Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331313a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3331313a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          LYEjCPXWTZD+OlS7fpu2t3nLgoGJ88QsiXshIdQRmzI=
Subject key identifier:   E4:3D:7B:16:9F:2F:06:BE:3F:D5:AA:B1:92:CF:02:DB:66:78:7B:F0
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       726735A31650D14D359CE37A769F658574A6FAFE
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331313a3a2f34382d3438203d3e203530323234.roa
Signing time:             Fri 16 Aug 2024 14:23:51 +0000
ROA not before:           Fri 16 Aug 2024 14:18:51 +0000
ROA not after:            Fri 15 Aug 2025 14:23:51 +0000
asID:                     50224
IP address blocks:        2a14:6f45:311::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Dec 2024 09:57:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:67:35:a3:16:50:d1:4d:35:9c:e3:7a:76:9f:65:85:74:a6:fa:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Aug 16 14:18:51 2024 GMT
            Not After : Aug 15 14:23:51 2025 GMT
        Subject: CN=E43D7B169F2F06BE3FD5AAB192CF02DB66787BF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8e:ed:38:88:78:d3:51:c6:2b:5f:5f:67:92:
                    8f:be:07:e3:6a:b9:56:87:77:0c:88:e1:a3:e1:b5:
                    32:98:0d:75:fe:6e:0a:99:87:7f:df:34:08:47:b5:
                    71:ca:3e:83:2c:57:69:4f:73:42:35:0e:27:c8:d2:
                    c2:d7:8c:b9:4a:21:11:b5:75:50:69:b7:92:e6:80:
                    68:46:2b:72:4a:af:13:56:98:a5:27:1d:71:76:76:
                    fd:69:15:6c:10:38:43:39:6f:49:07:6e:90:c1:ec:
                    46:c7:ff:69:f1:b2:fc:c8:22:30:dc:a0:90:c0:9d:
                    be:39:57:24:ff:73:89:9d:68:5c:5d:99:67:f4:49:
                    b0:e7:f8:42:8e:1b:2b:cf:b8:72:2f:8a:e4:38:38:
                    fd:d3:b2:3e:f1:6f:9a:68:9c:14:10:e3:dd:d7:58:
                    f2:a1:ad:b9:e4:3a:08:5f:ee:c3:31:02:88:5d:4e:
                    ee:43:37:66:76:ac:97:4d:73:79:28:07:d5:a2:4a:
                    4b:f4:cb:ed:33:ed:82:d5:1f:91:8f:8d:cd:ea:7f:
                    9b:2b:ea:71:e6:49:94:3a:ef:91:54:03:ac:da:c2:
                    a1:02:0e:57:57:60:dc:b7:03:b6:25:c6:4f:09:5f:
                    2f:30:de:54:2f:36:03:5a:fe:0f:0a:b8:bb:91:46:
                    9a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:3D:7B:16:9F:2F:06:BE:3F:D5:AA:B1:92:CF:02:DB:66:78:7B:F0
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331313a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:311::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:2e:aa:df:38:b9:70:39:ad:bd:89:66:2e:3f:b3:09:c8:0a:
         4a:7d:ec:ad:38:97:15:73:58:4c:0e:7a:5b:1e:43:8c:b6:35:
         0b:1f:f3:fb:e6:36:83:38:af:2f:00:63:6f:89:b2:96:c5:77:
         30:df:9a:b8:6a:46:9d:af:71:2a:9d:36:80:fc:61:7c:77:a6:
         de:0a:6a:d1:70:89:47:57:2a:dc:1e:81:e3:42:67:87:e3:b0:
         39:21:90:86:e9:e4:33:6f:aa:98:1f:1c:85:4c:e4:54:c1:d5:
         f5:2b:1e:d1:31:d7:88:ac:d9:5b:54:3d:26:37:bc:5f:23:6e:
         4e:c5:08:3a:d6:b5:c1:9d:37:0c:7c:6c:cf:9a:bb:9d:dd:0b:
         c1:1c:86:c6:62:76:70:00:4c:1f:05:ac:1d:67:86:c5:a5:9e:
         44:2f:15:ff:bd:7c:1c:ee:88:7b:0c:67:42:45:81:56:52:8b:
         73:21:e0:d5:40:58:88:7b:b3:93:1c:74:51:46:d7:53:47:08:
         8a:11:ba:50:23:f4:88:30:32:97:2b:53:8f:b1:80:2e:e1:0a:
         43:24:a5:75:6e:9d:cc:be:68:28:ef:29:e2:55:f3:0b:a1:54:
         9c:e9:31:fb:53:11:ca:10:8f:61:1f:52:14:a7:e1:ec:fb:ee:
         3e:11:69:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Dec 2 23:37:59 2024 by rpki-client on console-fra.rpki-client.org