Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e32342e302f32342d3234203d3e20333939353135.roa
File:                     3133302e37382e32342e302f32342d3234203d3e20333939353135.roa (raw, json)
Hash identifier:          8Bq6AfOyq/XQdO7pz3gl1RTJ18ZaBaWVHMOnCrWYfPI=
Subject key identifier:   38:9E:66:55:73:4F:60:3E:20:18:D8:51:73:60:C8:9B:67:DD:E5:7C
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       0C1F8EBCBDA7739E3CA630B1B321F9AE69425D7E
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e32342e302f32342d3234203d3e20333939353135.roa
Signing time:             Tue 27 Oct 2026 13:15:02 +0000
ROA not before:           Tue 27 Oct 2026 13:10:02 +0000
ROA not after:            Tue 26 Oct 2027 13:15:02 +0000
asID:                     399515
IP address blocks:        130.78.24.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:1f:8e:bc:bd:a7:73:9e:3c:a6:30:b1:b3:21:f9:ae:69:42:5d:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Oct 27 13:10:02 2026 GMT
            Not After : Oct 26 13:15:02 2027 GMT
        Subject: CN=389E6655734F603E2018D8517360C89B67DDE57C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:36:15:15:2e:a6:4e:32:81:a8:e6:be:de:d7:
                    21:b6:f9:63:d8:19:74:98:b7:2b:51:79:ea:dd:fd:
                    4d:4a:12:78:32:06:57:5e:cc:ad:f8:8e:05:b6:ae:
                    60:3e:1b:bc:03:11:21:40:e7:c8:b9:5b:3d:8f:a9:
                    32:f2:91:5b:1d:f8:ea:2c:56:aa:c1:3a:1e:8b:40:
                    55:77:b0:ff:19:c5:fc:fd:2f:dd:b0:4c:e1:8e:1c:
                    ec:e5:c6:84:8e:8a:30:c2:fd:a5:fd:b4:19:16:42:
                    33:df:e5:29:df:75:cc:19:b4:0c:77:36:0a:1e:ae:
                    68:3e:b2:3d:84:ca:fa:ee:4b:fc:ff:b0:23:b4:2a:
                    ba:df:55:45:86:67:30:d2:58:1a:6e:49:d7:2d:1f:
                    9e:6c:35:33:e5:b8:02:47:73:bc:15:b4:3f:c0:a4:
                    23:19:c3:14:b8:fb:9b:6c:7d:57:a3:11:cf:2d:d9:
                    9a:f2:07:96:5b:c4:e6:e3:05:a2:d6:e8:23:38:fe:
                    ea:43:64:31:6a:bb:00:96:22:89:96:06:fd:82:ff:
                    f0:06:d2:8d:ef:e9:04:e9:44:4b:f3:23:d1:6a:9f:
                    ad:11:02:e3:0d:a2:79:b7:b1:23:c4:8f:a8:4a:2a:
                    05:61:ae:c0:0f:fd:43:c8:99:4f:3e:e5:65:ad:6f:
                    59:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:9E:66:55:73:4F:60:3E:20:18:D8:51:73:60:C8:9B:67:DD:E5:7C
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e32342e302f32342d3234203d3e20333939353135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.24.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:20:45:6a:17:c8:96:4b:7d:87:de:cd:02:76:a7:59:b6:5d:
         86:60:35:bb:3b:27:3e:4a:02:59:29:be:ce:7b:2a:01:6f:b5:
         2a:a8:37:48:52:3e:22:20:bb:67:e1:72:be:ca:bd:fc:31:6f:
         94:d0:ed:8e:7f:27:87:90:b5:8a:d3:9c:04:83:c9:b3:ed:91:
         60:b8:88:e6:c4:41:f9:79:0f:d1:cf:59:3c:0a:88:83:43:6d:
         28:22:79:bc:79:8e:be:30:90:68:e2:ea:5a:23:7b:d9:1d:5d:
         e3:e6:a3:94:27:50:5b:e1:0f:02:8c:2a:a8:6c:c2:6e:c7:5a:
         4e:1f:e7:3c:25:97:54:37:ad:21:60:d2:af:a7:4b:80:f4:1a:
         a8:01:44:71:28:9a:09:21:7b:7a:73:eb:80:d9:f9:4b:cc:c2:
         73:5d:75:d1:ec:31:7e:33:56:e5:3c:eb:45:86:24:aa:bf:71:
         67:14:20:4f:84:9d:0d:2e:ad:44:c9:77:3a:3c:c3:a2:48:e6:
         f1:6a:1a:40:22:d6:9d:f5:80:6b:bf:1e:23:49:37:5c:5a:45:
         d5:24:3f:b4:1d:14:a9:5f:3a:b1:c9:c8:db:be:97:4c:f0:10:
         39:23:b0:0f:f0:0f:07:8f:bb:c2:be:87:f8:c5:b1:13:ff:ce:
         5e:c1:6c:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 22:46:11 2026 by rpki-client