Route Origin Authorization
$ rpki-client -vvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3139362e312e3130342e302f32342d3234203d3e20313939393138.roa
File: 3139362e312e3130342e302f32342d3234203d3e20313939393138.roa (raw, json)
Hash identifier: CIzH3jc+q7ShDnOFaG7hvr4PJj+hL3fdKpM+y4T5b1s=
Subject key identifier: A9:6E:45:20:75:9A:6B:12:DF:19:F1:EE:98:15:F3:E2:E0:FD:9A:03
Certificate issuer: /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial: 1BC7BC48518F3DDDC2835A10FA758A74CFD14409
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access: rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3139362e312e3130342e302f32342d3234203d3e20313939393138.roa
Signing time: Tue 28 Jan 2025 10:40:15 +0000
ROA not before: Tue 28 Jan 2025 10:35:15 +0000
ROA not after: Tue 27 Jan 2026 10:40:15 +0000
asID: 199918
IP address blocks: 196.1.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 02 Feb 2025 22:20:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1b:c7:bc:48:51:8f:3d:dd:c2:83:5a:10:fa:75:8a:74:cf:d1:44:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Validity
Not Before: Jan 28 10:35:15 2025 GMT
Not After : Jan 27 10:40:15 2026 GMT
Subject: CN=A96E4520759A6B12DF19F1EE9815F3E2E0FD9A03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:ae:a5:91:56:bf:90:f3:c5:ca:b6:95:7d:d1:
c1:9f:27:e6:2a:4e:38:f9:23:07:2f:d3:bc:ee:d2:
e2:7c:0e:0b:26:2f:60:7d:45:8e:99:b6:61:1f:9e:
f5:19:f6:32:7e:bd:70:9d:b7:e7:93:d6:1c:a4:a5:
99:e5:8b:da:27:b9:68:93:c8:09:b8:7f:6a:6e:08:
e9:5c:92:4e:dd:dd:d2:b4:4c:62:a2:58:82:e4:10:
4d:80:ab:89:13:9b:4e:cd:20:cd:eb:29:61:15:31:
5b:3d:a6:e0:33:f1:ec:38:ad:20:f1:0c:17:ca:43:
dd:30:55:c4:3d:b6:e9:20:6d:04:a9:c9:72:a3:92:
e5:47:b6:fb:b9:63:38:62:86:b6:5c:42:4d:82:24:
4d:6e:54:37:8a:4c:37:48:4b:6b:0f:a3:3c:46:02:
34:55:2d:dd:ad:bf:a5:53:55:41:84:3d:c3:6d:72:
16:1a:00:eb:9b:f2:62:87:50:59:ec:7e:c9:46:82:
24:69:e6:04:57:b5:80:2e:06:ba:a8:30:88:40:1c:
79:76:81:23:dc:ef:a0:78:6b:89:e4:7d:d2:a0:a4:
62:c4:ba:25:26:ef:e7:95:76:cb:22:b6:fe:63:c2:
5f:75:1e:9b:07:74:03:ab:85:3d:6d:55:5a:dc:9e:
d9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6E:45:20:75:9A:6B:12:DF:19:F1:EE:98:15:F3:E2:E0:FD:9A:03
X509v3 Authority Key Identifier:
keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3139362e312e3130342e302f32342d3234203d3e20313939393138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
196.1.104.0/24
Signature Algorithm: sha256WithRSAEncryption
61:f7:37:4a:0b:6c:11:85:31:24:61:eb:19:83:df:c7:f0:05:
32:fd:c4:51:0f:d2:e1:0a:7b:b3:55:3f:f6:b9:43:79:ee:3a:
6a:6e:40:91:14:26:a9:a0:9a:d4:84:de:73:ed:41:a4:fa:06:
8b:16:84:9c:a3:fc:4b:e2:53:66:49:2c:59:ea:89:e8:3f:33:
cf:06:56:4e:36:62:5b:ce:d6:d2:2a:36:8d:98:8c:16:8e:4a:
76:3c:c5:2d:1d:46:d7:86:9d:e7:5e:33:ff:1c:73:42:2e:9f:
9d:b8:a5:dc:8b:09:e2:0b:25:1f:74:b5:09:90:5c:a1:ba:f6:
75:35:09:bc:15:f0:e5:4c:f3:62:d6:40:e4:fc:82:8a:b1:91:
ba:56:f4:7c:90:7e:2f:94:ab:48:b4:71:8c:67:1f:65:a3:64:
6b:63:9a:f8:a2:5c:a1:c7:97:11:60:d8:a2:f9:9d:26:c7:c0:
da:4e:d1:06:52:15:28:6c:db:f6:1a:b2:73:56:cf:3d:92:80:
fc:cf:db:8a:95:c2:f9:ee:01:5b:61:a0:ff:f6:d0:d4:fe:48:
72:9b:9f:c1:36:0d:95:92:19:bc:c7:1f:e9:ac:1b:64:ef:fb:
25:3d:22:d3:14:57:20:05:39:9b:fc:36:0b:ec:eb:c1:d5:13:
d1:f0:67:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 10:03:23 2025 by rpki-client