Route Origin Authorization

$ rpki-client -vvvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31372e302f32342d3234203d3e203334333436.roa
File:                     3133302e37382e31372e302f32342d3234203d3e203334333436.roa (raw, json)
Hash identifier:          dsxkc4VThedLs3+rQmcjGm2sAI/FxbyB2TQKYEIKVfA=
Subject key identifier:   82:E2:D0:C3:00:D5:28:40:E9:D6:40:A7:97:2A:33:F8:64:73:08:C4
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       13D5863BF7D5061EF49CE503DE9B1F02C0A2B722
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31372e302f32342d3234203d3e203334333436.roa
Signing time:             Wed 04 Nov 2026 22:10:34 +0000
ROA not before:           Wed 04 Nov 2026 22:05:34 +0000
ROA not after:            Wed 03 Nov 2027 22:10:34 +0000
asID:                     34346
IP address blocks:        130.78.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 23:53:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d5:86:3b:f7:d5:06:1e:f4:9c:e5:03:de:9b:1f:02:c0:a2:b7:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Nov  4 22:05:34 2026 GMT
            Not After : Nov  3 22:10:34 2027 GMT
        Subject: CN=82E2D0C300D52840E9D640A7972A33F8647308C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:72:11:09:cb:cb:ed:7b:e1:27:a4:26:b8:24:
                    78:cf:a1:76:bc:4d:33:ef:58:eb:a0:f3:65:37:84:
                    63:af:bb:da:a1:94:6a:a3:6b:f6:a5:61:cc:5c:94:
                    38:db:c5:fc:b6:87:94:67:b7:5f:5a:25:24:17:bf:
                    1e:8b:19:72:d0:37:da:67:8b:26:69:6b:dd:12:bc:
                    e8:6e:d6:2a:bf:9a:58:77:7f:a0:49:f4:b9:b9:e8:
                    07:42:07:13:4a:c4:f6:74:64:90:68:85:17:2e:a4:
                    7d:d2:5f:61:50:73:ed:df:ad:b4:a1:57:0c:0a:90:
                    21:e9:c5:e8:a3:fa:e2:1c:07:ee:d3:9a:b1:98:8f:
                    c3:60:75:de:1c:03:ee:6f:47:1b:7a:87:0a:a1:e0:
                    e2:bc:0a:1e:01:0a:31:1e:66:b0:f6:0f:74:3c:9f:
                    41:f1:f5:10:5c:db:18:2a:0f:57:12:93:4e:cc:ee:
                    e2:b2:36:63:e1:49:7a:fd:b2:4c:4b:d3:f2:e9:4d:
                    74:f9:6a:71:bb:5f:73:58:c8:9b:05:31:39:29:d4:
                    4a:7a:da:1d:43:e4:03:56:0b:bf:a6:a0:c3:d7:03:
                    a4:58:7c:bb:d2:22:e2:6d:19:23:8f:8b:37:bb:ee:
                    80:cc:90:61:e5:f7:db:2e:65:c1:06:3e:74:29:a9:
                    28:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:E2:D0:C3:00:D5:28:40:E9:D6:40:A7:97:2A:33:F8:64:73:08:C4
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3133302e37382e31372e302f32342d3234203d3e203334333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.78.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5e:52:30:35:00:c0:4f:69:43:12:9d:cd:56:93:bb:3d:14:5c:
         36:36:20:23:d4:27:e0:5c:df:f0:4e:6f:b8:1a:fd:5c:38:9e:
         3f:79:d7:31:bc:d6:9d:82:34:2e:11:cd:7b:fb:33:7b:e5:61:
         ea:86:fd:34:1b:a5:6a:01:1e:c4:93:fa:50:55:29:ca:f1:42:
         01:fb:be:7c:08:96:49:f1:1c:7a:f3:86:eb:3b:6c:60:ae:f7:
         30:2d:6d:33:e0:d1:74:84:02:81:c3:14:ff:e3:68:6f:1c:94:
         2f:06:bb:d0:7c:9a:60:b4:07:77:a9:10:65:46:f0:c2:c6:70:
         8e:7e:39:27:a8:e4:7d:1a:54:dd:0d:e7:24:8b:92:cd:eb:c4:
         12:32:a5:6c:68:4f:ec:8a:2d:05:7f:64:80:23:16:7c:04:d2:
         e0:ea:06:e8:3e:dc:b7:36:30:e7:d9:6e:2c:4f:c2:b2:4a:aa:
         88:6b:f5:f4:ab:66:1c:dd:87:56:58:43:df:cd:72:cf:5a:39:
         81:a0:32:6a:b9:84:0f:21:88:24:9f:e3:34:6a:e8:a9:d6:54:
         52:dc:61:83:2f:96:ff:8c:bc:19:80:d8:51:9c:2d:e6:15:4c:
         1d:a0:e9:68:3b:14:b9:c2:ee:2e:e4:f8:88:e6:e0:f9:07:92:
         f4:6e:d6:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 17:36:13 2026 by rpki-client