Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/tw-bv_xRZWPsZeOLLO2eEPl0in4.roa
File: tw-bv_xRZWPsZeOLLO2eEPl0in4.roa (raw, json)
Hash identifier: D6cr9MXdP2yVFVbnMkEJyZi1TMKoobz+HMjFe2az1GI=
Subject key identifier: B7:0F:9B:BF:FC:51:65:63:EC:65:E3:8B:2C:ED:9E:10:F9:74:8A:7E
Certificate issuer: /CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Certificate serial: 0183ABB50FEC4ABF306265BA5F2A26BBD8FC
Authority key identifier: 50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/tw-bv_xRZWPsZeOLLO2eEPl0in4.roa
Signing time: Thu 06 Oct 2022 05:11:53 +0000
ROA not before: Thu 06 Oct 2022 05:11:53 +0000
ROA not after: Sat 01 Jul 2023 00:00:00 +0000
asID: 61317
IP address blocks: 109.122.201.0/24 maxlen: 24
109.122.213.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:83:ab:b5:0f:ec:4a:bf:30:62:65:ba:5f:2a:26:bb:d8:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=50ba5b744e8df503d94f41fb29024289c6fa5e5b
Validity
Not Before: Oct 6 05:11:53 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=b70f9bbffc516563ec65e38b2ced9e10f9748a7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b6:27:f5:30:c7:f8:9d:7b:2b:ec:96:a0:5b:
21:94:3b:03:85:fb:62:30:22:5e:85:99:b8:d0:0a:
5b:ba:96:c6:ef:33:b8:81:15:b8:ef:8f:b5:0c:e4:
78:1c:24:db:8e:49:9a:ae:dd:b9:60:c0:09:19:6c:
39:89:69:a9:fe:b0:f9:41:00:74:0a:47:60:89:76:
5e:66:aa:a1:85:c5:6a:e0:d6:63:e2:9a:de:b2:b0:
3f:86:03:ca:56:11:ca:28:57:fd:ea:3b:fe:09:94:
2c:b6:6d:0c:15:05:2b:f8:e9:83:d6:ce:66:4d:6f:
2a:43:db:9b:3c:c3:c5:00:0a:0b:79:36:3c:46:1e:
89:61:89:57:a9:14:62:ee:28:58:9a:64:96:4a:bd:
c8:38:19:27:1a:3f:11:05:3e:2e:c8:4c:90:db:a9:
b9:50:14:c5:4b:3e:e2:cd:6f:94:6e:af:0b:8b:89:
5e:3e:f6:f3:de:22:c1:d2:3b:2d:41:1f:2b:e8:5b:
92:ad:f9:d0:4e:d2:27:3a:a1:a8:69:25:7d:b1:cc:
da:f9:1f:34:74:96:5d:e1:0b:d4:f9:3f:25:96:ec:
df:f3:22:06:64:f4:84:22:c8:7e:40:62:f1:08:b6:
17:37:5d:ae:c0:51:57:a5:18:64:7e:27:6e:87:14:
25:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:0F:9B:BF:FC:51:65:63:EC:65:E3:8B:2C:ED:9E:10:F9:74:8A:7E
X509v3 Authority Key Identifier:
keyid:50:BA:5B:74:4E:8D:F5:03:D9:4F:41:FB:29:02:42:89:C6:FA:5E:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ULpbdE6N9QPZT0H7KQJCicb6Xls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/tw-bv_xRZWPsZeOLLO2eEPl0in4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/7aff68-bae6-498a-9f58-f559cda8d49f/1/ULpbdE6N9QPZT0H7KQJCicb6Xls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.201.0/24
109.122.213.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:16:18:9c:cc:96:c9:f5:c7:d7:ac:56:aa:6f:9c:54:3c:51:
bb:63:e1:0d:15:de:d2:20:0a:9e:78:92:a1:54:9e:5a:b3:e1:
0b:e7:bf:ca:73:10:cd:ca:11:86:d5:05:be:47:3f:19:cf:6c:
db:4d:96:5d:8c:fc:c0:69:47:35:36:68:86:19:14:45:13:12:
27:80:33:67:1a:68:ec:19:f4:f1:81:0f:05:84:ea:ba:eb:6b:
d4:16:45:d1:b9:22:26:ae:6c:93:37:f1:5d:8c:3d:87:8e:68:
f3:fd:eb:2d:e3:84:11:06:7b:ec:b7:f7:d9:f8:04:12:58:d3:
19:38:9d:b7:e2:89:c6:8f:17:37:e4:24:d7:46:a6:0a:cc:3f:
21:2f:71:17:98:1f:99:a3:4a:5c:00:44:57:7d:3f:e5:aa:8a:
18:30:7e:45:5f:06:71:d4:1f:92:3e:ab:04:41:df:28:85:75:
89:84:d8:ae:5a:94:25:02:b6:83:8e:07:a7:7d:1e:82:0b:07:
5a:b6:41:c6:74:5a:89:c1:87:1f:9f:4e:1c:ed:59:28:31:b3:
91:19:d8:f6:86:f8:18:6c:6b:32:ee:b1:8e:d2:5a:f0:e0:c0:
7a:a7:03:4b:5a:14:74:cf:4f:40:fb:cf:f1:bf:e9:2b:70:f4:
24:be:62:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 13 21:06:02 2025 by rpki-client