Route Origin Authorization

$ rpki-client -vvf krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa
File:                     326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa (raw, json)
Hash identifier:          Eg5srRiirzi2SKwG4qxjpV15+yKIPOzSmbyRqjnR5WA=
Subject key identifier:   75:4D:60:F3:22:74:4A:E2:E0:19:10:A5:4F:75:74:8E:48:38:D2:FB
Certificate issuer:       /CN=ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40
Certificate serial:       68B3897DDB2D49469437149B64CF652D77D1D0AC
Authority key identifier: AB:C3:F3:F2:57:AB:62:A5:C3:E4:FF:B5:FC:64:C5:D2:DF:7E:AD:40
Authority info access:    rsync://rpki.cc/repo/MythicalKitten/18/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.cer
Subject info access:      rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa
Signing time:             Sat 05 Jul 2025 22:19:10 +0000
ROA not before:           Sat 05 Jul 2025 22:14:10 +0000
ROA not after:            Sat 04 Jul 2026 22:19:10 +0000
asID:                     199177
IP address blocks:        2a05:dfc1:1fd0::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.crl
                          rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.mft
                          rsync://rpki.cc/repo/MythicalKitten/18/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.cer
                          rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.crl
                          rsync://rpki.cc/repo/MythicalKitten/18/1C55B4B3B81DE68079381C019FA0C6BB51860388.mft
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/1C55B4B3B81DE68079381C019FA0C6BB51860388.cer
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.crl
                          rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/4/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.mft
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/8FC3CFB5DF3E8F721C08B8B5FE7F61D67B0BE13B.cer
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/7/D14B6FCF2B2C69BE085E9F959872DCBE8EA54177.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0Utvzyssab4IXp-VmHLcvo6lQXc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Jul 2025 21:05:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:b3:89:7d:db:2d:49:46:94:37:14:9b:64:cf:65:2d:77:d1:d0:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40
        Validity
            Not Before: Jul  5 22:14:10 2025 GMT
            Not After : Jul  4 22:19:10 2026 GMT
        Subject: CN=754D60F322744AE2E01910A54F75748E4838D2FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:11:3d:50:cd:7b:e9:a4:85:4a:d9:81:99:aa:
                    4d:a7:ac:5e:18:47:ea:7b:ca:ce:c1:75:19:5f:16:
                    28:5d:19:f5:3b:3f:31:0a:ed:6e:09:fc:40:e1:86:
                    33:5b:e6:13:55:f9:8b:3d:44:5c:a1:92:a3:e9:a0:
                    76:44:40:e5:91:9b:87:b7:c8:77:f5:8f:24:d9:b2:
                    6e:75:47:5b:d7:cf:c5:45:a6:72:55:b4:1a:bc:6c:
                    76:41:a7:31:84:2b:77:38:f1:86:4c:bb:20:7a:d0:
                    d6:99:54:0e:2a:40:9e:d2:ad:fb:6c:5e:ac:19:91:
                    98:5f:b7:a5:6a:b1:5f:27:22:b8:a9:ac:b9:f8:ea:
                    25:17:39:62:7a:56:18:05:8c:a8:d8:5e:48:dc:3f:
                    b3:36:6e:e9:33:e4:c2:a8:b4:70:87:f2:d0:5e:5b:
                    8b:b5:c7:28:18:58:6e:55:58:90:98:f0:30:e5:86:
                    1c:9b:72:0b:23:ea:1d:79:ff:eb:49:3a:a4:dc:d8:
                    88:bc:ea:52:bf:77:c8:dd:0f:d5:c8:4f:dd:61:1b:
                    50:5f:71:72:06:8b:c7:ed:60:c7:74:fe:fb:26:ea:
                    e3:7d:0c:3a:ce:6c:ec:08:3f:a1:43:9f:90:6b:66:
                    7f:0f:ef:7d:ba:27:cf:9f:41:66:0f:fe:05:04:17:
                    67:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:4D:60:F3:22:74:4A:E2:E0:19:10:A5:4F:75:74:8E:48:38:D2:FB
            X509v3 Authority Key Identifier:
                keyid:AB:C3:F3:F2:57:AB:62:A5:C3:E4:FF:B5:FC:64:C5:D2:DF:7E:AD:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.cc/repo/MythicalKitten/18/ABC3F3F257AB62A5C3E4FFB5FC64C5D2DF7EAD40.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.ca-bc-01.ssmidge.xyz/repo/AS199177/1/326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a05:dfc1:1fd0::/44

    Signature Algorithm: sha256WithRSAEncryption
         80:00:9c:5f:22:81:0c:b1:2a:cf:55:3f:78:64:6f:6e:fd:00:
         4f:15:00:e3:34:77:84:a7:4f:2d:ad:bc:98:10:ba:c6:d7:f9:
         c9:10:b1:f5:50:45:4d:5c:55:bb:c0:ab:a2:29:b8:8e:a6:84:
         c2:2e:7c:c4:48:a6:7c:c7:71:0f:1b:3f:00:e2:64:5b:c7:df:
         70:bc:99:0a:eb:5b:37:47:57:d7:2e:56:1d:51:8b:26:b1:14:
         aa:66:fb:cc:1b:0f:ce:c1:ab:7c:aa:3d:c8:ec:34:73:64:34:
         0b:ee:d2:07:20:ad:7a:e1:3d:2a:28:b6:f9:11:04:68:9b:94:
         e5:74:b1:4a:28:9a:1c:b1:65:be:e2:de:76:fb:76:7b:18:3c:
         f4:ec:dc:cc:1b:e7:c1:da:26:55:e7:da:01:b8:0c:ac:b6:fe:
         4f:d1:74:29:ac:5e:04:93:ac:3c:b8:ce:05:8c:87:45:55:2f:
         c0:cf:ab:91:b8:43:4c:de:62:cb:fb:ff:c4:fc:5f:6a:6b:f7:
         41:3c:b7:85:71:c0:8c:8e:c4:97:c3:e4:90:8a:04:08:32:5d:
         4f:cf:84:bd:6f:17:6f:d3:a2:d4:38:c7:93:e3:1d:36:21:a2:
         da:cc:5b:b4:47:31:90:6a:98:bc:16:8d:b6:c1:12:9b:89:69:
         7e:d3:3e:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 26 11:49:12 2025 by rpki-client