Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3330303a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3330303a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          IsoYLZvXm48nqvdH/0sfAjRWr6V35KVOucyu7m+gy10=
Subject key identifier:   3D:12:97:2B:24:6E:EF:C3:34:84:7F:94:43:40:1C:85:DB:A8:A1:79
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       7057AA7392EFA757B02BD00605571D8D6FB4022B
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3330303a3a2f34382d3438203d3e203530323234.roa
Signing time:             Wed 14 Aug 2024 15:21:56 +0000
ROA not before:           Wed 14 Aug 2024 15:16:56 +0000
ROA not after:            Wed 13 Aug 2025 15:21:56 +0000
asID:                     50224
IP address blocks:        2a14:6f45:300::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 09:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:57:aa:73:92:ef:a7:57:b0:2b:d0:06:05:57:1d:8d:6f:b4:02:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Aug 14 15:16:56 2024 GMT
            Not After : Aug 13 15:21:56 2025 GMT
        Subject: CN=3D12972B246EEFC334847F9443401C85DBA8A179
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3a:8e:48:49:9c:c7:b2:c4:ed:e8:10:fd:3e:
                    fe:de:83:08:07:d0:2c:3a:62:93:6f:3a:33:14:1b:
                    ba:60:11:b0:d1:9b:25:d2:1e:36:af:61:78:b0:7c:
                    c4:fd:cb:3e:80:42:08:c1:5a:6c:70:5c:6c:70:65:
                    8a:0e:9a:b0:f0:f0:e8:60:4b:08:b8:ee:ab:e7:ae:
                    1b:41:23:38:98:68:e5:d0:00:96:8d:6f:d9:cb:b2:
                    c2:35:e4:f2:e8:30:b9:79:d9:8c:d7:dc:24:cf:9a:
                    95:06:42:fe:22:c8:33:5b:73:5c:b9:56:ad:55:c4:
                    8a:31:69:a5:a2:be:39:f7:9a:80:72:f8:c8:b2:18:
                    0a:e0:29:55:12:eb:86:25:0a:68:05:d4:4a:0e:1b:
                    b5:55:c6:e4:87:a2:82:5d:9a:25:0f:06:ae:9c:7a:
                    e3:8c:a9:18:6e:78:b3:83:f5:f1:dc:0a:07:02:0d:
                    9a:bc:c5:7a:79:69:fa:8d:19:0f:d0:24:1e:cd:6b:
                    07:e0:4f:49:eb:7d:7b:b3:b2:76:0e:f3:9e:fb:36:
                    1c:3e:f8:3f:f6:c6:e3:ac:a6:f1:ad:a4:56:ec:7a:
                    da:d6:f6:99:a8:d4:5b:54:22:ee:76:cd:d7:4d:d6:
                    31:53:bc:29:b7:1e:f9:95:63:ee:08:a4:1a:0c:72:
                    03:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:12:97:2B:24:6E:EF:C3:34:84:7F:94:43:40:1C:85:DB:A8:A1:79
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3330303a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:300::/48

    Signature Algorithm: sha256WithRSAEncryption
         a3:a6:e0:9f:ca:ed:94:86:26:df:8c:00:7c:ef:ae:b2:42:21:
         94:15:0e:01:0f:f1:a7:17:0a:a5:da:91:72:5e:5b:76:fd:c3:
         39:18:8d:b6:89:5b:83:82:f0:b9:fb:55:b7:6a:82:e2:fc:91:
         a8:65:0a:3d:1b:c9:ad:f0:92:5d:b8:b3:b2:28:f3:42:4c:e9:
         b5:2e:d5:f4:6b:a5:62:4e:5c:8c:3f:0d:63:e8:7e:fd:5d:1f:
         55:e9:ea:f4:7b:1a:46:5d:fd:50:45:04:8b:88:c0:b5:12:68:
         61:a2:c6:78:2a:4f:8e:85:3d:aa:91:39:d2:8f:e3:4e:ed:55:
         60:9b:30:b7:1b:5f:4c:28:ad:6b:9f:b7:ed:70:89:45:fd:39:
         a0:46:a1:c4:e4:de:ee:57:f4:99:5b:9a:6d:59:64:38:b3:5e:
         55:c7:69:cd:bd:eb:b4:52:f9:9b:b5:df:b5:d2:4b:d9:64:20:
         ef:f3:06:af:68:e0:64:f5:15:45:aa:d4:f7:4f:c4:7a:69:a3:
         fb:53:33:1d:26:0d:e9:3f:2c:f1:1d:41:09:d6:ca:e4:bf:65:
         ec:8d:22:23:14:2f:31:ab:90:0b:aa:f5:06:e5:fc:b8:54:81:
         49:fd:d2:15:db:d0:cb:5f:06:f0:3e:c7:e1:e8:c0:a5:57:b6:
         08:7a:c9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 20:03:35 2024 by rpki-client on console-ams.rpki-client.org