Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331303a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3331303a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          krhF9xhk8IZk4Q9RTiNQ3T33sv+73z+MJ9sYRzuMmsM=
Subject key identifier:   3A:0D:6C:99:CE:0C:5A:D6:1D:C7:4A:D9:A2:0D:3B:B3:4A:76:65:E4
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       0C6172A008276F0F26DA132E55D7D2A5D648622C
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331303a3a2f34382d3438203d3e203530323234.roa
Signing time:             Thu 15 Aug 2024 14:27:23 +0000
ROA not before:           Thu 15 Aug 2024 14:22:23 +0000
ROA not after:            Thu 14 Aug 2025 14:27:23 +0000
asID:                     50224
IP address blocks:        2a14:6f45:310::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 20 Sep 2024 09:10:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:61:72:a0:08:27:6f:0f:26:da:13:2e:55:d7:d2:a5:d6:48:62:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Aug 15 14:22:23 2024 GMT
            Not After : Aug 14 14:27:23 2025 GMT
        Subject: CN=3A0D6C99CE0C5AD61DC74AD9A20D3BB34A7665E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:0f:c9:ed:c6:6c:a2:84:a9:50:1b:c4:f5:d7:
                    a5:28:71:cf:71:95:8c:8b:0e:7f:78:cf:40:2e:3b:
                    0e:81:6b:e9:91:a9:5d:91:8f:c7:0e:d3:8f:62:8e:
                    c5:c5:5c:ec:c6:f2:a6:4c:eb:6f:94:17:41:79:26:
                    b3:54:cb:9b:c6:3b:eb:1d:15:07:ad:7e:b2:11:4d:
                    d1:d3:37:02:ee:35:58:b9:f9:16:54:7d:fc:d4:47:
                    44:e9:5e:c7:b5:e2:2f:d8:89:57:54:a6:41:2a:5c:
                    4b:95:f3:44:e1:a3:ad:0e:02:ae:1e:ee:62:bf:e6:
                    77:24:53:1a:3b:eb:ae:c6:1e:be:e2:a6:b8:43:c6:
                    73:f2:ba:1a:cd:25:d8:da:be:9c:20:29:b7:24:c6:
                    5e:48:d8:4f:fc:6f:85:a2:a5:1b:92:f8:62:a2:6f:
                    64:a8:81:b8:27:81:71:91:70:64:ec:0f:fa:ef:97:
                    f7:c1:80:2c:a2:62:35:8f:93:41:91:b4:44:63:87:
                    c5:dc:c1:e2:7b:a0:e5:1c:f4:9b:32:2d:02:0f:1d:
                    db:6d:7f:ab:d9:d4:83:bd:b8:d6:a5:f1:ee:f1:42:
                    36:a9:61:a7:49:7f:c7:f7:49:53:67:60:bd:4e:a1:
                    55:02:37:6b:82:ca:4e:5a:e7:81:d6:af:20:a0:3d:
                    4f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0D:6C:99:CE:0C:5A:D6:1D:C7:4A:D9:A2:0D:3B:B3:4A:76:65:E4
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331303a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:310::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:f3:df:b6:eb:16:3f:35:81:ad:4b:e3:e3:be:d8:dc:9d:98:
         51:71:75:c3:fd:96:d6:4e:ca:4d:50:11:b5:8a:91:6e:f0:69:
         08:af:7c:cf:a5:52:66:6b:95:31:08:13:6f:27:c0:0d:62:df:
         07:c0:15:cc:6c:9a:fe:15:e5:c9:75:35:65:2d:60:ab:a1:30:
         63:f6:d6:dc:26:f6:28:94:61:03:f0:77:7a:25:86:ec:1a:b3:
         cd:cc:94:ab:35:64:da:39:5f:44:e8:7d:70:89:21:a0:0a:6b:
         6d:6a:fa:56:ac:38:c3:5a:1f:38:dc:cc:03:00:85:27:f8:51:
         46:74:6a:12:2f:7f:8d:28:e9:04:bc:e5:1e:09:63:20:02:42:
         be:4a:ab:01:74:25:20:50:96:c6:c3:a8:b7:6d:fd:3a:73:f3:
         02:85:15:58:06:d8:f4:b0:f1:1b:41:9c:12:d5:6e:a6:35:a6:
         1b:29:40:04:8e:d7:fa:b1:51:52:0a:0c:c5:51:eb:35:8f:09:
         0c:a3:52:5c:62:6f:fb:c5:e9:ad:80:04:8a:0a:80:4a:d6:42:
         1a:54:bd:1d:3b:28:36:81:83:66:a0:99:72:dd:3c:f2:03:97:
         c6:ae:16:be:65:a9:4e:a0:27:0e:90:03:17:0c:47:94:40:c8:
         76:51:6b:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 19 18:23:56 2024 by rpki-client on console-fra.rpki-client.org