Route Origin Authorization

$ rpki-client -vvf rpki-rsync.warpnet.xyz/repo/warpnet/0/326130343a356138303a61633a3a2f34382d3438203d3e20313939393138.roa
File:                     326130343a356138303a61633a3a2f34382d3438203d3e20313939393138.roa (raw, json)
Hash identifier:          VrqnEtnnGH92plupsraDAYc0OxuS79Br0N9xZ5wsgPU=
Subject key identifier:   36:76:0D:1D:71:ED:EE:2D:9E:77:F4:88:DB:0B:C6:EB:C4:E5:5A:CA
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       2008CCF65800C9C6CF9AC48F825A9B014B9EB997
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/326130343a356138303a61633a3a2f34382d3438203d3e20313939393138.roa
Signing time:             Tue 28 Jan 2025 10:40:16 +0000
ROA not before:           Tue 28 Jan 2025 10:35:16 +0000
ROA not after:            Tue 27 Jan 2026 10:40:16 +0000
asID:                     199918
IP address blocks:        2a04:5a80:ac::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 02 Feb 2025 22:20:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:08:cc:f6:58:00:c9:c6:cf:9a:c4:8f:82:5a:9b:01:4b:9e:b9:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Jan 28 10:35:16 2025 GMT
            Not After : Jan 27 10:40:16 2026 GMT
        Subject: CN=36760D1D71EDEE2D9E77F488DB0BC6EBC4E55ACA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7e:68:ba:31:15:0a:6f:13:18:fb:32:80:6c:
                    aa:d0:e7:f3:60:60:f6:b9:36:c1:58:fe:ce:f7:e5:
                    c3:ec:d2:e0:c9:fd:cd:d9:ef:50:71:dc:4a:e4:99:
                    e7:41:cb:94:ca:95:93:a2:26:b8:bf:4d:95:ed:5a:
                    22:fa:26:c1:3c:b0:6d:bb:84:45:38:40:de:c5:7b:
                    50:f0:68:9d:8f:c5:77:fb:63:a5:f1:d7:51:69:20:
                    f1:2a:48:ce:d3:77:fe:a2:78:8f:08:8a:1b:02:24:
                    0c:68:f0:3b:4c:e8:bd:9d:b6:ee:85:c3:81:24:dd:
                    ce:14:3c:d1:db:c7:97:73:f9:3b:1d:a8:4e:00:a1:
                    8e:38:77:7d:bf:ee:92:0a:02:ed:be:1b:30:db:29:
                    cf:30:e5:b9:e8:e2:be:dc:01:28:91:a7:b8:9c:cf:
                    67:05:af:29:2b:3d:60:c5:d1:fa:91:28:4c:08:b1:
                    8a:16:74:52:56:b0:f8:7c:de:d2:ab:60:7d:83:82:
                    8c:bc:4b:b9:30:c0:74:5b:71:fc:f9:90:c6:75:05:
                    b2:fa:c9:2b:de:76:59:04:5c:11:69:cc:b3:f6:19:
                    e4:c1:4c:04:8f:9c:7f:9d:a1:6b:cd:8b:9c:99:e6:
                    af:87:c7:b9:aa:59:13:cf:29:40:e2:6f:c1:8c:b4:
                    34:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:76:0D:1D:71:ED:EE:2D:9E:77:F4:88:DB:0B:C6:EB:C4:E5:5A:CA
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/326130343a356138303a61633a3a2f34382d3438203d3e20313939393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2a04:5a80:ac::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:e1:10:d6:7e:bb:5e:6f:4e:55:ce:a1:63:3f:26:2d:f9:af:
         74:1c:2d:3d:f9:28:2a:af:af:40:57:4c:de:ef:8a:f4:e9:18:
         c4:42:3b:4d:53:52:9b:d8:48:28:6d:15:9c:68:34:6f:ba:c4:
         8a:2e:9f:b3:8d:fd:cd:88:45:20:ae:e2:ab:a3:ba:10:4a:a2:
         2b:44:4a:1f:f9:f6:06:a9:b0:7a:6b:26:58:71:3b:b2:68:9c:
         19:3d:a8:54:65:03:c7:95:bf:80:78:eb:e2:db:f3:88:00:88:
         e9:ff:75:a7:a7:f8:2a:89:df:78:3a:ce:5a:96:fd:24:02:3d:
         73:67:a9:73:ab:ba:27:57:40:48:48:42:bb:b5:79:cb:eb:9e:
         fd:99:42:18:97:69:2d:92:00:a3:7b:08:eb:d1:73:58:80:b2:
         80:9f:98:bd:22:6d:36:2f:0f:97:46:8a:2e:6b:5d:20:79:0c:
         75:25:2f:68:6d:82:99:f2:f4:11:9b:9b:52:99:cb:98:81:d4:
         a5:38:70:cb:76:ca:ac:e6:e7:5c:83:17:2f:50:87:53:6a:31:
         e3:fe:f7:83:9f:83:4d:d4:af:86:e9:8f:68:b3:8a:eb:7c:5b:
         43:6a:e7:68:4b:2c:63:4b:fb:ac:60:31:bf:ac:17:1b:6f:77:
         eb:7f:74:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 2 09:58:17 2025 by rpki-client