Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31382e302f32342d3234203d3e203334333436.roa
File:                     3133302e37382e31382e302f32342d3234203d3e203334333436.roa (raw, json)
Hash identifier:          LbFBP6Fx0VzyaL/KV2ea60sujEAAQcQ5chyjFTqL+zk=
Subject key identifier:   62:CB:4E:83:F9:F3:42:22:5D:18:8F:1A:00:97:8B:1E:22:72:35:C3
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       3D23B7185F26C1F481DD72B5C4492131400DEA61
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31382e302f32342d3234203d3e203334333436.roa
Signing time:             Wed 11 Nov 2026 20:57:38 +0000
ROA not before:           Wed 11 Nov 2026 20:52:38 +0000
ROA not after:            Wed 10 Nov 2027 20:57:38 +0000
asID:                     34346
IP address blocks:        130.78.18.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 23:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:23:b7:18:5f:26:c1:f4:81:dd:72:b5:c4:49:21:31:40:0d:ea:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Nov 11 20:52:38 2026 GMT
            Not After : Nov 10 20:57:38 2027 GMT
        Subject: CN=62CB4E83F9F342225D188F1A00978B1E227235C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:96:b7:ea:61:71:23:c5:81:87:51:c6:69:a3:
                    b3:6c:f0:33:73:86:fd:80:6a:2d:71:2c:93:34:d9:
                    b6:63:4d:d1:e2:05:55:36:db:ad:d1:73:db:ef:41:
                    30:a5:ac:3c:78:6d:9b:d7:f5:a9:05:7b:68:72:e5:
                    1c:6e:6a:16:34:57:b0:43:13:41:c3:31:09:c4:1b:
                    99:95:27:d0:b7:e6:8f:72:81:1c:3c:4b:4c:99:ef:
                    b5:f5:3c:02:32:5e:af:a0:e7:bf:fe:72:f2:49:7f:
                    37:a0:a6:5c:43:52:63:3b:c6:9b:6f:c4:bc:13:e5:
                    f5:ff:4a:44:fe:38:bd:e8:b3:b3:47:09:c2:4b:39:
                    3e:77:cb:e1:18:d0:77:6b:ef:46:4a:cb:62:e4:52:
                    6e:eb:07:ca:3c:62:8f:79:6c:2e:ac:03:7a:1d:63:
                    f5:d3:cc:49:1b:45:1a:2d:39:ab:9e:d3:e3:b3:eb:
                    fa:8a:b1:14:19:7c:9e:c7:3c:be:af:08:3f:9c:21:
                    78:c6:59:7b:31:88:40:80:d0:f9:48:d9:35:2d:49:
                    26:78:3d:00:a4:ba:b4:37:28:f8:96:f9:bd:0b:c6:
                    af:df:50:f6:16:16:7d:97:cf:d7:e9:97:6a:65:cc:
                    f4:15:9c:66:51:b9:19:9d:9c:d8:30:0a:7e:f3:32:
                    0d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:CB:4E:83:F9:F3:42:22:5D:18:8F:1A:00:97:8B:1E:22:72:35:C3
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31382e302f32342d3234203d3e203334333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.18.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:b2:67:1e:1d:6b:ee:f6:d7:98:58:21:be:87:da:55:c8:90:
         2f:80:b5:e4:a7:23:15:6f:39:eb:08:f3:4a:29:91:bd:93:37:
         00:92:65:7b:ef:5c:4b:65:28:98:54:ac:5e:f1:75:08:54:81:
         d6:66:5a:d0:ff:af:29:5a:b1:03:cb:e9:d0:ad:ff:25:e8:ca:
         70:4d:47:52:62:fa:b0:88:60:f2:74:95:ac:9b:df:1c:de:3f:
         da:41:52:c8:fa:97:70:3a:d0:66:2d:2f:98:81:3f:54:a8:8b:
         70:a8:8e:67:25:05:87:9e:38:7b:a3:78:17:26:3a:a6:8a:23:
         92:4f:0d:cf:9f:b1:c2:f7:ee:7d:89:30:45:2d:a3:43:bf:64:
         0d:87:5a:3c:c3:df:af:4a:f7:3a:a1:a5:fc:93:ce:fd:d3:92:
         e1:12:1c:86:0d:68:0b:a7:b4:4a:f1:95:1f:a7:1c:b3:0c:21:
         4b:c0:9c:d5:0c:51:c7:32:4f:de:64:c8:44:0e:fd:5e:2b:32:
         7a:d1:63:b8:34:c2:7d:5a:a4:fd:58:a8:e7:51:04:e0:55:35:
         09:e3:87:80:f7:84:e5:d1:a3:19:41:29:33:07:26:66:1e:ae:
         3d:be:26:70:d4:d5:08:47:2e:99:24:30:c3:74:e2:24:0e:29:
         3c:fe:53:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:47:19 2026 by rpki-client