Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3330323a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3330323a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          TUfv+7BlFpUp3poYbm0XRbT0I1Dr/IIKQHwMg+3TTH8=
Subject key identifier:   F8:DF:DE:24:D8:FD:75:53:97:70:F9:55:72:94:7B:64:32:BE:80:2E
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       2D74A3EE6CB77A585BBC334477433AB4D0DD09C9
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3330323a3a2f34382d3438203d3e203530323234.roa
Signing time:             Wed 14 Aug 2024 15:21:57 +0000
ROA not before:           Wed 14 Aug 2024 15:16:57 +0000
ROA not after:            Wed 13 Aug 2025 15:21:57 +0000
asID:                     50224
IP address blocks:        2a14:6f45:302::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 09:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:74:a3:ee:6c:b7:7a:58:5b:bc:33:44:77:43:3a:b4:d0:dd:09:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Aug 14 15:16:57 2024 GMT
            Not After : Aug 13 15:21:57 2025 GMT
        Subject: CN=F8DFDE24D8FD75539770F95572947B6432BE802E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:9b:05:b7:b2:d6:07:a1:79:8e:41:64:27:d6:
                    61:6d:87:eb:fd:9b:86:c2:ba:f5:37:78:e5:39:0f:
                    6f:87:b7:8d:05:c7:b5:cd:4d:9b:54:9d:91:18:31:
                    52:de:a6:ee:c1:35:37:0f:43:40:ba:4f:df:aa:84:
                    22:af:7e:d9:19:49:d8:80:75:b0:3e:82:8d:5e:ae:
                    ce:4f:db:13:a2:39:67:db:2c:21:93:a9:ef:03:e9:
                    48:aa:8c:30:c1:1f:6f:a5:9c:c0:28:df:cd:22:10:
                    14:2e:85:f6:18:30:17:96:d1:33:a7:4c:b4:54:f8:
                    2e:ad:da:e1:50:1d:3c:60:06:0c:22:dd:2f:f8:41:
                    6a:3d:46:f6:fe:ad:1d:e3:89:7c:dc:75:cd:64:8f:
                    1a:ba:69:77:b3:64:06:95:26:5d:f9:3c:c8:dd:6b:
                    8b:e3:ee:e7:df:b3:72:18:50:24:bd:18:9d:60:54:
                    3f:4d:75:02:24:0f:33:6c:68:2b:ad:02:85:10:e0:
                    3e:db:aa:32:1e:1a:96:e2:d1:31:97:bd:68:09:87:
                    44:cd:97:2c:53:88:ea:38:02:dc:b1:8f:f1:ee:46:
                    12:6d:dc:ae:c8:0e:d1:1f:69:53:98:0a:5d:cf:29:
                    21:55:3d:b9:73:17:fc:45:4c:51:f0:04:ba:74:bc:
                    fb:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:DF:DE:24:D8:FD:75:53:97:70:F9:55:72:94:7B:64:32:BE:80:2E
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3330323a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:302::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:35:fb:fb:4e:b3:7a:73:f2:5a:96:8c:20:52:af:fa:b2:ff:
         62:a5:6f:09:79:27:67:dc:cb:8b:99:b9:e3:75:10:b5:d9:1a:
         a1:bd:e8:e5:5d:21:5b:b5:c4:b7:b1:3a:04:24:ef:c3:82:7e:
         07:bc:79:e3:3e:d1:99:b7:a2:1d:e3:6c:4b:04:6f:8d:8c:2a:
         67:69:dd:ae:2d:12:23:82:a2:ef:89:0e:ec:ea:dc:40:a6:7f:
         12:09:8d:59:24:5d:8d:e6:03:2c:53:81:25:5e:32:91:00:c7:
         ba:bf:bb:98:ed:02:ab:5e:a5:9e:0d:34:78:ca:41:5d:4f:7c:
         bf:01:ce:44:31:8d:be:ae:23:19:ed:ab:74:53:03:4b:00:62:
         df:f8:1f:42:fb:03:e1:d4:01:09:21:bf:60:0a:40:3a:34:19:
         41:57:13:2d:1a:b4:3b:49:62:7d:e0:02:d3:40:82:a8:09:6a:
         b2:09:cc:af:29:f6:72:fc:78:f9:f7:bf:96:71:8d:fc:a9:54:
         80:0f:f0:f7:31:22:ac:81:52:28:7c:ca:2d:40:d6:26:4d:fa:
         30:6c:79:22:67:20:11:ca:5a:ec:76:07:b1:8f:1a:65:62:4d:
         34:15:c4:63:5e:3a:2d:9a:e5:d6:e5:93:bd:4b:d6:9f:9d:b9:
         8c:67:95:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:23:56 2024 by rpki-client on console-fra.rpki-client.org