Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e392e302f32342d3234203d3e20323032393334.roa
File:                     3133302e37382e392e302f32342d3234203d3e20323032393334.roa (raw, json)
Hash identifier:          DL76dqqs/DmRxolDheTiXPEp5ZkgEvtT5M01cJNEpeo=
Subject key identifier:   B7:EE:7A:0A:5C:44:21:C0:65:B2:38:19:AB:04:0C:7A:65:C5:E4:7C
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       3466FCD8EEF8ADEC33A563CC3058D5BC33C2CEA4
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e392e302f32342d3234203d3e20323032393334.roa
Signing time:             Tue 25 Aug 2026 12:23:15 +0000
ROA not before:           Tue 25 Aug 2026 12:18:15 +0000
ROA not after:            Tue 24 Aug 2027 12:23:15 +0000
asID:                     202934
IP address blocks:        130.78.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 06:46:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:66:fc:d8:ee:f8:ad:ec:33:a5:63:cc:30:58:d5:bc:33:c2:ce:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Aug 25 12:18:15 2026 GMT
            Not After : Aug 24 12:23:15 2027 GMT
        Subject: CN=B7EE7A0A5C4421C065B23819AB040C7A65C5E47C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ba:09:e8:9b:28:c4:0f:a9:94:a7:1a:0f:1d:
                    ad:98:08:fa:01:0e:a4:1f:68:cb:98:7c:ba:9f:25:
                    08:7e:a7:c2:7e:96:84:1c:98:19:77:e0:f2:eb:5e:
                    07:5f:da:16:cb:7d:2a:3a:ae:20:05:9b:81:75:a7:
                    f8:76:92:0a:15:12:04:22:05:22:52:b3:aa:ce:d8:
                    c9:77:38:73:86:80:59:63:93:f5:ec:df:76:a0:fc:
                    21:e8:c4:81:a4:df:8a:ef:e6:eb:2f:6c:3b:fc:4c:
                    80:94:80:c8:b6:ec:87:00:0a:5c:49:94:93:ec:0f:
                    96:35:bd:29:36:d7:59:ee:67:96:9f:3c:cf:10:ed:
                    4b:b4:8a:0d:8a:a3:66:c5:97:3d:0a:ef:76:a4:68:
                    ea:36:77:71:74:09:87:4d:bf:56:2a:fb:bf:5a:9a:
                    a7:fa:7a:90:90:1b:9d:d1:34:7d:44:c9:87:bd:92:
                    1e:d1:bf:57:86:d3:6e:4e:1d:53:73:58:55:f3:cd:
                    55:61:91:83:48:e7:73:8d:20:6f:94:0b:0d:bd:60:
                    ca:47:ad:b9:3b:99:63:e6:d4:71:a9:7f:b0:6f:5f:
                    be:3e:86:71:3b:73:71:ce:fb:b2:dc:44:6d:40:29:
                    49:92:94:aa:33:d1:16:3f:a0:6c:27:46:e6:e8:e2:
                    3a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:EE:7A:0A:5C:44:21:C0:65:B2:38:19:AB:04:0C:7A:65:C5:E4:7C
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e392e302f32342d3234203d3e20323032393334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:06:67:91:c9:c1:05:4b:59:a0:c4:38:cd:19:b6:51:e9:a1:
         b2:97:0a:b6:08:03:02:5e:79:b6:15:e1:7a:90:7b:ef:54:72:
         fd:3d:c2:8f:ef:43:01:1a:49:60:61:27:88:21:19:c2:4e:57:
         f2:57:52:2b:1d:da:0f:bd:14:a7:7d:d2:66:d5:d9:6f:90:62:
         6e:c1:a9:66:49:9e:fe:37:f5:fa:ca:4e:99:19:a5:7f:20:b1:
         98:f2:0c:a2:77:44:fb:ef:86:1f:88:d0:40:67:1a:9b:8d:95:
         5f:e8:b0:0f:5e:08:1c:44:3e:65:0e:ea:b4:08:c6:65:12:e6:
         b1:5c:b2:77:0c:7a:0f:b6:b8:04:a1:0a:38:c5:ef:f9:0a:fb:
         b6:7f:9f:86:44:57:71:f1:0f:2b:67:fd:96:35:f3:e4:48:f5:
         7f:ca:3a:c2:d6:b8:f6:ed:2d:0e:37:6a:15:a2:f2:57:47:90:
         6a:58:b6:3f:5f:20:91:8f:52:1e:f8:f3:70:4f:2f:b1:a9:52:
         54:0a:aa:0b:99:3d:83:7d:29:fe:56:ba:90:d8:0d:d6:64:13:
         1f:4d:59:e2:cd:95:bf:7c:4b:0f:25:55:6c:cb:7c:96:63:03:
         80:ff:f1:d6:2c:d1:f3:e1:7c:b7:e9:d3:0c:d5:de:a3:8c:37:
         ed:c3:ac:1b
-----BEGIN CERTIFICATE-----
MIIE3TCCA8WgAwIBAgIUNGb82O74rewzpWPMMFjVvDPCzqQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYjRiNzRlZDk0MTgzY2MwNmEzNWM5NWM1YjcwOTZiN2Mw
ZWYwNDk0NDAeFw0yNjA4MjUxMjE4MTVaFw0yNzA4MjQxMjIzMTVaMDMxMTAvBgNV
BAMTKEI3RUU3QTBBNUM0NDIxQzA2NUIyMzgxOUFCMDQwQzdBNjVDNUU0N0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCgugnomyjED6mUpxoPHa2YCPoB
DqQfaMuYfLqfJQh+p8J+loQcmBl34PLrXgdf2hbLfSo6riAFm4F1p/h2kgoVEgQi
BSJSs6rO2Ml3OHOGgFljk/Xs33ag/CHoxIGk34rv5usvbDv8TICUgMi27IcAClxJ
lJPsD5Y1vSk211nuZ5afPM8Q7Uu0ig2Ko2bFlz0K73akaOo2d3F0CYdNv1Yq+79a
mqf6epCQG53RNH1EyYe9kh7Rv1eG025OHVNzWFXzzVVhkYNI53ONIG+UCw29YMpH
rbk7mWPm1HGpf7BvX74+hnE7c3HO+7LcRG1AKUmSlKoz0RY/oGwnRubo4jqvAgMB
AAGjggHnMIIB4zAdBgNVHQ4EFgQUt+56ClxEIcBlsjgZqwQMemXF5HwwHwYDVR0j
BBgwFoAUtLdO2UGDzAajXJXFtwlrfA7wSUQwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud
HwRkMGIwYKBeoFyGWnJzeW5jOi8vcnBraS1yc3luYy53YXJwbmV0Lnh5ei9yZXBv
L3dhcnBuZXQvMC9CNEI3NEVEOTQxODNDQzA2QTM1Qzk1QzVCNzA5NkI3QzBFRjA0
OTQ0LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvdExkTzJVR0R6QWFqWEpYRnR3
bHJmQTd3U1VRLmNlcjCBggYIKwYBBQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3lu
YzovL3Jwa2ktcnN5bmMud2FycG5ldC54eXovcmVwby93YXJwbmV0LzAvMzEzMzMw
MmUzNzM4MmUzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzAzMjM5MzMzNC5y
b2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4w
DAQCAAEwBgMEAIJOCTANBgkqhkiG9w0BAQsFAAOCAQEATAZnkcnBBUtZoMQ4zRm2
UemhspcKtggDAl55thXhepB771Ry/T3Cj+9DARpJYGEniCEZwk5X8ldSKx3aD70U
p33SZtXZb5BibsGpZkme/jf1+spOmRmlfyCxmPIMondE+++GH4jQQGcam42VX+iw
D14IHEQ+ZQ7qtAjGZRLmsVyydwx6D7a4BKEKOMXv+Qr7tn+fhkRXcfEPK2f9ljXz
5Ej1f8o6wta49u0tDjdqFaLyV0eQali2P18gkY9SHvjzcE8vsalSVAqqC5k9g30p
/la6kNgN1mQTH01Z4s2Vv3xLDyVVbMt8lmMDgP/x1izR8+F8t+nTDNXeo4w37cOs
Gw==
-----END CERTIFICATE-----
Generated at Wed Aug 26 17:52:19 2026 by rpki-client