Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3130313a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3130313a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          qCqH6ttQujBRJsAavEAi5wfhShVsAPPwfw7Qd/9lLss=
Subject key identifier:   DE:47:A9:68:11:07:7F:5F:35:C4:C8:07:F5:A5:E7:8B:61:D9:7B:E6
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       4AE807D8C7B6DB0E37D0DD3863CD3B49D21DB0AD
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3130313a3a2f34382d3438203d3e203530323234.roa
Signing time:             Wed 14 Aug 2024 15:21:55 +0000
ROA not before:           Wed 14 Aug 2024 15:16:55 +0000
ROA not after:            Wed 13 Aug 2025 15:21:55 +0000
asID:                     50224
IP address blocks:        2a14:6f45:101::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e8:07:d8:c7:b6:db:0e:37:d0:dd:38:63:cd:3b:49:d2:1d:b0:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Aug 14 15:16:55 2024 GMT
            Not After : Aug 13 15:21:55 2025 GMT
        Subject: CN=DE47A96811077F5F35C4C807F5A5E78B61D97BE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:c5:73:4c:c4:40:8f:70:4a:fa:72:52:ee:da:
                    ec:f6:75:31:35:0d:32:71:66:b7:0f:6d:93:80:51:
                    89:c6:f4:15:0f:7c:cc:59:1c:52:4a:a3:a4:51:80:
                    7e:fe:c2:d0:03:77:c9:5a:92:01:02:37:36:c6:b6:
                    91:6e:84:fc:fa:8f:3c:35:95:bf:2a:b7:0f:79:9d:
                    08:69:27:3f:9a:6f:43:8e:87:06:39:cf:82:c5:82:
                    37:a0:d8:26:83:9e:48:35:0d:0b:2d:2b:d9:7b:20:
                    f3:91:26:d3:6d:62:b1:e5:87:ca:b3:05:29:80:9a:
                    a5:83:19:77:69:1d:bf:d2:79:f6:48:a9:37:c1:4b:
                    2d:cb:31:9e:bf:c2:63:ce:92:b5:36:19:64:b3:3b:
                    3c:77:fc:79:41:60:87:a0:5d:99:63:53:34:33:89:
                    d0:63:41:18:10:e0:8b:63:af:8c:a0:4f:89:f7:30:
                    25:93:76:9d:73:e6:52:0d:33:ac:00:9c:ea:c9:f8:
                    78:ea:fd:70:29:70:d3:31:60:09:df:d8:78:a5:38:
                    0d:71:6c:28:51:6f:3a:04:90:bf:cf:4c:a7:0b:76:
                    f2:46:80:64:37:76:02:8d:00:87:ea:7d:f1:3a:31:
                    2c:da:26:e2:2a:d7:b6:34:a6:88:19:63:c8:61:e0:
                    05:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:47:A9:68:11:07:7F:5F:35:C4:C8:07:F5:A5:E7:8B:61:D9:7B:E6
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3130313a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         5f:45:6c:d0:76:c1:41:4b:f9:ae:f4:0d:73:38:c5:f2:41:65:
         31:9f:4a:5d:67:89:33:aa:aa:08:d5:90:fc:42:e8:1e:37:d5:
         52:3c:3a:4c:ed:0d:6a:55:ec:31:d6:b2:8e:b3:1d:3e:c2:10:
         d2:38:b5:c0:b9:19:d7:03:ff:fa:a3:00:b9:96:09:97:c0:14:
         1f:89:e3:a4:f6:13:9b:c0:e3:29:9d:a3:e1:da:5e:fa:71:ac:
         4f:3b:99:b9:b1:70:f2:17:9a:dc:0e:00:55:b4:7d:51:ad:33:
         10:b0:1e:cb:95:fe:c6:3e:69:c6:94:f7:0b:f7:79:03:46:35:
         40:76:33:eb:1d:8c:7d:17:38:b9:91:4b:7d:c3:0a:21:8d:b3:
         45:e6:43:99:e9:2f:f0:16:cf:c6:09:d8:85:89:d7:ff:bf:f7:
         97:ca:5e:5e:2f:f6:a6:ed:9f:7a:3b:56:d7:89:c5:a8:56:d5:
         b8:ee:c4:d8:da:1b:5e:85:cc:ea:37:19:98:3c:66:3e:15:a2:
         a0:70:f0:88:61:ef:53:6c:a7:4f:b8:68:6f:93:ad:b6:3b:92:
         bc:c7:1a:9f:4d:0c:83:a9:5f:ad:be:c7:eb:ab:32:a7:36:95:
         f0:3d:ad:36:d0:a0:69:e3:05:dc:8a:e8:8a:11:ce:e4:6f:18:
         a2:f7:03:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:39:02 2024 by rpki-client on console-ams.rpki-client.org