Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/15/326131343a366634353a3a2f34302d3430203d3e203530323234.roa
File:                     326131343a366634353a3a2f34302d3430203d3e203530323234.roa (raw, json)
Hash identifier:          DfSBu+zwhxzfs8SXhYf7V+M4/IhUrKkmdfcWCmiFJIU=
Subject key identifier:   AC:2B:59:5C:8E:EC:F8:D4:BE:D5:23:2C:F8:78:B3:6B:B8:32:AD:7F
Certificate issuer:       /CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
Certificate serial:       1AC32D10E2464F968A44357A671F23A0D0F5595F
Authority key identifier: 04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3a2f34302d3430203d3e203530323234.roa
Signing time:             Fri 16 Aug 2024 14:36:33 +0000
ROA not before:           Fri 16 Aug 2024 14:31:33 +0000
ROA not after:            Fri 15 Aug 2025 14:36:33 +0000
asID:                     50224
IP address blocks:        2a14:6f45::/40 maxlen: 40

Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl
                          rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:c3:2d:10:e2:46:4f:96:8a:44:35:7a:67:1f:23:a0:d0:f5:59:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04C92D9B1C8307B70C47290166D5989CEFABDCC4
        Validity
            Not Before: Aug 16 14:31:33 2024 GMT
            Not After : Aug 15 14:36:33 2025 GMT
        Subject: CN=AC2B595C8EECF8D4BED5232CF878B36BB832AD7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:38:43:9f:a4:07:72:7a:bc:2b:0f:f5:9c:7d:
                    83:cb:e3:ab:21:28:7a:00:54:70:94:d1:f9:37:c1:
                    ac:8d:ce:2b:66:8e:6d:26:02:01:50:32:57:07:a9:
                    aa:81:50:de:5c:1e:6c:81:19:a5:07:a8:2b:05:5b:
                    de:6d:41:1c:bc:1b:93:a0:5c:8f:dc:dc:55:96:18:
                    c8:df:f2:f0:85:72:96:5f:8e:23:79:47:fe:20:ef:
                    d0:71:3a:52:d0:c8:ba:18:a6:8b:3d:08:e8:5a:15:
                    1e:eb:84:51:63:e3:79:38:37:8e:f2:6b:a4:7d:a2:
                    1a:fa:05:a3:83:5b:ac:5a:98:20:bf:d9:d8:81:f0:
                    e2:35:1e:00:f7:80:81:1e:69:ab:3a:f7:b8:0a:39:
                    7e:e0:c2:ca:35:1c:9b:12:57:75:5b:a8:e2:89:ec:
                    80:e0:ba:c0:9e:82:39:bd:d8:90:2a:d6:3d:71:88:
                    8f:28:1d:42:59:e3:7f:58:13:61:26:c9:11:d0:a7:
                    71:b4:0b:1e:d6:c2:f3:5a:87:a8:80:66:75:1c:1a:
                    e0:47:50:47:24:bb:dc:23:dd:59:d2:98:e7:ca:f9:
                    4a:91:6c:58:74:54:6b:48:de:1b:46:6e:c7:9d:58:
                    4b:83:87:ee:cc:4e:8a:4a:57:8d:d5:91:25:f6:33:
                    e7:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:2B:59:5C:8E:EC:F8:D4:BE:D5:23:2C:F8:78:B3:6B:B8:32:AD:7F
            X509v3 Authority Key Identifier:
                keyid:04:C9:2D:9B:1C:83:07:B7:0C:47:29:01:66:D5:98:9C:EF:AB:DC:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/15/04C92D9B1C8307B70C47290166D5989CEFABDCC4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/04C92D9B1C8307B70C47290166D5989CEFABDCC4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/15/326131343a366634353a3a2f34302d3430203d3e203530323234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a14:6f45::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:a9:f9:1e:85:98:4f:39:c0:b7:c4:5e:ce:dc:6f:35:3b:91:
         35:83:f6:aa:f5:6d:d3:01:9a:34:03:47:c7:97:b0:3d:56:d8:
         0e:b7:3c:8f:6e:1b:ed:52:16:3f:af:eb:32:e2:42:da:81:a1:
         b7:45:46:06:52:3b:ba:fc:42:c0:09:28:26:c5:56:be:6a:31:
         ba:82:d8:6c:e3:a2:25:47:71:9e:f8:5f:1b:f3:9a:81:aa:00:
         74:c5:a9:9e:e6:ec:fb:1c:2b:e9:f1:31:27:7a:67:8c:d7:18:
         be:3f:a7:40:ed:26:6e:3c:64:e4:f1:67:89:30:6e:2f:5b:b8:
         e6:da:6c:fe:85:3b:80:b0:6d:22:97:17:5e:39:c9:fd:a1:47:
         25:10:79:af:b9:45:a3:92:c8:10:3a:af:f4:54:e9:9e:97:56:
         01:d3:ae:10:12:22:3f:fe:c6:0a:ee:ab:0f:c0:c2:80:da:d1:
         57:b1:d6:47:96:87:47:31:e5:7d:ae:c5:70:a6:70:5c:bb:ca:
         7b:bb:c8:e3:b8:e9:a8:8a:ad:70:65:72:84:27:53:c0:09:c9:
         64:29:e2:5a:55:21:e4:0d:95:cb:c6:84:26:2b:59:8f:13:8a:
         fd:c0:f9:fb:f8:8f:04:35:0f:b0:67:82:8d:11:b0:bb:f3:5f:
         b8:f5:f4:2f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:05:36 2024 by rpki-client on console-fra.rpki-client.org