Route Origin Authorization

$ rpki-client -vvf rpki.cc/repo/MythicalKitten/17/326130373a353463313a386337323a3a2f34382d3438203d3e203630393030.roa
File:                     326130373a353463313a386337323a3a2f34382d3438203d3e203630393030.roa (raw, json)
Hash identifier:          rnFsBLxmZMMdYuGb1DHrq6zkh3A2SREk31DSCcfmtcg=
Subject key identifier:   BE:9D:59:EE:AE:D3:50:0A:04:B1:5C:6E:40:00:3D:28:1B:6F:3C:80
Certificate issuer:       /CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
Certificate serial:       039BD4AD7C36A37B371667E472CA41762310F347
Authority key identifier: 55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20
Authority info access:    rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
Subject info access:      rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386337323a3a2f34382d3438203d3e203630393030.roa
Signing time:             Fri 04 Jul 2025 11:17:31 +0000
ROA not before:           Fri 04 Jul 2025 11:12:31 +0000
ROA not after:            Fri 03 Jul 2026 11:17:31 +0000
asID:                     60900
IP address blocks:        2a07:54c1:8c72::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl
                          rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.mft
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.crl
                          rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/6FF76AC421894FD5CCD6332FA2A9CF330312CEA8.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Jul 2025 03:05:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:9b:d4:ad:7c:36:a3:7b:37:16:67:e4:72:ca:41:76:23:10:f3:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558AB8D1E384C19E265C3C1F40E7F33D970F7120
        Validity
            Not Before: Jul  4 11:12:31 2025 GMT
            Not After : Jul  3 11:17:31 2026 GMT
        Subject: CN=BE9D59EEAED3500A04B15C6E40003D281B6F3C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5f:a0:cf:31:36:87:f4:72:76:2a:c6:11:52:
                    43:d2:9b:0e:a2:61:62:98:87:f5:f2:48:ce:07:14:
                    f7:10:6a:c3:3e:75:12:e4:72:26:e1:64:ce:41:ee:
                    b2:6c:d0:c6:8c:ee:68:8e:74:29:06:61:69:7f:a4:
                    d5:c3:cd:1a:ab:2e:e0:5d:96:a0:49:71:5d:55:c6:
                    fb:86:52:8b:9f:52:2b:1b:74:25:37:4b:24:51:28:
                    dc:15:2c:c5:a6:b3:75:d6:16:fb:aa:08:dd:b9:79:
                    fe:84:91:2d:d0:f6:99:76:ac:81:96:0b:f6:df:2e:
                    3a:75:d1:76:06:7a:22:97:74:b8:b2:8f:dc:45:03:
                    c1:ab:35:3f:f0:85:34:3a:82:85:a5:c3:40:87:f8:
                    7c:0b:f9:c9:fa:56:49:fd:c4:b5:0e:ef:67:a2:98:
                    f9:db:ec:6e:d8:eb:78:f5:ad:58:f2:d2:b6:b6:d3:
                    0f:53:ef:5c:de:43:6e:54:0d:6a:87:16:14:be:99:
                    d3:76:3f:73:03:7d:27:30:cc:90:b3:30:0c:40:79:
                    32:40:a8:76:b5:ba:73:f6:82:2a:0e:a1:ba:eb:23:
                    5c:2d:af:6c:60:f6:12:ec:59:94:96:5b:7c:01:d2:
                    19:c5:df:97:32:74:b8:55:c9:5e:86:33:21:e1:03:
                    d5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:9D:59:EE:AE:D3:50:0A:04:B1:5C:6E:40:00:3D:28:1B:6F:3C:80
            X509v3 Authority Key Identifier:
                keyid:55:8A:B8:D1:E3:84:C1:9E:26:5C:3C:1F:40:E7:F3:3D:97:0F:71:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.cc/repo/MythicalKitten/17/558AB8D1E384C19E265C3C1F40E7F33D970F7120.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/4/558AB8D1E384C19E265C3C1F40E7F33D970F7120.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.cc/repo/MythicalKitten/17/326130373a353463313a386337323a3a2f34382d3438203d3e203630393030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a07:54c1:8c72::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:70:14:eb:06:67:ef:15:a0:47:a8:de:2e:c9:e1:f8:c1:9a:
         ec:bb:a2:4c:4b:1e:a9:b8:b7:16:82:b4:09:ed:4b:83:28:dd:
         6b:7a:65:a8:46:be:f7:53:ea:f6:ac:ae:1e:47:45:3d:f3:f9:
         60:0b:8f:7c:b8:2f:2e:31:8f:11:df:a6:e4:f9:bd:e6:e3:e0:
         74:6d:17:33:58:df:fd:60:3e:33:85:cf:59:ae:64:04:77:30:
         c5:75:14:41:d9:24:39:ff:5d:cc:ef:1c:c8:01:d0:56:27:b9:
         23:26:c0:b9:c7:50:e4:11:0e:fe:7c:74:c6:77:e7:1b:84:2b:
         86:e3:ac:5a:28:27:0c:66:22:d4:2f:a7:87:fa:20:60:94:41:
         ab:d4:a0:d0:a9:21:7f:33:da:4e:84:22:68:ac:c7:1f:3b:35:
         60:ea:5d:df:83:d1:38:3f:39:ab:7a:af:d0:f2:0c:eb:7b:51:
         da:0a:dd:c8:3d:64:3a:a8:fc:fd:52:08:38:a9:c7:cb:04:d3:
         bf:b6:ff:25:b8:00:c5:c6:70:61:d6:53:0e:1d:d6:e8:98:5a:
         c7:65:6a:48:2f:0b:2e:f8:33:f2:66:3e:06:8d:77:ce:c8:04:
         92:b6:61:4d:c7:64:62:a8:1b:46:89:11:ef:93:41:4d:0a:70:
         c1:48:02:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 5 15:34:54 2025 by rpki-client