Route Origin Authorization

$ rpki-client -vvf rpki-rsync.warpnet.xyz/repo/warpnet/0/323030313a3637633a33343a3a2f34382d3438203d3e20313939393138.roa
File:                     323030313a3637633a33343a3a2f34382d3438203d3e20313939393138.roa (raw, json)
Hash identifier:          BoC7V3DJ6DBy77KIPkZnvAXzTdBiHxXzXMnxYLz1Fm0=
Subject key identifier:   00:ED:E1:04:8A:F9:CC:5D:C6:4F:9F:A4:B9:EA:EC:C3:92:9E:99:05
Certificate issuer:       /CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
Certificate serial:       5C5756042DDC966009447E5B7284BCCD48BF3E8F
Authority key identifier: B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
Subject info access:      rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/323030313a3637633a33343a3a2f34382d3438203d3e20313939393138.roa
Signing time:             Tue 30 Dec 2025 10:50:16 +0000
ROA not before:           Tue 30 Dec 2025 10:45:16 +0000
ROA not after:            Tue 29 Dec 2026 10:50:16 +0000
asID:                     199918
IP address blocks:        2001:67c:34::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl
                          rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 11:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:57:56:04:2d:dc:96:60:09:44:7e:5b:72:84:bc:cd:48:bf:3e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4b74ed94183cc06a35c95c5b7096b7c0ef04944
        Validity
            Not Before: Dec 30 10:45:16 2025 GMT
            Not After : Dec 29 10:50:16 2026 GMT
        Subject: CN=00EDE1048AF9CC5DC64F9FA4B9EAECC3929E9905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e9:bd:6f:9c:71:16:9b:7e:21:53:d1:9e:db:
                    46:a7:ac:07:ef:77:0d:b1:c7:46:cb:81:f8:f9:aa:
                    2a:ed:e0:75:9e:d0:a8:6b:d5:a2:6d:c3:3b:4f:46:
                    f7:e9:03:49:53:c8:56:97:ef:16:92:50:83:b3:cf:
                    af:00:a8:22:ce:dd:03:b7:37:de:98:18:a2:9a:2c:
                    48:4a:23:4e:ab:c5:61:73:db:e0:3b:c2:e4:47:cd:
                    61:3f:f7:40:98:b0:85:d3:18:65:72:06:dc:ad:1e:
                    a0:53:c8:c4:1b:06:dc:74:f8:9f:9c:aa:53:ab:ff:
                    c8:2c:44:48:31:d2:35:a1:15:e5:18:d4:a6:23:f4:
                    73:bf:c6:e1:06:a7:4c:5c:87:91:fe:1a:3d:6e:25:
                    3f:37:5d:eb:43:b3:c5:47:41:56:b1:f6:40:7b:04:
                    8d:fa:95:8e:a5:c2:e0:90:64:46:7b:f2:25:04:cc:
                    59:d2:68:0c:f9:13:48:23:ab:ec:dd:7d:e3:7d:2f:
                    7b:a5:22:26:21:b9:92:65:f0:17:2f:d8:c1:62:32:
                    e0:86:2f:9e:95:b9:88:b7:5f:41:74:1f:28:b1:87:
                    26:90:8c:03:34:d4:66:c3:98:ec:0f:64:c0:c2:5a:
                    d8:10:de:fb:45:2b:de:12:11:cc:85:74:bd:48:95:
                    3d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:ED:E1:04:8A:F9:CC:5D:C6:4F:9F:A4:B9:EA:EC:C3:92:9E:99:05
            X509v3 Authority Key Identifier:
                keyid:B4:B7:4E:D9:41:83:CC:06:A3:5C:95:C5:B7:09:6B:7C:0E:F0:49:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/B4B74ED94183CC06A35C95C5B7096B7C0EF04944.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tLdO2UGDzAajXJXFtwlrfA7wSUQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.warpnet.xyz/repo/warpnet/0/323030313a3637633a33343a3a2f34382d3438203d3e20313939393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:67c:34::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:cd:35:b0:7b:b6:fc:b3:85:18:ba:56:bc:9a:56:ad:78:aa:
         bf:c6:ad:c0:58:f6:7e:d4:97:24:6c:f8:e7:9b:e8:4e:c1:a0:
         16:cc:ff:76:88:78:27:9d:3c:88:d8:f4:a0:f4:5b:14:b9:50:
         cd:a8:1a:36:48:13:67:0c:52:88:a9:da:7a:d2:a0:3a:89:e8:
         6a:5f:7c:22:9b:da:41:ab:47:cb:02:61:95:6e:61:ff:09:4c:
         df:68:ea:f3:98:6e:43:7e:d2:8b:d7:d8:f3:20:fd:13:14:3b:
         73:7c:9e:8f:81:01:85:66:2f:5d:5a:66:b8:41:cb:26:c4:05:
         c9:9f:48:aa:24:5b:3b:b6:9c:f7:a6:95:5f:9f:23:ff:92:be:
         cd:c9:8b:a2:48:eb:10:c4:31:08:37:cd:94:4b:fc:57:05:92:
         98:1d:f3:ba:25:09:4c:49:3d:c7:c7:c7:29:4a:a9:bf:f2:c4:
         c5:c9:11:20:ef:ad:35:c1:af:bd:f0:95:c6:3f:02:62:db:59:
         95:04:d1:11:55:26:66:90:42:b6:47:d7:f5:a0:57:57:59:e8:
         e3:2e:be:6b:cc:e3:2a:cb:51:a5:18:f3:10:6b:7a:9b:40:70:
         93:5b:f0:20:80:54:0a:b6:c4:61:91:e3:c1:eb:dd:62:5c:5a:
         8d:32:68:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:08:35 2026 by rpki-client