Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31352e302f32342d3234203d3e20323139303035.roa
File:                     3133302e37382e31352e302f32342d3234203d3e20323139303035.roa (raw, json)
Hash identifier:          wnPwqDCfB46IHQUDts1pn6fP80oOUpJS4G692sCcDSw=
Subject key identifier:   9E:C3:A5:61:40:A8:BA:4D:8C:33:CC:E0:4E:64:90:E1:F6:32:FA:36
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       59C0B888F7B555434140B182092C361296615FAA
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31352e302f32342d3234203d3e20323139303035.roa
Signing time:             Mon 17 Aug 2026 17:53:04 +0000
ROA not before:           Mon 17 Aug 2026 17:48:04 +0000
ROA not after:            Mon 16 Aug 2027 17:53:04 +0000
asID:                     219005
IP address blocks:        130.78.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 06:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c0:b8:88:f7:b5:55:43:41:40:b1:82:09:2c:36:12:96:61:5f:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Aug 17 17:48:04 2026 GMT
            Not After : Aug 16 17:53:04 2027 GMT
        Subject: CN=9EC3A56140A8BA4D8C33CCE04E6490E1F632FA36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3b:ae:08:09:4d:0d:89:3a:53:a1:d2:ac:83:
                    ea:e5:ee:96:66:61:e3:89:23:98:8c:ff:e7:e4:9d:
                    b3:d1:8a:66:58:a2:d7:d9:17:fc:02:64:22:8c:62:
                    45:f3:a1:bf:1f:f5:e8:a6:00:85:f3:61:ae:2b:7e:
                    6d:5a:b5:52:aa:a8:17:a7:34:fa:1d:0c:37:f9:23:
                    00:6c:69:94:4f:ff:61:36:a3:f1:b1:e1:02:c6:0d:
                    96:86:00:45:b1:70:ef:45:d6:66:0d:a2:54:e8:67:
                    38:c9:c9:24:e0:88:61:37:a5:1e:ee:68:c3:f2:ab:
                    c7:c7:c0:de:1a:dc:59:cb:aa:9e:be:23:5c:5b:85:
                    f5:61:19:af:11:56:e5:e6:ae:fa:2d:4c:73:44:39:
                    51:b0:ef:23:23:33:b5:cf:46:22:d9:1e:98:7d:ca:
                    ea:94:c5:0d:ee:b4:69:4a:7c:64:9b:e3:0b:1d:22:
                    21:8a:3f:82:cc:42:4c:4d:50:a2:32:d7:b4:44:79:
                    a1:5f:73:b4:dd:39:2e:de:95:98:23:f5:a7:84:ee:
                    63:2f:0c:57:fd:d8:bf:d0:15:9a:59:d5:3d:e9:5b:
                    95:0f:61:67:b7:e9:cc:cf:02:04:ae:5d:89:6a:84:
                    18:91:82:fe:1d:bb:5e:7b:6f:48:ed:8d:db:2b:15:
                    43:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:C3:A5:61:40:A8:BA:4D:8C:33:CC:E0:4E:64:90:E1:F6:32:FA:36
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31352e302f32342d3234203d3e20323139303035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:f7:e3:44:a4:3f:08:27:3a:2f:70:6a:74:be:4e:10:0c:d7:
         e8:e8:32:45:c8:59:93:55:47:77:7f:30:71:28:aa:95:d5:a8:
         ba:47:ca:5a:aa:4e:76:35:98:a7:d6:5d:60:75:b2:0c:7f:82:
         58:89:7e:47:3f:3c:af:e5:0d:de:b2:2b:80:c3:a1:fd:50:35:
         7e:9e:88:0d:47:9c:31:3f:26:e5:b1:84:10:b0:bb:34:27:bb:
         3d:e0:01:23:23:3a:cc:2a:56:cd:b5:0c:b7:55:52:85:7f:eb:
         ef:01:1b:26:58:42:16:e9:6f:17:95:1d:33:93:90:7c:72:7c:
         c9:39:03:77:ad:40:04:58:4d:e4:87:e0:e3:b8:4b:67:6d:53:
         c7:c4:62:8b:04:c7:c3:95:3b:ce:08:dc:12:05:55:30:24:51:
         11:8a:82:cd:19:30:83:85:34:35:37:74:ab:30:60:b1:68:0a:
         83:c7:c2:b6:da:05:e0:52:6f:f0:f3:ab:fd:b9:cd:83:ff:8b:
         47:49:43:57:9c:7b:a5:a5:04:4c:ae:e5:9c:92:2b:ee:94:6e:
         96:5d:07:f2:08:af:9c:ea:8d:3d:0b:7a:44:04:cb:bf:b9:49:
         c7:09:25:15:d3:eb:d4:92:37:af:e8:14:92:97:59:61:74:a7:
         cb:5a:36:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 17:52:13 2026 by rpki-client