Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e33302e302f32342d3234203d3e20313937353734.roa
File:                     3133302e37382e33302e302f32342d3234203d3e20313937353734.roa (raw, json)
Hash identifier:          UGN+T5HfUNZe6yuh/yJovLgXZEA0Sc4cFlkeDwV70RY=
Subject key identifier:   39:20:C5:D9:98:AE:D9:EE:6A:8B:AE:8C:24:CD:6A:65:D3:40:BE:64
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       4B6A34947D01420CFB463FFBE8F74562155FE8B4
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e33302e302f32342d3234203d3e20313937353734.roa
Signing time:             Fri 30 Oct 2026 19:07:10 +0000
ROA not before:           Fri 30 Oct 2026 19:02:10 +0000
ROA not after:            Fri 29 Oct 2027 19:07:10 +0000
asID:                     197574
IP address blocks:        130.78.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 23:28:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:6a:34:94:7d:01:42:0c:fb:46:3f:fb:e8:f7:45:62:15:5f:e8:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Oct 30 19:02:10 2026 GMT
            Not After : Oct 29 19:07:10 2027 GMT
        Subject: CN=3920C5D998AED9EE6A8BAE8C24CD6A65D340BE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:0a:47:94:76:04:6c:20:69:e6:6a:4e:ed:37:
                    7e:1f:82:8b:78:e2:f4:80:96:91:9c:dd:2a:32:b1:
                    db:a0:70:d8:c9:ea:6d:06:ac:b1:1c:61:4f:57:78:
                    41:6f:3b:c8:ff:4e:33:55:bb:5a:e9:ce:a8:bb:1e:
                    93:6b:83:ab:c5:40:a9:95:6e:fc:16:db:3c:2b:de:
                    e4:4e:28:96:ee:fc:21:e2:80:83:3b:2b:7a:d9:36:
                    88:3f:5c:2d:4e:19:3d:ae:3a:a3:1a:6c:67:12:f5:
                    9d:59:ee:87:27:05:3c:e5:b8:10:c4:20:79:5c:5f:
                    aa:ae:22:e6:b3:8d:bc:bf:af:47:91:70:de:ab:35:
                    ce:61:46:d8:a3:01:bd:e7:b5:f1:04:79:57:db:41:
                    82:bc:e7:27:73:c4:67:2f:f5:e8:31:4f:87:e9:fb:
                    fc:e1:2d:75:c5:af:12:c5:03:a8:b9:c0:d8:6b:7e:
                    63:e2:f5:6b:c4:4a:e1:a0:29:18:a4:ba:40:16:bc:
                    7d:92:f4:fb:3a:ae:5f:bb:d2:5a:d7:81:f8:6d:be:
                    79:42:37:d6:23:0f:8e:f4:d9:fb:52:2a:5a:9c:f6:
                    42:9f:e3:96:f2:24:1d:0c:e3:d6:4a:a6:52:7a:4d:
                    85:b4:47:fa:22:c8:a8:4b:87:99:7e:1d:cd:36:13:
                    e5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:20:C5:D9:98:AE:D9:EE:6A:8B:AE:8C:24:CD:6A:65:D3:40:BE:64
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e33302e302f32342d3234203d3e20313937353734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.30.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:75:e5:1f:98:19:1b:a6:20:4b:67:ee:54:54:3c:f5:21:7e:
         9f:fc:a4:83:8a:51:bd:83:18:50:2e:24:d1:b7:77:15:cf:ab:
         29:d0:6a:20:38:74:44:19:f7:12:d9:00:42:bb:77:0d:a4:f9:
         aa:1b:e0:ac:c3:1f:60:cc:5a:df:30:df:3e:78:f0:cd:85:c0:
         76:6d:e4:4a:c7:be:06:71:a6:ee:bc:cf:c7:ca:40:ca:13:fb:
         64:43:bd:72:db:3b:90:5e:bf:97:39:83:1b:b5:40:4a:33:01:
         5a:e1:d3:f5:7f:da:1e:8a:3e:60:a7:90:1a:82:bc:e5:f3:f7:
         5a:1b:43:e2:49:77:11:69:03:ce:cc:67:4a:3e:51:1d:dd:c3:
         65:1a:ec:76:59:c0:24:23:71:3b:57:5e:77:c7:bd:b1:5d:c3:
         a9:00:12:59:b2:3a:4c:66:97:a9:9d:c7:cb:c6:98:d0:07:94:
         7a:1c:0b:fb:20:6b:4d:75:55:2e:73:f7:58:de:28:f5:bb:49:
         69:5b:ee:b8:52:71:26:03:14:3b:6a:42:0d:dd:49:d2:d9:d0:
         c9:d5:4b:b6:4e:97:17:ac:c9:66:ef:04:37:1e:4e:02:3e:5c:
         2b:fe:9c:ba:25:1b:4c:d2:e8:a7:8d:75:c2:ad:8d:fb:f8:6d:
         36:e0:fa:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:07:07 2026 by rpki-client