Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3330313a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3330313a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          cEsjtdYsbZkqa1CN8piWluIYVaLTvPPNuDJ4nDaLpTs=
Subject key identifier:   A0:26:C1:C0:29:AA:51:64:7F:29:9D:D5:A9:F0:60:F0:FB:77:95:07
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       68422CFC8614FF954931955456E85BBD90FC8FEF
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3330313a3a2f34382d3438203d3e203530323234.roa
Signing time:             Wed 14 Aug 2024 15:21:56 +0000
ROA not before:           Wed 14 Aug 2024 15:16:56 +0000
ROA not after:            Wed 13 Aug 2025 15:21:56 +0000
asID:                     50224
IP address blocks:        2a14:6f45:301::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 00:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:42:2c:fc:86:14:ff:95:49:31:95:54:56:e8:5b:bd:90:fc:8f:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Aug 14 15:16:56 2024 GMT
            Not After : Aug 13 15:21:56 2025 GMT
        Subject: CN=A026C1C029AA51647F299DD5A9F060F0FB779507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7d:92:ac:10:ac:e7:33:e3:2c:e5:23:c9:74:
                    51:9a:4d:27:0d:84:7c:b7:35:05:69:2a:4d:dc:59:
                    78:2d:8d:49:98:19:3d:5f:f0:7e:24:20:2e:ea:54:
                    3c:06:3b:10:1f:0f:74:99:5d:0a:52:37:68:ee:97:
                    e2:29:e5:2d:19:ef:02:14:96:91:96:9e:06:a4:3c:
                    4b:e4:ba:9e:fc:8f:c1:20:a3:46:13:af:a4:5c:63:
                    a8:bc:d1:1b:a6:5b:cc:f8:dc:1e:f5:c7:68:4b:b4:
                    ff:07:e7:a9:9f:06:6e:37:92:fe:16:c8:71:9f:c3:
                    dd:9f:6e:c2:a0:ee:1e:87:d0:c5:bc:0c:29:fb:35:
                    8c:48:2d:94:a8:3a:64:49:ba:47:ab:b6:36:62:e2:
                    fa:27:57:d5:a1:65:1f:b2:64:dc:c5:fc:57:f5:2a:
                    84:c2:c2:f5:0f:34:e8:f4:19:3e:19:c7:68:82:ee:
                    3e:38:89:13:e0:a9:86:6c:e0:89:ea:24:13:7b:b6:
                    18:bf:5c:ef:ba:33:79:d6:e3:f4:3c:1b:d8:61:4a:
                    84:0e:83:b1:99:7a:34:0f:58:4c:09:1f:37:c4:bd:
                    cb:5c:2d:5f:6a:88:71:8b:84:40:9f:9a:4b:c9:5a:
                    60:53:4f:b7:ec:20:f1:b3:61:90:6c:d8:7f:bd:0d:
                    f4:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:26:C1:C0:29:AA:51:64:7F:29:9D:D5:A9:F0:60:F0:FB:77:95:07
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3330313a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:301::/48

    Signature Algorithm: sha256WithRSAEncryption
         27:37:2c:05:aa:21:c6:d3:cd:4a:9f:45:b6:08:29:0b:ea:18:
         8d:06:a4:c1:c9:9f:0b:ed:e5:28:9e:56:27:cd:52:4d:d5:90:
         d4:7e:ca:41:24:09:58:54:d3:e3:30:ac:d6:6d:df:57:3d:37:
         49:67:b3:59:33:7f:45:49:e2:86:51:4b:2f:a8:a1:76:6a:9f:
         fa:ea:c6:df:94:4d:73:bd:4d:37:8d:97:21:62:94:af:03:47:
         cd:c1:e1:38:09:82:cb:f5:f2:02:d1:db:8a:b0:73:b6:bb:99:
         a2:c9:df:09:6b:a9:15:35:f9:81:e5:fa:09:8a:1d:02:6b:f8:
         85:20:47:c3:fd:9c:eb:3b:6b:c9:2c:10:a4:69:ee:27:4b:95:
         6e:d8:56:04:c2:ce:a1:2a:31:58:de:95:7a:da:08:41:0f:d0:
         53:06:22:ba:b2:b5:34:21:66:0d:d7:57:67:61:58:dd:2b:64:
         25:60:1f:66:ec:d0:b9:96:e7:4d:f1:5b:b9:bd:2b:fb:ed:1b:
         6b:c5:db:d4:88:24:1a:53:89:ea:78:02:f9:b5:49:82:3f:3a:
         cc:83:50:d9:29:9d:91:5c:84:78:b1:b1:ff:65:86:2e:3d:ef:
         d8:36:75:e1:64:b2:f2:22:4a:32:cc:ee:1a:93:4b:8f:22:e0:
         47:2c:ba:3b
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgIUaEIs/IYU/5VJMZVUVuhbvZD8j+8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDRDOTJEOUIxQzgzMDdCNzBDNDcyOTAxNjZENTk4OUNF
RkFCRENDNDAeFw0yNDA4MTQxNTE2NTZaFw0yNTA4MTMxNTIxNTZaMDMxMTAvBgNV
BAMTKEEwMjZDMUMwMjlBQTUxNjQ3RjI5OURENUE5RjA2MEYwRkI3Nzk1MDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAfZKsEKznM+Ms5SPJdFGaTScN
hHy3NQVpKk3cWXgtjUmYGT1f8H4kIC7qVDwGOxAfD3SZXQpSN2jul+Ip5S0Z7wIU
lpGWngakPEvkup78j8Ego0YTr6RcY6i80RumW8z43B71x2hLtP8H56mfBm43kv4W
yHGfw92fbsKg7h6H0MW8DCn7NYxILZSoOmRJukertjZi4vonV9WhZR+yZNzF/Ff1
KoTCwvUPNOj0GT4Zx2iC7j44iRPgqYZs4InqJBN7thi/XO+6M3nW4/Q8G9hhSoQO
g7GZejQPWEwJHzfEvctcLV9qiHGLhECfmkvJWmBTT7fsIPGzYZBs2H+9DfTnAgMB
AAGjggIfMIICGzAdBgNVHQ4EFgQUoCbBwCmqUWR/KZ3VqfBg8Pt3lQcwHwYDVR0j
BBgwFoAUBMktmxyDB7cMRykBZtWYnO+r3MQwDgYDVR0PAQH/BAQDAgeAMGQGA1Ud
HwRdMFswWaBXoFWGU3JzeW5jOi8vcnBraS5jYy9yZXBvL015dGhpY2FsS2l0dGVu
LzE1LzA0QzkyRDlCMUM4MzA3QjcwQzQ3MjkwMTY2RDU5ODlDRUZBQkRDQzQuY3Js
MIGeBggrBgEFBQcBAQSBkTCBjjCBiwYIKwYBBQUHMAKGf3JzeW5jOi8vcnN5bmMu
cGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2
LTg2ZTEtZjZjMzkzNWI5YjNkLzQvMDRDOTJEOUIxQzgzMDdCNzBDNDcyOTAxNjZE
NTk4OUNFRkFCRENDNC5jZXIwgYMGCCsGAQUFBwELBHcwdTBzBggrBgEFBQcwC4Zn
cnN5bmM6Ly9ycGtpLmNjL3JlcG8vTXl0aGljYWxLaXR0ZW4vMTUvMzI2MTMxMzQz
YTM2NjYzNDM1M2EzMzMwMzEzYTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzNTMwMzIz
MjM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/
BBMwETAPBAIAAjAJAwcAKhRvRQMBMA0GCSqGSIb3DQEBCwUAA4IBAQAnNywFqiHG
081Kn0W2CCkL6hiNBqTByZ8L7eUonlYnzVJN1ZDUfspBJAlYVNPjMKzWbd9XPTdJ
Z7NZM39FSeKGUUsvqKF2ap/66sbflE1zvU03jZchYpSvA0fNweE4CYLL9fIC0duK
sHO2u5miyd8Ja6kVNfmB5foJih0Ca/iFIEfD/ZzrO2vJLBCkae4nS5Vu2FYEws6h
KjFY3pV62ghBD9BTBiK6srU0IWYN11dnYVjdK2QlYB9m7NC5ludN8Vu5vSv77Rtr
xdvUiCQaU4nqeAL5tUmCPzrMg1DZKZ2RXIR4sbH/ZYYuPe/YNnXhZLLyIkoyzO4a
k0uPIuBHLLo7
-----END CERTIFICATE-----
Generated at Thu Nov 21 05:39:02 2024 by rpki-client on console-ams.rpki-client.org