Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31342e302f32342d3234203d3e20323139313431.roa
File:                     3133302e37382e31342e302f32342d3234203d3e20323139313431.roa (raw, json)
Hash identifier:          ZnD8CptKq9uFg2phREGs9jbj24CyljfrzfUGPAi6fAA=
Subject key identifier:   14:1F:B5:F0:A7:AF:FF:3B:51:C3:71:68:EA:17:A2:86:9D:C1:35:1A
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       745382F2779DE6964A6A12E6EF8DC8401B497B6B
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31342e302f32342d3234203d3e20323139313431.roa
Signing time:             Sat 22 Aug 2026 14:32:09 +0000
ROA not before:           Sat 22 Aug 2026 14:27:09 +0000
ROA not after:            Sat 21 Aug 2027 14:32:09 +0000
asID:                     219141
IP address blocks:        130.78.14.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 06:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:53:82:f2:77:9d:e6:96:4a:6a:12:e6:ef:8d:c8:40:1b:49:7b:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Aug 22 14:27:09 2026 GMT
            Not After : Aug 21 14:32:09 2027 GMT
        Subject: CN=141FB5F0A7AFFF3B51C37168EA17A2869DC1351A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b6:0f:7c:16:4e:39:2f:36:19:d4:e2:88:6f:
                    d8:3d:e1:15:c3:7a:3e:e7:cf:ae:68:22:41:52:b4:
                    8e:3b:0f:81:86:5b:1b:91:2b:ce:fa:af:0e:aa:ee:
                    79:14:3d:10:18:b1:d8:1c:30:15:0b:28:19:58:91:
                    23:c4:7f:49:fb:0a:4d:61:de:e6:89:d6:eb:79:75:
                    4b:ef:23:ea:8b:22:39:7c:70:d6:a8:23:59:fa:8a:
                    0e:f3:81:c3:40:9d:98:e9:f3:30:ec:58:11:00:d2:
                    1b:bb:9c:6b:22:b2:11:da:b6:45:1f:e7:08:0d:2f:
                    f9:4f:49:59:99:45:d9:c7:07:27:f7:46:d8:96:64:
                    92:6d:06:d4:68:99:8f:63:da:b6:64:c9:07:71:f7:
                    39:13:f8:c0:0a:c6:57:7f:27:37:ed:7d:15:7d:7d:
                    92:48:d8:3a:91:a4:72:cc:29:44:e5:ba:2d:ca:c7:
                    c8:75:d5:1c:ce:d3:29:91:15:c7:59:d1:bd:1c:c7:
                    d9:41:28:c9:e7:63:1c:72:9b:b2:25:11:3c:d4:cd:
                    ff:61:d6:24:cd:57:e4:a7:13:99:80:57:39:55:ad:
                    29:bd:6c:dc:43:92:16:07:f9:bc:6e:6b:44:d2:87:
                    30:ce:42:6c:0e:e5:76:b7:19:4a:0b:00:aa:86:b6:
                    ce:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:1F:B5:F0:A7:AF:FF:3B:51:C3:71:68:EA:17:A2:86:9D:C1:35:1A
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31342e302f32342d3234203d3e20323139313431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8a:b5:78:e8:62:5b:72:e0:51:5e:dc:7a:74:26:c7:e3:06:63:
         f0:d3:9c:97:37:17:09:d3:29:bc:3d:bd:d5:0b:68:74:2b:f2:
         a0:bd:dc:6a:ac:c7:d8:ef:94:8d:b8:16:90:b5:42:03:22:95:
         e3:d7:19:76:18:b3:d8:3c:27:ee:85:75:bf:87:22:e8:bb:19:
         9d:9f:f3:d1:d9:02:f4:0c:96:5c:7c:3a:9a:52:d5:6f:be:4e:
         c9:43:d3:64:b2:d5:55:7b:74:ce:6e:78:21:51:bc:1a:34:e4:
         e6:99:bb:22:de:d5:2c:dc:4d:20:df:49:76:36:0a:d2:9b:27:
         a2:d6:02:77:63:87:90:c8:9d:6b:76:18:df:9d:d5:3a:c0:5a:
         2c:41:7f:a4:bc:ce:dc:5f:d4:e3:d4:9b:15:5f:1f:8d:f5:1f:
         74:5e:39:c5:23:60:c1:31:58:32:46:b0:00:0b:05:e6:bf:8d:
         dd:1f:29:60:bf:3d:53:1e:91:74:be:29:f0:51:b1:33:82:e4:
         04:1b:9b:9a:49:ae:7b:1b:45:03:65:ca:a4:ba:57:ad:02:9f:
         7d:00:1f:94:bb:30:9d:39:0f:23:89:f7:bf:4c:95:8c:ca:bf:
         12:20:24:f6:fb:58:6c:ff:2b:3f:9d:7c:53:e9:88:4e:c4:44:
         d9:fd:96:08
-----BEGIN CERTIFICATE-----
MIIE3zCCA8egAwIBAgIUdFOC8ned5pZKahLm743IQBtJe2swDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjRiNzRlZDk0MTgzY2MwNmEzNWM5NWM1YjcwOTZiN2Mw
ZWYwNDk0NDAeFw0yNjA4MjIxNDI3MDlaFw0yNzA4MjExNDMyMDlaMDMxMTAvBgNV
BAMTKDE0MUZCNUYwQTdBRkZGM0I1MUMzNzE2OEVBMTdBMjg2OURDMTM1MUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDktg98Fk45LzYZ1OKIb9g94RXD
ej7nz65oIkFStI47D4GGWxuRK876rw6q7nkUPRAYsdgcMBULKBlYkSPEf0n7Ck1h
3uaJ1ut5dUvvI+qLIjl8cNaoI1n6ig7zgcNAnZjp8zDsWBEA0hu7nGsishHatkUf
5wgNL/lPSVmZRdnHByf3RtiWZJJtBtRomY9j2rZkyQdx9zkT+MAKxld/JzftfRV9
fZJI2DqRpHLMKUTlui3Kx8h11RzO0ymRFcdZ0b0cx9lBKMnnYxxym7IlETzUzf9h
1iTNV+SnE5mAVzlVrSm9bNxDkhYH+bxua0TShzDOQmwO5Xa3GUoLAKqGts4pAgMB
AAGjggHpMIIB5TAdBgNVHQ4EFgQUFB+18Kev/ztRw3Fo6heihp3BNRowHwYDVR0j
BBgwFoAUtLdO2UGDzAajXJXFtwlrfA7wSUQwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnBraS1yc3luYy53YXJwbmV0Lnh5ei9yZXBv
L3dhcnBuZXQvMC9CNEI3NEVEOTQxODNDQzA2QTM1Qzk1QzVCNzA5NkI3QzBFRjA0
OTQ0LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvdExkTzJVR0R6QWFqWEpYRnR3
bHJmQTd3U1VRLmNlcjCBhAYIKwYBBQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3lu
YzovL3Jwa2ktcnN5bmMud2FycG5ldC54eXovcmVwby93YXJwbmV0LzAvMzEzMzMw
MmUzNzM4MmUzMTM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzMTM5MzEzNDMx
LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAw
DjAMBAIAATAGAwQAgk4OMA0GCSqGSIb3DQEBCwUAA4IBAQCKtXjoYlty4FFe3Hp0
JsfjBmPw05yXNxcJ0ym8Pb3VC2h0K/KgvdxqrMfY75SNuBaQtUIDIpXj1xl2GLPY
PCfuhXW/hyLouxmdn/PR2QL0DJZcfDqaUtVvvk7JQ9NkstVVe3TObnghUbwaNOTm
mbsi3tUs3E0g30l2NgrSmyei1gJ3Y4eQyJ1rdhjfndU6wFosQX+kvM7cX9Tj1JsV
Xx+N9R90XjnFI2DBMVgyRrAACwXmv43dHylgvz1THpF0vinwUbEzguQEG5uaSa57
G0UDZcqkuletAp99AB+UuzCdOQ8jife/TJWMyr8SICT2+1hs/ys/nXxT6YhOxETZ
/ZYI
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:52:23 2026 by rpki-client