Route Origin Authorization

$ rpki-client -vvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3136342e3133382e3230302e302f32342d3234203d3e20313939393138.roa
File:                     3136342e3133382e3230302e302f32342d3234203d3e20313939393138.roa (raw, json)
Hash identifier:          L97pYJtao0yIoioppyBk0/Blaq3dhUEaKSkd9ME2bkE=
Subject key identifier:   7E:98:E7:CB:02:FA:04:EB:DC:A9:F0:8D:0B:46:49:55:38:D8:75:2F
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       368E03FCD0768A5CD79D8449F9ACE50D009F0CD0
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3136342e3133382e3230302e302f32342d3234203d3e20313939393138.roa
Signing time:             Wed 10 Jun 2026 12:54:14 +0000
ROA not before:           Wed 10 Jun 2026 12:49:14 +0000
ROA not after:            Wed 09 Jun 2027 12:54:14 +0000
asID:                     199918
IP address blocks:        164.138.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 19:33:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:8e:03:fc:d0:76:8a:5c:d7:9d:84:49:f9:ac:e5:0d:00:9f:0c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Jun 10 12:49:14 2026 GMT
            Not After : Jun  9 12:54:14 2027 GMT
        Subject: CN=7E98E7CB02FA04EBDCA9F08D0B46495538D8752F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:49:40:95:29:6e:d8:ea:1e:5e:01:87:0b:
                    37:fa:b6:57:a6:83:0e:fc:12:30:08:ec:b0:d9:0b:
                    ec:2b:7d:85:cc:f1:ff:8a:75:65:1b:16:f3:ee:14:
                    a8:26:57:60:71:fc:03:c7:f4:21:2c:6b:5f:53:fa:
                    64:13:5b:d6:fc:cc:b2:9e:2e:6d:cd:11:c3:91:ff:
                    ac:83:d2:cc:93:82:2d:cf:31:2d:e8:59:5d:38:9f:
                    0e:1b:5b:d4:10:20:34:15:c5:77:78:e4:ac:fb:82:
                    87:93:64:d1:00:36:e3:d7:5d:be:f9:84:56:13:1b:
                    1f:27:a9:e7:87:c6:93:c3:17:fe:e6:77:92:56:b2:
                    66:65:36:4d:b3:f3:ed:91:70:42:6e:3b:05:30:6a:
                    89:80:e5:d3:e2:2d:69:e8:b3:53:a8:17:80:35:9b:
                    5e:27:91:ab:51:8d:2e:46:3d:00:0d:14:eb:dd:ca:
                    1a:ff:10:01:ec:b8:03:d5:c0:0c:23:79:59:27:e7:
                    7d:01:14:23:85:d2:40:94:ae:6b:7b:ea:43:48:af:
                    2e:8b:8b:f2:f0:29:5e:87:b5:8b:6b:41:0f:f9:83:
                    36:27:97:43:8d:eb:81:7e:f5:68:1e:be:9c:b0:e2:
                    b9:d7:2c:ad:9a:ca:08:6f:59:67:1c:09:5a:68:65:
                    01:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:98:E7:CB:02:FA:04:EB:DC:A9:F0:8D:0B:46:49:55:38:D8:75:2F
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3136342e3133382e3230302e302f32342d3234203d3e20313939393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.138.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:a3:0e:4b:a7:a0:7c:a5:35:8d:c3:87:c5:a3:60:3f:11:81:
         02:e7:57:38:d4:a3:85:54:1e:2d:a5:5b:05:e7:66:a5:36:a6:
         af:08:f8:ae:c5:41:a8:fd:06:2f:b7:28:de:c4:c2:48:1a:17:
         25:17:26:1a:28:71:e4:57:26:57:86:1e:0d:cc:24:db:cc:df:
         cc:1e:10:fa:47:83:63:5b:9d:24:41:46:1f:52:04:12:20:40:
         c3:6a:3a:58:24:db:dc:56:24:86:6e:ea:b2:f4:08:23:56:f1:
         e0:94:99:a8:54:fe:b8:d2:9a:cc:60:b9:54:bd:f6:a6:d1:ac:
         49:77:b9:3c:88:f1:60:0a:c9:5b:d8:08:c5:48:59:42:de:02:
         a7:eb:e7:e6:9b:c4:2f:18:1d:da:e2:17:49:3f:3a:81:bd:f2:
         af:e9:21:97:a9:f9:d9:8e:e4:ba:d2:3c:42:97:1e:a1:b4:25:
         85:c3:f7:b0:5c:4e:71:a3:c0:9c:44:82:25:d0:33:b4:cb:86:
         36:01:24:5e:f9:56:f6:0a:32:17:12:c8:51:7c:75:0c:19:2f:
         36:3b:69:71:e3:ca:d6:79:ee:f6:c4:95:5f:89:32:01:6a:06:
         51:b3:54:f7:a5:bf:88:be:03:04:e4:f6:a5:c4:ca:bb:e3:8e:
         a1:74:55:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:40:40 2026 by rpki-client