Certificate
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer
File: 10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.cer (raw, json)
Hash identifier: zGYi2xLn+W1GlP7HWpYBBQjJzbVMSgDeC+SqwAN389I=
Subject key identifier: 10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 0980DEE5BED3C029C8A52AF4C998375160BB9D38
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Manifest: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft
caRepository: rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/
Notify URL: https://repo-rpki.idnic.net/rrdp/notification.xml
Certificate not before: Fri 05 Apr 2024 04:24:15 +0000
Certificate not after: Fri 04 Apr 2025 04:29:15 +0000
Subordinate resources: IP: 150.242.176.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:80:de:e5:be:d3:c0:29:c8:a5:2a:f4:c9:98:37:51:60:bb:9d:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Apr 5 04:24:15 2024 GMT
Not After : Apr 4 04:29:15 2025 GMT
Subject: CN=10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:97:3b:70:53:ad:5c:05:2a:38:0f:db:4b:cc:
37:3b:bf:c4:ca:1f:83:aa:f2:b1:1d:0d:d4:10:84:
d9:d7:8a:4c:28:8c:64:f9:e3:34:09:41:6c:86:8b:
a0:b8:cc:5b:4e:d1:57:f5:67:4c:a3:d9:1d:3c:fe:
9d:f9:ee:bb:bb:f1:66:55:e8:1c:b2:a6:16:33:b3:
e0:d4:5c:f6:ad:0f:1b:15:13:8c:94:d6:43:41:28:
e1:0f:9a:cd:dd:d5:c2:d4:eb:ef:af:37:c3:3d:36:
28:09:ce:24:5d:2b:73:b1:77:ec:38:ca:71:e8:0d:
28:b4:2a:bf:5b:04:d4:00:58:25:ba:e0:1e:1d:d2:
36:29:1e:cf:3d:89:96:3f:7b:c0:d4:e9:37:e3:a9:
a9:86:92:a9:47:9d:20:36:3e:10:63:78:ff:be:5a:
f8:85:e9:1a:ca:20:59:ff:77:17:96:c6:0e:47:f5:
4a:20:33:d9:1e:33:27:bf:b2:3d:94:89:43:75:e1:
47:c7:c7:26:47:9b:64:85:b5:91:69:5b:82:ac:63:
4c:e9:60:b7:e2:0c:74:01:5a:e7:27:84:44:96:f5:
50:a0:28:bb:cb:41:d7:64:63:26:bc:5a:e4:0e:05:
87:1c:ac:1c:11:6d:34:be:33:a5:81:c4:8b:55:65:
8f:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
10:90:2B:F3:AE:C1:65:FC:9C:C3:CD:72:AD:CA:BF:5B:BF:7B:7C:F4
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
CA Repository - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0
RPKI Manifest - URI:rsync://repo-rpki.idnic.net/repo/57c05521-0338-4f31-a209-4f878bef638a/0/10902BF3AEC165FC9CC3CD72ADCABF5BBF7B7CF4.mft
RPKI Notify - URI:https://repo-rpki.idnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.242.176.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:c7:74:7b:4e:51:4d:ab:72:06:66:e3:4f:f2:ec:eb:6e:12:
b7:02:86:c4:e4:e9:f1:b5:30:1a:91:54:7e:90:48:34:ed:c3:
d7:6e:21:c8:b7:cf:3c:68:5c:76:3a:a8:5e:90:59:88:b8:02:
5e:a5:42:30:a7:ea:ce:e0:13:71:b5:47:b3:e1:1d:cd:5a:4e:
56:95:4b:fd:7e:2d:5c:c6:f6:ed:da:83:1d:e1:4d:5a:51:48:
0c:b0:c8:0b:0d:2a:61:06:fc:36:a0:e4:6a:4e:27:fa:be:3a:
62:e4:3f:8a:32:96:40:de:39:ab:e4:12:20:26:1e:99:74:db:
f5:04:f7:98:e2:38:e0:5e:b4:25:7f:2c:0d:63:84:8a:28:49:
ca:3f:23:c9:f4:c5:3e:04:eb:10:90:67:b7:bc:24:d4:5a:07:
ff:a3:bb:10:87:b6:be:bf:ca:67:1f:2a:a8:15:a9:26:d0:65:
31:f1:a9:07:c1:7c:e7:62:cc:a0:cd:f8:01:9b:1f:78:09:50:
d7:f3:32:44:3a:bd:2c:25:a4:7d:bf:e1:1f:ef:3c:c1:94:6b:
ac:7e:5d:0e:41:22:a5:5f:df:c2:d7:0b:01:96:3f:f0:84:e7:
d1:65:7e:2d:1c:09:d9:6e:b0:64:8c:33:26:4a:94:eb:62:dc:
e2:42:c7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 13:19:37 2025 by rpki-client