Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e392e302f32342d3234203d3e20323138393332.roa
File:                     3133302e37382e392e302f32342d3234203d3e20323138393332.roa (raw, json)
Hash identifier:          CPSlYemqY/MNoTObWVEDA5dHTZWfZYMZC5FpaMfJ18U=
Subject key identifier:   E5:20:B6:6D:35:17:1E:5D:B8:20:67:53:5F:4E:0C:98:33:8D:96:8B
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       19A85C3241BBC670AE4029AD4A5E6BA0776A3DF8
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e392e302f32342d3234203d3e20323138393332.roa
Signing time:             Tue 15 Sep 2026 06:24:46 +0000
ROA not before:           Tue 15 Sep 2026 06:19:46 +0000
ROA not after:            Tue 14 Sep 2027 06:24:46 +0000
asID:                     218932
IP address blocks:        130.78.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 09:08:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:a8:5c:32:41:bb:c6:70:ae:40:29:ad:4a:5e:6b:a0:77:6a:3d:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Sep 15 06:19:46 2026 GMT
            Not After : Sep 14 06:24:46 2027 GMT
        Subject: CN=E520B66D35171E5DB82067535F4E0C98338D968B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:89:5e:49:cb:d2:bc:5d:06:ff:35:ff:07:7a:
                    9b:7e:3d:87:e8:53:c2:c5:7b:af:73:35:b0:4b:ba:
                    1c:ce:8c:ca:a0:db:23:9c:8f:9d:3a:d4:b1:14:1d:
                    9d:4b:0a:1d:9b:a8:f2:18:18:71:55:2e:ae:9d:23:
                    aa:9e:2e:6b:d0:52:10:84:76:35:6e:78:7e:89:2d:
                    d4:4c:ca:7a:53:55:44:b2:f4:21:60:19:39:9c:1f:
                    8c:6f:bc:d5:3c:a9:db:e7:48:45:f3:cd:14:1c:46:
                    54:d7:97:b7:81:e3:d7:7b:48:41:91:de:dc:09:75:
                    2a:b4:4c:84:39:01:3a:6a:ba:bd:f8:ed:a1:21:e5:
                    bf:9a:42:26:7b:dd:cb:c0:15:a2:15:35:4d:26:c0:
                    5e:0d:59:6f:69:98:71:be:93:bd:6d:0d:6d:8b:31:
                    8c:f1:bb:bb:21:ac:de:f0:cb:60:47:e8:55:69:4c:
                    59:c8:2e:58:f6:36:60:29:24:72:a0:4e:d5:d3:7c:
                    00:50:af:90:0a:46:bf:32:69:f2:3f:14:d3:5d:69:
                    b4:49:84:5e:1e:f3:a6:3c:76:d6:de:6b:6a:e5:cb:
                    27:3f:b4:f6:0a:af:0f:c4:05:c9:af:6a:16:8d:20:
                    e2:ea:8f:8a:be:e8:26:78:0d:77:90:b7:12:1b:f9:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:20:B6:6D:35:17:1E:5D:B8:20:67:53:5F:4E:0C:98:33:8D:96:8B
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e392e302f32342d3234203d3e20323138393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.9.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:24:c5:95:ec:cb:a0:90:86:ae:5e:14:ff:ef:1b:d1:9a:51:
         d4:cf:83:8a:b2:53:3b:8e:b3:e7:79:0b:18:64:f5:0a:18:bb:
         cd:1d:0f:4f:5a:5e:83:b6:81:fd:e5:3b:08:d9:c5:f8:05:38:
         59:a0:70:a8:89:b2:bd:17:04:2e:82:85:e2:dc:06:93:9b:d7:
         e8:9d:27:0f:9f:ac:d0:fb:f2:40:ed:41:b7:27:da:94:41:d0:
         cb:ce:54:e5:fc:27:e3:b3:85:60:bc:a0:26:c1:3f:20:ec:a3:
         63:72:83:2a:f5:7b:26:7b:4c:6a:e7:a1:aa:d8:7b:44:8d:13:
         4d:f0:5b:70:43:2c:ff:f3:20:82:06:fc:e7:a1:91:ef:5c:ed:
         5a:91:9b:52:db:75:50:b9:05:8e:5e:92:0c:10:df:5c:90:dd:
         26:70:a5:ad:cb:15:65:c8:d9:9b:24:1b:3c:dc:a2:8f:be:fa:
         75:f1:aa:1c:44:69:f7:b4:0b:a5:dd:61:fd:80:4c:44:6b:e3:
         fb:9e:bb:6a:db:b2:23:ce:49:f3:79:ae:9f:20:7a:fc:1f:69:
         20:11:a1:ed:de:2b:71:83:a0:ad:0d:de:68:73:ff:44:9c:80:
         cf:05:dd:1e:50:10:ac:a5:da:48:b1:8d:e1:0b:e0:46:b5:34:
         60:f5:b5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 23:49:26 2026 by rpki-client