Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31322e302f32342d3234203d3e203633303233.roa
File:                     3133302e37382e31322e302f32342d3234203d3e203633303233.roa (raw, json)
Hash identifier:          VNOyJXTocalzHrXqYgxO+D3hkqKs3pbrWFVuzxes8a0=
Subject key identifier:   9B:ED:7A:62:E2:84:71:FB:C2:E9:E7:2C:43:DF:78:A9:20:EC:D7:2F
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       79674A10EE768DFAEB9A83F17A7CE63265C1DE4D
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31322e302f32342d3234203d3e203633303233.roa
Signing time:             Fri 21 Aug 2026 13:56:05 +0000
ROA not before:           Fri 21 Aug 2026 13:51:05 +0000
ROA not after:            Fri 20 Aug 2027 13:56:05 +0000
asID:                     63023
IP address blocks:        130.78.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 06:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:67:4a:10:ee:76:8d:fa:eb:9a:83:f1:7a:7c:e6:32:65:c1:de:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Aug 21 13:51:05 2026 GMT
            Not After : Aug 20 13:56:05 2027 GMT
        Subject: CN=9BED7A62E28471FBC2E9E72C43DF78A920ECD72F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5f:d6:23:3f:97:4e:64:9f:3f:eb:69:a9:2f:
                    5e:fc:97:19:fe:67:9a:d7:81:c2:9b:70:88:d4:ed:
                    12:61:90:a1:79:3b:b7:da:7a:df:ef:63:95:9f:2e:
                    5f:48:03:67:af:f4:ad:4f:7c:cd:b8:e8:d0:5e:ff:
                    a1:0b:e3:b1:ff:1b:7c:8d:75:c8:41:b1:85:ad:96:
                    26:e3:1e:c1:3a:d0:fe:cd:9c:81:fc:5c:0b:65:d5:
                    5c:ff:06:56:ce:92:30:13:b9:4c:8b:c3:14:91:1f:
                    45:64:c5:6c:59:2b:0b:69:5b:e4:e1:03:26:e1:a1:
                    07:7f:35:a8:b4:3b:3b:bf:ad:11:d8:58:fd:2a:a4:
                    67:3d:fe:0b:de:7c:1a:b5:0b:56:63:02:17:7b:b4:
                    5c:d2:ed:8f:ac:f7:5c:64:a7:ee:72:2b:40:4e:05:
                    50:5b:c2:3d:ed:8f:07:40:05:fe:aa:05:a5:97:9b:
                    6b:2a:45:6b:f3:2f:a9:08:49:0b:d0:97:c0:7a:bc:
                    9b:50:2c:c8:21:3c:4f:63:bb:ee:ba:3c:ad:c5:32:
                    85:68:97:af:fc:b7:3f:68:f5:e0:83:27:e9:ff:4e:
                    ee:25:9b:21:b0:1b:56:88:c0:42:97:50:55:d1:d0:
                    67:2e:d5:a6:be:7c:8d:42:aa:73:3a:5e:ec:60:c8:
                    fc:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:ED:7A:62:E2:84:71:FB:C2:E9:E7:2C:43:DF:78:A9:20:EC:D7:2F
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31322e302f32342d3234203d3e203633303233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:85:6d:69:d6:51:ca:24:ea:b1:87:48:a7:0e:ec:2b:92:0d:
         b5:e0:e7:bb:0f:8e:33:60:7a:ec:a6:b8:6f:7f:46:48:36:84:
         ac:d3:12:35:30:69:67:0e:8c:a8:5a:57:03:38:d2:b8:32:05:
         2b:3e:0f:23:b9:42:be:87:35:a9:06:63:ab:5b:52:29:cb:e5:
         88:76:da:34:c3:1e:ec:f6:d7:1f:b1:e0:b5:fa:7e:14:04:9f:
         07:f0:1d:4c:57:3e:9a:ac:85:64:bc:23:bd:54:07:f7:34:2f:
         16:ed:8f:dc:5a:18:d9:4b:ad:0d:e3:25:08:22:74:01:08:c6:
         5c:4f:db:03:60:ce:e6:fd:ab:da:35:59:ed:9d:07:ed:96:2d:
         11:65:91:13:89:10:5a:91:d3:e5:4a:e8:8d:00:39:c8:ac:58:
         27:91:da:76:21:c9:84:85:dd:04:91:94:eb:20:c1:01:ec:68:
         7e:5c:a7:2b:07:87:28:0b:9c:98:ba:18:69:de:ff:20:f7:90:
         1c:c2:de:7a:5e:8d:43:be:32:0b:92:05:f4:f0:62:28:25:e6:
         7f:a3:26:39:5c:db:de:27:87:23:55:dc:3a:6d:f1:25:7f:70:
         43:68:3d:54:5f:57:69:9f:4d:9d:84:51:ef:d5:1e:b3:c2:c5:
         d5:31:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:52:16 2026 by rpki-client