Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3231303a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3231303a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          zoMCNYyQzurO0G2f9wImBuEjURmtUpFwZEfINfjeQWo=
Subject key identifier:   A9:C7:99:85:11:11:6E:52:C7:21:68:2A:3E:BB:70:5F:3B:F5:5E:86
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       3904B9EB7DB19EAC7EC412A94369285EC8BC0DB2
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3231303a3a2f34382d3438203d3e203530323234.roa
Signing time:             Wed 14 Aug 2024 15:21:55 +0000
ROA not before:           Wed 14 Aug 2024 15:16:55 +0000
ROA not after:            Wed 13 Aug 2025 15:21:55 +0000
asID:                     50224
IP address blocks:        2a14:6f45:210::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:04:b9:eb:7d:b1:9e:ac:7e:c4:12:a9:43:69:28:5e:c8:bc:0d:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Aug 14 15:16:55 2024 GMT
            Not After : Aug 13 15:21:55 2025 GMT
        Subject: CN=A9C7998511116E52C721682A3EBB705F3BF55E86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:bc:d4:92:a2:07:5e:55:fd:43:dc:72:da:8d:
                    54:81:96:5d:8e:8f:b9:ae:19:1b:74:97:18:68:24:
                    18:23:b9:55:43:86:8b:a1:ce:4d:9b:f5:19:9a:bc:
                    9e:96:c3:e5:cb:8a:cc:10:3c:7c:bb:c2:36:70:a8:
                    bd:3e:f3:db:09:da:8f:16:36:cd:49:12:fa:94:db:
                    bc:4d:58:8d:3a:9e:f2:3c:3d:83:f0:1a:02:2e:c5:
                    f2:ed:96:fa:8d:39:c7:4d:8c:85:05:00:ac:dc:6e:
                    d1:7d:0a:83:e4:e5:c6:65:5b:85:bc:6f:8c:8e:d0:
                    3f:8b:58:83:69:65:68:e8:cb:71:e2:da:88:03:cc:
                    dc:1b:b2:e0:35:1c:13:f9:7a:48:a6:8f:46:67:c2:
                    c5:b8:fb:2f:fe:21:b5:ca:04:87:f4:47:64:98:68:
                    2e:fd:d4:1b:b4:62:6c:a0:10:29:60:51:12:0b:d4:
                    17:38:18:57:e6:00:08:13:56:c7:e6:32:d2:3f:58:
                    2a:f0:c7:4e:89:c3:25:1e:c4:f8:f0:ac:ad:a9:1e:
                    25:37:c1:25:fe:96:ae:cd:65:bd:64:d9:f5:57:31:
                    b3:45:20:ca:f5:8c:46:26:82:2d:df:3b:b1:2e:8f:
                    ec:4b:52:ca:a1:7f:0d:a1:6b:60:92:c8:99:53:17:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C7:99:85:11:11:6E:52:C7:21:68:2A:3E:BB:70:5F:3B:F5:5E:86
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3231303a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:210::/48

    Signature Algorithm: sha256WithRSAEncryption
         2c:4e:76:a9:da:80:03:ee:98:99:46:e3:1d:d6:e8:f2:0e:c7:
         fd:8a:d9:2e:f2:96:c3:11:fa:11:92:1c:47:95:4a:e8:48:77:
         0b:9f:bb:b2:3c:e2:45:b9:f7:ad:3c:6f:e4:f1:47:c7:60:da:
         df:70:23:9b:70:60:80:8c:33:b9:a3:aa:4b:cf:11:da:be:7f:
         9f:bc:a4:51:21:54:80:10:ca:01:ff:37:94:17:e7:bb:e3:30:
         b0:2a:1e:5c:9e:f2:7b:e5:48:14:df:dc:b7:b3:05:79:42:4e:
         28:f0:ad:40:7c:23:f6:cc:d0:18:09:92:75:4b:30:7a:cd:b8:
         33:a3:9f:f8:59:27:fd:f2:ef:7b:6c:f3:30:2a:c3:7f:02:99:
         ce:17:d6:8d:67:a9:b9:20:45:00:d5:67:4e:ef:d0:a3:03:52:
         b3:2e:c1:4c:12:c2:17:48:02:18:5c:fe:44:3c:27:9a:e3:e2:
         81:7a:15:52:92:ff:ac:7b:1e:68:01:3e:4a:af:ca:3c:93:8d:
         e0:a8:3a:de:73:46:2c:45:a5:2c:56:f0:ae:e9:bd:cc:c2:8a:
         45:9c:2d:e8:e8:38:b1:df:e7:5f:c4:32:fc:38:60:c0:8d:0b:
         98:a6:64:4e:07:dc:94:bb:78:ee:06:eb:52:2f:4f:17:d5:cd:
         4e:5c:25:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 05:07:28 2024 by rpki-client on console-fra.rpki-client.org