Route Origin Authorization

$ rpki-client -vvf rpki-rsync.warpnet.xyz/repo/warpnet/0/3136342e3133382e3230302e302f32342d3234203d3e20313939393138.roa
File:                     3136342e3133382e3230302e302f32342d3234203d3e20313939393138.roa (raw, json)
Hash identifier:          gxYMKQIkTba0LIID+qmP4LvMbEnI5FHoc4NuIisokjs=
Subject key identifier:   02:26:00:83:A0:D7:0C:E8:17:EC:25:23:B7:A1:E6:7D:F4:77:DA:9B
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       3778850ABCE3038D43B57D85D3248202FA204F16
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3136342e3133382e3230302e302f32342d3234203d3e20313939393138.roa
Signing time:             Wed 09 Jul 2025 12:26:43 +0000
ROA not before:           Wed 09 Jul 2025 12:21:43 +0000
ROA not after:            Wed 08 Jul 2026 12:26:43 +0000
asID:                     199918
IP address blocks:        164.138.200.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 Aug 2025 23:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:78:85:0a:bc:e3:03:8d:43:b5:7d:85:d3:24:82:02:fa:20:4f:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Jul  9 12:21:43 2025 GMT
            Not After : Jul  8 12:26:43 2026 GMT
        Subject: CN=02260083A0D70CE817EC2523B7A1E67DF477DA9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:74:99:2c:3d:21:e9:f1:c7:ac:b2:95:d8:69:
                    07:28:3c:e2:d3:dd:37:d3:f7:5f:8e:3f:22:a3:3c:
                    ac:4b:68:84:3a:af:f5:56:5f:f5:b9:0d:2d:f6:5c:
                    9c:ed:7d:41:c1:c1:3e:ee:a0:05:f0:f8:f3:61:26:
                    96:63:a8:bf:3e:b0:2e:a2:1a:ea:9f:a0:b6:81:90:
                    b2:02:ba:2d:93:cc:e6:16:09:57:8e:88:3e:e5:3e:
                    63:d1:a3:09:49:37:6d:f4:2a:3b:fa:9a:a5:a9:06:
                    42:60:74:03:35:27:dd:a6:89:5e:dd:d1:d7:5c:c6:
                    27:a6:fe:87:0d:59:93:35:c6:98:b8:df:3e:82:ab:
                    f5:e5:f9:49:75:30:52:95:1f:cb:b3:19:fb:d8:a5:
                    02:42:bc:5e:c9:47:78:b6:29:1b:e4:9f:83:2e:72:
                    c5:ce:81:ea:6a:8e:30:3d:74:92:1a:09:ce:dc:8d:
                    ff:79:bf:92:81:a8:35:ad:fc:a2:9c:df:d5:95:10:
                    6b:a4:cf:e3:df:be:d3:39:e4:01:2d:f2:a0:cf:83:
                    5f:47:fc:12:a8:82:4b:b8:04:4f:0e:2e:9a:b4:93:
                    f8:e2:4a:3f:18:08:f3:33:5a:20:19:a4:16:2f:bc:
                    a9:b0:72:fd:02:8f:34:7d:75:09:25:c4:40:29:6a:
                    11:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:26:00:83:A0:D7:0C:E8:17:EC:25:23:B7:A1:E6:7D:F4:77:DA:9B
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/3136342e3133382e3230302e302f32342d3234203d3e20313939393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.138.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:b8:b0:f5:ea:ba:82:5a:ac:ac:4e:5e:04:96:90:68:8c:74:
         9a:a0:08:40:eb:34:78:74:3f:59:96:a3:cc:d0:8c:c1:f5:1c:
         b9:e6:6d:99:24:f5:d8:21:20:f7:0c:e3:8e:ad:e5:b9:a1:92:
         3c:42:75:9f:28:ae:f6:a4:4c:bb:e3:f3:28:ac:c0:e1:7c:25:
         7d:9c:ba:5a:21:54:89:2c:51:62:5e:c4:79:3d:7c:25:c6:51:
         dc:73:f6:d7:08:04:8b:de:d9:2e:d4:c6:bf:f2:62:4a:24:2d:
         1f:94:57:3d:30:1c:d5:e9:42:a2:3f:90:17:93:b0:ee:71:5a:
         29:77:8d:57:26:2c:1f:18:b4:6f:1e:bc:ab:d5:e0:07:07:58:
         d8:2b:63:98:32:73:6d:59:bd:78:a8:0d:d2:0b:cc:78:36:4a:
         7d:de:64:f1:c7:bc:c5:6e:a7:af:05:46:da:fe:fd:49:5a:95:
         87:a7:44:33:e1:6a:9a:b8:bc:24:9f:19:76:eb:b0:0f:ee:8a:
         08:66:3b:7d:15:b6:e1:7c:36:37:3c:24:7f:5c:69:9d:fd:cf:
         24:e9:20:cb:39:ad:62:23:b2:e8:57:7a:ed:bb:be:cf:b7:6b:
         5b:ee:db:b3:87:d1:cd:18:fe:47:8a:b5:62:fb:fc:51:82:78:
         90:65:98:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 9 15:13:43 2025 by rpki-client