:ef:f3:
                    c6:9d:9d:13:5b:dd:d3:1a:77:d5:1c:0f:9c:32:24:
                    e6:b8:5e:d6:54:49:b2:c6:b0:3f:c3:24:2a:b3:4c:
                    1c:d7:0e:fb:0d:cb:28:04:b6:7a:65:aa:ea:eb:85:
                    b6:b9:63:aa:ba:4d:3b:ae:02:5a:89:15:d2:98:74:
                    cd:26:e8:c1:21:a7:7f:3d:63:ec:c3:b2:0a:2e:6e:
                    ad:e5:4d:52:8e:3b:09:94:1f:e7:5d:e5:4d:8a:2e:
                    5f:61:5e:d7:08:06:9f:38:4f:b4:fc:8c:22:95:65:
                    bb:f1:25:47:33:1c:5c:34:1b:3f:4b:ac:19:4b:ab:
                    c6:fa:c9:af:26:54:ed:6b:44:07:48:dc:a9:2b:5e:
                    55:3e:31:61:e7:72:70:a7:94:9a:a0:a1:20:8f:34:
                    16:5e:35:43:f1:10:f9:4f:cb:37:92:69:e4:2b:f8:
                    d4:9a:5f:46:ed:22:56:63:df:10:0b:e1:76:e6:75:
                    07:72:3b:fe:6b:cb:e4:7a:64:fd:1d:8b:58:14:ff:
                    3d:de:87:96:ac:9b:38:2e:c6:3e:aa:5c:cf:e0:8e:
                    b3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:AA:EF:CC:3E:3A:29:10:AE:DC:67:81:8F:13:83:C5:45:C2:F2:BE
            X509v3 Authority Key Identifier:
                keyid:F9:81:19:88:BA:AC:CD:81:46:C3:C7:AC:4F:48:D0:0F:9F:47:23:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/12/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/F9811988BAACCD8146C3C7AC4F48D00F9F47230E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/12/326130373a353463313a3a2f33362d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1::/36

    Signature Algorithm: sha256WithRSAEncryption
         46:34:ed:15:57:c7:34:4c:44:bf:ac:10:9d:fb:23:71:2c:f7:
         f1:6b:34:43:35:39:63:b4:53:a4:cb:89:e8:bd:76:57:cf:93:
         c9:4a:e8:85:f3:be:31:83:49:f3:81:07:e5:cd:3a:c4:b4:a6:
         74:af:08:cb:da:8c:10:1c:8f:81:ee:ad:74:90:40:1f:91:9c:
         ec:10:26:54:c1:49:ad:5d:5c:60:aa:81:35:13:1e:40:7b:60:
         3b:d1:41:2a:b5:6a:77:b1:12:cd:07:26:08:9e:bc:63:76:72:
         f5:10:62:d8:6e:2b:19:21:10:e5:c3:b9:eb:3a:0c:84:8d:6a:
         9e:3b:31:d9:aa:32:1f:82:1e:e3:b0:f5:ff:af:7d:a3:db:41:
         67:78:d8:f3:87:98:46:46:7d:e2:da:59:bf:06:aa:19:45:e5:
         d3:11:6e:e5:3f:ee:e1:d6:b3:72:49:d0:17:3a:be:9c:63:94:
         e0:e3:71:12:97:50:09:c0:a7:a5:7e:a7:22:ed:6a:6d:29:e3:
         99:ca:f2:4d:5c:c2:2e:53:b1:92:30:14:00:7a:d7:09:ba:77:
         5c:67:c7:2e:48:6b:6b:9d:ff:20:ea:57:53:51:01:a0:55:05:
         52:ca:c4:7c:d2:17:5f:df:a3:6b:97:9b:1b:d0:44:21:b2:62:
         f7:b3:8f:9e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Tue Dec 3 12:39:50 2024 by rpki-client on console-fra.rpki-client.org