Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333333a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463313a386333333a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          BL4zQH9r8hwpO0dYK+4BmLJqDf9gjE6Ibk8Qj69r7Z8=
Subject key identifier:   7E:46:69:77:1D:BD:F7:F2:B8:44:5E:49:9F:FB:29:EE:24:0A:AD:38
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       448E642575F8A7CB1F9E7B3F034CCC1538D31656
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333333a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 04 Jul 2025 11:17:30 +0000
ROA not before:           Fri 04 Jul 2025 11:12:30 +0000
ROA not after:            Fri 03 Jul 2026 11:17:30 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c33::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:8e:64:25:75:f8:a7:cb:1f:9e:7b:3f:03:4c:cc:15:38:d3:16:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:30 2025 GMT
            Not After : Jul  3 11:17:30 2026 GMT
        Subject: CN=7E4669771DBDF7F2B8445E499FFB29EE240AAD38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:eb:66:a1:48:a3:a1:eb:1b:48:a4:0f:5f:42:
                    e9:58:93:b7:9a:02:e2:31:92:7f:2a:05:ed:f4:78:
                    59:8b:6f:40:38:0e:2c:f3:c8:02:97:85:79:a4:c2:
                    4e:c6:eb:3c:82:13:d1:f7:f5:2d:1b:09:17:92:c7:
                    cb:b4:83:b4:e3:67:de:7d:18:ce:9c:e1:32:f2:47:
                    da:48:b4:27:bb:ff:a4:43:9b:0c:59:02:5f:f0:72:
                    70:fc:36:f7:f7:d0:59:29:2a:a4:aa:de:29:b1:25:
                    30:df:b6:1e:95:7f:e2:a3:50:01:57:c1:42:15:3a:
                    2e:48:70:68:d0:50:d3:d6:f2:f9:03:aa:6c:5f:4e:
                    8b:47:0d:c9:60:b4:f3:38:4b:7a:3a:ce:f2:79:95:
                    8d:0a:56:58:b4:f0:27:66:85:76:02:13:45:40:77:
                    14:8d:96:7e:0f:50:da:dc:0e:4b:43:d8:a8:d5:ba:
                    25:18:50:c6:ed:a3:b8:16:44:0e:15:63:f9:d4:cb:
                    c5:fc:f7:e9:32:a9:32:53:04:b6:db:8b:e9:6b:67:
                    94:3d:83:6a:dd:3e:11:e7:ff:8a:97:d3:ab:fb:d7:
                    5e:fd:c7:ce:44:ad:69:66:80:39:6f:8d:22:35:95:
                    f7:f1:63:d7:e8:e7:db:f9:3e:ab:11:6e:26:a3:0f:
                    71:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:46:69:77:1D:BD:F7:F2:B8:44:5E:49:9F:FB:29:EE:24:0A:AD:38
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386333333a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c33::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:29:dc:a9:cc:49:c2:64:26:4e:37:be:c8:aa:43:89:4d:30:
         f7:af:eb:35:28:09:fb:d1:21:2a:62:cc:98:0e:82:e3:70:cb:
         fa:1f:c7:19:dc:69:19:61:04:06:85:ed:0d:95:af:83:05:24:
         d1:c3:36:c3:ca:2a:32:b9:0d:13:ec:21:d1:05:04:6a:18:87:
         c7:f5:ac:2b:90:c6:50:b5:89:40:70:fc:62:46:62:47:d0:fd:
         a2:3f:c6:7f:da:0b:0e:ef:e4:df:c6:36:27:7a:61:bb:ca:04:
         34:72:a1:22:2c:3d:b6:7c:ab:04:18:85:ad:b1:ac:6c:4a:cd:
         c2:82:e2:2e:8c:95:0a:1b:1b:3c:e9:48:2d:1d:73:34:ae:2a:
         31:b9:00:84:46:fe:41:c3:b4:2e:2b:4f:45:e9:9f:0d:ba:a4:
         cf:59:79:5e:ee:35:77:2c:cd:38:9a:10:a9:b3:e5:8b:3f:72:
         b9:5d:99:b0:fe:e8:fa:9e:c8:86:fb:56:74:ca:21:59:a4:e3:
         86:df:38:1b:d4:8a:74:07:02:00:2d:95:18:f3:0f:0a:7d:b9:
         a2:ea:e6:df:10:68:d8:26:76:36:54:fd:19:06:0c:f3:17:be:
         f4:94:bf:13:29:06:92:24:5d:d8:f4:20:f2:c9:ac:6a:30:ad:
         ab:fb:66:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:34:55 2025 by rpki-client