Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31372e302f32342d3234203d3e20323138363631.roa
File:                     3133302e37382e31372e302f32342d3234203d3e20323138363631.roa (raw, json)
Hash identifier:          X9Yzb+NZNNI1l62NkCNcqsbX0XnrKS4/WrakbubPXyw=
Subject key identifier:   7A:EF:4B:91:9B:05:8E:A4:BD:C3:C3:9E:F2:24:8E:5F:E9:9F:9B:70
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       1B65165C6CB75DB7E7F99BE9FD08EC7FFA4956F0
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31372e302f32342d3234203d3e20323138363631.roa
Signing time:             Thu 01 Oct 2026 18:14:34 +0000
ROA not before:           Thu 01 Oct 2026 18:09:34 +0000
ROA not after:            Thu 30 Sep 2027 18:14:34 +0000
asID:                     218661
IP address blocks:        130.78.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 05:29:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:65:16:5c:6c:b7:5d:b7:e7:f9:9b:e9:fd:08:ec:7f:fa:49:56:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Oct  1 18:09:34 2026 GMT
            Not After : Sep 30 18:14:34 2027 GMT
        Subject: CN=7AEF4B919B058EA4BDC3C39EF2248E5FE99F9B70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:f7:21:d2:87:cd:3e:8b:a3:49:f3:95:e6:92:
                    ce:5e:2d:d6:6c:cc:6c:1a:96:d5:4d:cf:52:7b:25:
                    47:a5:7b:6c:88:2b:0b:70:d0:39:08:f7:7d:4b:88:
                    16:30:92:9d:9e:f0:9e:67:6d:97:59:82:73:d7:f1:
                    20:43:5d:1a:45:db:d9:ea:7f:4f:95:b0:ba:a2:ff:
                    eb:24:88:e5:38:b5:64:0f:e7:12:04:98:95:96:de:
                    a5:14:4e:e4:3b:1b:3b:34:47:74:bc:27:3b:bf:4b:
                    a8:42:91:2e:76:23:8a:ef:3a:21:fa:1a:e1:8c:cf:
                    1e:96:fc:b6:04:85:17:5b:ff:62:c5:43:9e:09:a4:
                    26:ac:cd:23:ca:4b:03:77:8a:7a:8b:d7:3c:64:03:
                    bc:a8:9a:fd:c7:10:fc:62:c0:2e:87:1e:84:ef:d1:
                    2b:10:ee:be:e5:4c:64:94:7c:f7:71:0e:d1:fd:32:
                    2f:1c:a1:df:87:bd:6e:58:34:0b:bb:3d:c1:f5:ab:
                    ae:4a:38:f6:44:ea:55:97:0e:6b:61:94:3d:98:d4:
                    07:fa:46:24:10:d1:37:ca:0b:7f:cf:f7:df:20:98:
                    93:50:17:58:90:5f:46:62:3f:4a:a8:84:ce:98:bf:
                    34:ca:ab:cf:c6:5a:6e:3f:47:f6:34:b3:54:7a:3e:
                    41:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:EF:4B:91:9B:05:8E:A4:BD:C3:C3:9E:F2:24:8E:5F:E9:9F:9B:70
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31372e302f32342d3234203d3e20323138363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:66:e4:a3:3b:fd:d5:f5:d2:f8:c3:33:bd:8a:27:ed:9e:5a:
         19:c7:c2:ea:02:ff:43:12:44:3a:c8:0b:de:65:33:d4:d1:a2:
         9f:17:71:b7:d0:be:f5:45:36:38:97:ce:cf:44:1a:99:6d:cd:
         18:ae:8c:cd:3e:6b:de:1c:b7:9e:bc:20:60:79:35:8c:42:2e:
         31:87:56:7f:2f:8a:5d:63:37:03:81:dc:c1:6b:1c:c5:30:2f:
         c3:fa:9b:7a:8a:38:b5:d3:8d:70:64:38:31:91:0f:f4:3d:2c:
         38:6d:cf:6c:97:be:5c:a8:f7:87:fb:a9:be:75:6f:84:ac:96:
         0d:7d:36:4a:b4:8a:92:6a:2a:68:85:54:c4:2e:03:99:0b:8a:
         b2:8a:ad:d3:d5:84:7e:22:f1:7c:05:43:05:0f:e8:aa:0a:94:
         e0:6f:e3:24:df:e0:47:56:98:ee:9d:98:74:62:ae:32:de:e7:
         1e:5d:0b:45:29:ec:a0:75:f4:dd:ab:4f:80:75:ff:19:59:a7:
         e7:96:cf:6b:23:bf:3b:c6:ec:1d:43:64:aa:98:a6:f1:6d:be:
         50:0d:16:69:12:1b:4e:cd:d7:e6:e4:d0:82:45:0f:9e:9e:ad:
         c0:d0:d8:80:39:bc:02:24:99:a6:af:b1:bd:cf:84:4d:74:ae:
         2c:cf:3d:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 18:32:14 2026 by rpki-client