Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31312e302f32342d3234203d3e20323135313333.roa
File:                     3133302e37382e31312e302f32342d3234203d3e20323135313333.roa (raw, json)
Hash identifier:          18S/qY939SwlJdPA7nAsDH/WX/yrf6ATJdT7WJHqJJY=
Subject key identifier:   A0:30:14:D6:60:DF:08:85:49:A5:5F:97:3B:D5:4F:06:F7:2A:94:78
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       6CC107FBBF2C1B146A5C2E9E623AEF2FEBECDAB3
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31312e302f32342d3234203d3e20323135313333.roa
Signing time:             Sat 24 Oct 2026 08:05:18 +0000
ROA not before:           Sat 24 Oct 2026 08:00:18 +0000
ROA not after:            Sat 23 Oct 2027 08:05:18 +0000
asID:                     215133
IP address blocks:        130.78.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c1:07:fb:bf:2c:1b:14:6a:5c:2e:9e:62:3a:ef:2f:eb:ec:da:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Oct 24 08:00:18 2026 GMT
            Not After : Oct 23 08:05:18 2027 GMT
        Subject: CN=A03014D660DF088549A55F973BD54F06F72A9478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b9:0a:91:78:70:72:8d:d7:87:54:4b:83:90:
                    4b:56:8f:46:45:f9:48:9e:03:99:6c:e5:15:70:f8:
                    2a:bb:b3:84:c2:2c:0b:53:a3:8e:1e:f4:c8:ce:1a:
                    e2:c6:f0:f2:2e:cf:91:c2:67:c9:65:a8:91:56:4d:
                    0e:a9:f6:df:cd:1b:25:83:4e:3e:e4:0c:66:19:cc:
                    c4:1e:b0:64:cf:88:db:dc:14:d6:be:59:f2:9b:a1:
                    15:0a:1f:5b:f2:86:d7:3c:58:7d:96:cb:e1:8a:ea:
                    cf:0c:f1:0d:3d:89:74:97:64:51:bc:0b:1a:ad:40:
                    31:5f:d8:1a:8a:23:21:2a:f3:af:fe:c1:d4:2e:fc:
                    ff:ca:ce:5b:bf:6d:36:af:a6:dc:a2:49:f9:c3:10:
                    45:59:d2:6d:ed:67:55:dd:fe:07:a3:f5:06:36:22:
                    a5:40:d5:07:90:d9:68:f6:8c:97:21:06:d7:28:1a:
                    ec:c8:eb:3c:a6:fa:65:4c:7a:f8:75:a0:59:76:80:
                    f2:c0:5b:8a:d5:45:d3:8d:89:7a:56:f9:d2:c4:cc:
                    9c:d7:1c:b5:a7:62:42:32:22:c2:95:58:24:7b:79:
                    d5:02:a0:79:49:b2:e3:26:f6:15:bb:3e:48:1a:47:
                    2a:ff:22:d3:54:68:87:1c:00:f8:bc:62:fd:2c:2b:
                    4d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:30:14:D6:60:DF:08:85:49:A5:5F:97:3B:D5:4F:06:F7:2A:94:78
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31312e302f32342d3234203d3e20323135313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.11.0/24

    Signature Algorithm: sha256WithRSAEncryption
         84:19:27:a1:17:30:8d:2b:79:b8:55:5c:c3:c3:00:84:5c:48:
         7b:89:be:e8:4c:67:13:65:5a:9f:e8:61:61:d7:11:05:93:d0:
         03:48:36:5f:95:82:d8:6c:57:59:6c:df:38:a0:f7:c2:27:3f:
         60:23:a0:e2:d3:97:fd:c5:94:1b:10:87:84:85:75:61:ba:9e:
         ab:8b:45:8e:92:61:12:b2:19:16:6b:d2:80:b6:54:3a:4b:ef:
         af:06:51:56:89:d3:c0:d3:00:a6:c2:f7:92:ae:0a:96:67:68:
         bf:a1:8b:3c:dd:a5:18:68:4a:4a:b7:4f:b3:f8:25:30:e3:cd:
         cf:36:ed:8b:d7:55:0f:de:71:bd:b0:45:67:7f:f9:52:1b:25:
         a7:7c:1f:1f:e8:85:c8:23:09:e6:0d:b8:26:fd:ba:28:89:3e:
         51:c4:c7:00:f0:ab:7a:e6:c9:18:c2:7a:ea:fd:6e:a9:74:b7:
         e2:68:f4:63:27:80:7c:5a:ee:3b:a4:15:78:21:05:d4:ec:4b:
         db:d6:b1:47:8e:0c:e5:95:41:6e:20:d7:8a:31:c9:c6:ce:98:
         b6:d5:7b:18:8b:b5:ee:b4:05:97:37:91:dd:41:70:8d:41:75:
         d0:e1:f4:76:02:6b:a0:f4:25:0c:0d:6f:ce:98:b4:c1:ff:9f:
         08:76:a4:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 13:15:12 2026 by rpki-client