Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31302e302f32342d3234203d3e203438353339.roa
File:                     3133302e37382e31302e302f32342d3234203d3e203438353339.roa (raw, json)
Hash identifier:          t7R7fn6sQZ8dE0yphNBVvVLYtIYBd++sg0XqMs+6Wks=
Subject key identifier:   5E:38:B7:9B:92:EE:E6:94:A8:7D:5A:AD:9D:75:9D:40:17:58:52:45
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       237C4914226E7E08DCE3560E8954C85EF72BFDC6
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31302e302f32342d3234203d3e203438353339.roa
Signing time:             Sat 08 Aug 2026 07:11:29 +0000
ROA not before:           Sat 08 Aug 2026 07:06:29 +0000
ROA not after:            Sat 07 Aug 2027 07:11:29 +0000
asID:                     48539
IP address blocks:        130.78.10.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 06:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:7c:49:14:22:6e:7e:08:dc:e3:56:0e:89:54:c8:5e:f7:2b:fd:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Aug  8 07:06:29 2026 GMT
            Not After : Aug  7 07:11:29 2027 GMT
        Subject: CN=5E38B79B92EEE694A87D5AAD9D759D4017585245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ec:41:b7:ee:49:5c:cd:54:81:65:18:0f:93:
                    32:78:e3:0e:fd:4a:98:a2:43:3b:f3:e6:5a:f8:94:
                    c4:d6:c6:69:e8:07:73:9f:2b:08:e9:32:2a:48:59:
                    b0:1a:06:f3:28:94:9e:d8:d2:cb:76:fa:d6:fe:c6:
                    fb:fa:d2:cc:de:11:a7:c1:68:07:42:94:39:8c:d2:
                    0f:63:83:83:65:70:ea:44:b9:6d:d4:b6:c3:81:ff:
                    f7:29:f2:d8:b7:37:77:1f:0a:09:a6:47:7c:3e:80:
                    b2:48:5e:da:a2:94:76:ea:5b:2c:af:5a:9b:2a:d6:
                    43:9b:e4:69:8d:dc:18:7a:e6:5e:ee:3e:72:7f:05:
                    f3:1d:05:c1:73:96:29:ac:4b:a2:ef:b6:3b:37:72:
                    b6:18:26:54:d6:c5:43:4a:3a:24:bf:ae:05:a8:08:
                    68:7d:1c:c2:2c:af:cd:26:af:08:56:d1:93:12:82:
                    39:ea:34:0c:1a:d2:91:d3:75:c3:95:ec:51:d1:a9:
                    fb:9f:ed:f4:a6:dc:2b:2b:63:83:d7:27:7e:f9:a5:
                    d6:e8:aa:94:b2:9b:ff:a3:a1:45:0b:1b:f0:c2:58:
                    b6:99:89:6f:f5:70:6e:cb:e4:ec:e6:61:fc:29:de:
                    b0:8c:ab:7e:80:3b:44:1a:77:be:57:bd:e4:83:73:
                    dd:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:38:B7:9B:92:EE:E6:94:A8:7D:5A:AD:9D:75:9D:40:17:58:52:45
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31302e302f32342d3234203d3e203438353339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         af:7f:a1:61:38:bc:3f:91:2a:d3:5b:6c:1a:04:cd:83:e7:df:
         b3:e5:5b:2b:84:12:34:43:ff:ab:8d:d9:e7:3b:e0:53:86:f1:
         2f:20:fd:8e:90:bb:ea:86:9a:60:17:d9:c3:ff:b0:80:1b:61:
         5f:6b:00:8c:26:da:28:17:95:b0:dc:af:ac:b4:ff:77:d5:1c:
         28:cd:46:41:11:e0:b5:f2:5c:a0:9a:12:ab:b9:84:2b:11:1a:
         85:21:36:4b:b6:dc:88:dd:d2:78:e1:5b:07:5c:ad:ba:17:b7:
         a9:67:90:63:3f:83:d1:b1:96:38:0c:4e:e7:3f:87:7c:e4:f6:
         2b:c3:e1:c8:4b:4f:ee:be:9d:03:2d:ac:c8:4d:48:6a:6e:f5:
         77:38:3d:11:75:a3:b2:51:ed:18:c4:05:50:2b:c7:1e:ae:a0:
         02:c6:a5:8f:65:9c:0e:f4:2d:e0:98:fb:58:43:ca:e4:58:7f:
         31:60:db:f4:af:7c:0a:6b:be:d8:24:7f:a7:f3:26:6a:b0:35:
         71:57:ba:54:7a:31:8a:0c:35:23:2a:0f:86:d4:a9:35:e0:f3:
         d4:83:4d:d1:b0:fc:c6:b3:3e:9c:d2:8b:ad:e4:29:42:7f:a0:
         5b:98:60:0c:a4:17:94:3f:f9:4a:31:63:3f:56:1f:12:47:cf:
         8d:7a:d8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:52:19 2026 by rpki-client