Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31392e302f32342d3234203d3e20343032393331.roa
File:                     3133302e37382e31392e302f32342d3234203d3e20343032393331.roa (raw, json)
Hash identifier:          7BU6pz+6/CuGN2wF8I7S8JaISWCckfpqQJeYfT+4zb0=
Subject key identifier:   C5:2E:94:84:05:C2:ED:46:C9:8A:A8:61:99:B4:40:14:D6:E9:0C:6F
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       737B42ADB76DCC4E751EBCBFB3F1577E71EA0A0D
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31392e302f32342d3234203d3e20343032393331.roa
Signing time:             Thu 05 Nov 2026 20:55:28 +0000
ROA not before:           Thu 05 Nov 2026 20:50:28 +0000
ROA not after:            Thu 04 Nov 2027 20:55:28 +0000
asID:                     402931
IP address blocks:        130.78.19.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 23:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7b:42:ad:b7:6d:cc:4e:75:1e:bc:bf:b3:f1:57:7e:71:ea:0a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Nov  5 20:50:28 2026 GMT
            Not After : Nov  4 20:55:28 2027 GMT
        Subject: CN=C52E948405C2ED46C98AA86199B44014D6E90C6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:82:c0:14:70:2b:39:88:c1:36:8f:87:2d:32:
                    2c:8d:b2:35:3f:7c:41:0f:4f:4c:95:4a:91:b7:1b:
                    db:f4:00:b5:f2:bc:8c:43:dc:1f:d5:70:fe:c0:32:
                    c0:d0:64:61:49:54:4b:34:0f:ef:bf:b6:bb:c8:f3:
                    b6:c6:ad:b3:34:1d:3e:58:ba:b6:bf:4d:d5:d4:96:
                    11:18:9d:ac:de:28:37:87:21:13:70:aa:c7:ff:63:
                    17:7d:99:62:25:59:dd:d7:52:f8:2d:1e:63:bc:c1:
                    2f:c2:ea:02:03:b7:8c:5b:a3:f4:7c:67:a9:60:ac:
                    1b:59:55:b1:4d:31:f7:7a:95:9b:18:26:0b:88:44:
                    e7:21:9e:69:a9:3a:e0:dd:e2:81:5b:0f:18:12:bd:
                    5b:92:63:bc:dc:23:05:b9:1d:b2:2d:13:d4:f8:30:
                    e6:91:13:34:07:24:79:fb:17:78:44:24:53:e9:a0:
                    09:6c:11:70:43:84:a3:c5:e1:65:c2:af:a4:51:f6:
                    7c:69:9e:67:59:f6:5b:f3:9c:de:4c:b4:dc:7a:bf:
                    b9:46:01:6e:c5:2a:52:1a:42:01:42:35:69:97:e8:
                    fe:ea:cd:17:33:30:77:3d:bc:b9:95:82:50:cf:8f:
                    53:d1:7e:92:2e:ea:79:dc:bd:7b:ec:84:be:1a:fd:
                    19:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:2E:94:84:05:C2:ED:46:C9:8A:A8:61:99:B4:40:14:D6:E9:0C:6F
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31392e302f32342d3234203d3e20343032393331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:e7:1b:d6:23:fc:e0:e2:bc:d4:60:bb:e0:be:54:d7:1c:44:
         fc:89:75:29:1d:bb:2e:f4:da:ab:e7:12:f0:3a:a8:2d:33:d0:
         00:f4:3d:0c:c8:93:16:3a:00:96:b3:24:2d:a3:e9:6d:ec:f8:
         b3:2d:83:bc:0f:d5:75:32:9f:9f:89:21:95:14:9e:5c:7f:2d:
         1c:44:1d:ff:4e:b1:fd:77:01:c3:52:6f:61:60:37:b4:e9:4e:
         1b:be:0e:8b:3f:68:86:0a:05:3e:d9:8e:0e:19:1e:49:3a:95:
         51:5d:1c:0b:e6:b1:1a:9f:cc:df:d5:bd:8a:43:12:35:59:4a:
         9c:fa:8d:10:52:ec:db:e5:13:15:3b:2e:b2:f6:f5:b9:9d:2c:
         22:c8:92:f8:a5:c2:c8:b1:f5:bd:37:a7:41:25:a7:fc:5e:10:
         c5:03:bd:67:09:94:79:f9:b0:b9:f4:f4:7b:9b:4c:c9:e9:99:
         6d:e2:e1:74:b1:c9:3a:6b:b2:c9:65:a7:50:c7:45:24:5c:e2:
         63:a6:3a:f4:c0:5b:70:0f:f0:f5:71:ee:53:0a:d2:1b:e2:db:
         0d:d1:77:53:9b:f6:bf:1b:1c:2e:6d:55:b6:cd:ae:e5:7d:48:
         d1:eb:4c:b8:96:3d:ef:a8:5d:0e:87:91:35:33:a2:0f:d6:9a:
         bd:40:3a:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:21:59 2026 by rpki-client