Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331333a3a2f34382d3438203d3e203530323234.roa
File:                     326131343a366634353a3331333a3a2f34382d3438203d3e203530323234.roa (raw, json)
Hash identifier:          Dzn+8eGiK7xgohVcPaOMb6zwLiDYp2b0WyxPyNPo9ao=
Subject key identifier:   A3:FC:C9:86:9B:B9:A3:AC:7A:81:01:95:8F:7A:6D:43:A0:20:A9:78
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       6E9D048B4BA181229211FDCB2A7F971A3F513820
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331333a3a2f34382d3438203d3e203530323234.roa
Signing time:             Thu 15 Aug 2024 14:27:23 +0000
ROA not before:           Thu 15 Aug 2024 14:22:23 +0000
ROA not after:            Thu 14 Aug 2025 14:27:23 +0000
asID:                     50224
IP address blocks:        2a14:6f45:313::/48 maxlen: 48

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:9d:04:8b:4b:a1:81:22:92:11:fd:cb:2a:7f:97:1a:3f:51:38:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Aug 15 14:22:23 2024 GMT
            Not After : Aug 14 14:27:23 2025 GMT
        Subject: CN=A3FCC9869BB9A3AC7A8101958F7A6D43A020A978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:d1:63:8c:65:1c:8d:5b:30:c4:1b:97:c5:be:
                    48:83:03:42:f8:c1:24:82:0e:72:25:7e:b9:e8:d0:
                    2a:5a:f2:2b:1c:49:3d:98:1a:c9:f5:e4:ae:80:bc:
                    0a:46:27:77:b9:ab:40:5c:ec:ca:f9:2c:75:7f:1d:
                    0d:e1:bf:b7:5a:c1:c0:e9:a9:c3:4c:8e:d3:0e:5e:
                    d2:bc:17:ed:48:57:60:62:2a:33:48:c1:93:39:7c:
                    d9:68:27:97:79:cb:ac:4a:26:c4:66:37:cc:5b:4f:
                    c8:e2:3d:45:0c:bc:56:2e:5b:4a:d5:f9:ac:d9:61:
                    b1:7e:ec:38:19:c8:75:61:02:52:12:b4:55:88:5c:
                    e8:d9:1b:64:a9:d6:2e:18:ee:c8:0c:bd:a3:31:ad:
                    ae:ed:d1:07:97:21:98:b1:02:06:42:c3:d7:36:73:
                    88:c6:0d:be:ec:6e:74:40:eb:c6:86:2f:10:6e:70:
                    69:bb:2e:1f:e1:bc:f8:65:04:b5:20:e5:be:26:96:
                    00:d4:f4:5b:1d:04:06:26:a1:cf:4c:fd:d9:94:99:
                    6c:6d:5c:4d:8a:ab:e0:92:21:9b:9f:33:3d:14:0a:
                    f2:3a:e2:86:0d:74:62:64:c0:ef:b5:9d:a8:7c:e2:
                    8b:d1:e0:5c:d2:77:a3:11:9c:ad:d1:1e:0c:77:62:
                    de:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:FC:C9:86:9B:B9:A3:AC:7A:81:01:95:8F:7A:6D:43:A0:20:A9:78
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3331333a3a2f34382d3438203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45:313::/48

    Signature Algorithm: sha256WithRSAEncryption
         29:af:30:c1:0b:9d:6e:ae:ff:79:f8:09:a3:ab:71:0a:30:a8:
         8f:ab:06:66:de:fd:ca:9a:0b:c0:1a:7b:62:74:9c:67:35:ec:
         11:62:78:10:71:4f:d8:49:c3:8d:77:0d:ad:83:c5:58:08:c9:
         bd:a7:d9:2e:81:70:39:a0:0b:8b:4e:9c:ee:83:7c:45:9a:80:
         32:a7:a9:6a:71:4e:fd:7d:28:c7:36:d6:0b:f5:e6:11:cc:b0:
         d5:ca:6f:47:ac:a0:68:b8:a3:39:77:82:08:05:cb:e2:2f:d7:
         32:2a:7c:cb:4d:57:46:f6:f6:a7:7b:14:7a:55:49:3e:e2:01:
         6c:89:b6:55:2c:7e:e0:e9:87:f3:fd:9b:4f:32:48:7b:d4:f3:
         00:a6:82:a4:89:59:09:be:c6:fc:ba:ce:42:48:6a:ec:05:42:
         55:73:8d:43:2d:f4:6d:54:64:b2:00:cc:0f:81:7a:08:65:30:
         1d:c1:40:1e:ed:00:8d:9d:85:28:68:34:c7:2e:8d:84:10:78:
         7a:fe:6b:43:8b:df:86:e6:65:0b:1f:f1:1c:bb:c9:53:93:43:
         31:2b:f5:58:de:81:3e:b0:60:56:85:d7:30:61:49:91:5f:46:
         08:ca:5d:fc:a3:31:51:80:42:b5:d4:05:23:a8:24:29:d3:2c:
         de:47:a9:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:05:35 2024 by rpki-client on console-fra.rpki-client.org