Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04m0GNo0qjk07N4rcx3x1O1-yA4.cer
File: 04m0GNo0qjk07N4rcx3x1O1-yA4.cer (raw, json)
Hash identifier: 6OxoCkjXBR8Dj0VJOKOQaFHk3HIlvOM5kJBhibdJNR0=
Subject key identifier: D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942445938D58BCAE95CB7AB2F1D953EB55
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212523
IP: 5.133.115.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:93:8d:58:bc:ae:95:cb:7a:b2:f1:d9:53:eb:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d389b418da34aa3934ecde2b731df1d4ed7ec80e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7f:7e:08:fe:1b:fe:6b:e1:5d:8b:8e:72:97:
5f:e0:32:72:dd:20:d7:87:b6:ef:28:22:aa:05:38:
65:49:56:d7:1c:bc:c2:b3:ae:72:d3:17:81:e3:ce:
68:40:48:d4:43:a3:6f:a4:05:78:1b:af:d9:fe:0e:
f7:11:6a:db:43:23:5e:eb:ba:ba:9e:f5:28:2d:ac:
95:30:dc:18:4a:19:ca:7b:c3:c5:96:04:b0:f8:3a:
e1:3b:6f:ec:a4:21:bd:62:2b:28:b3:83:49:21:e2:
a9:a4:7c:5f:14:ac:01:4d:e8:9e:9a:ac:e7:89:1f:
d6:fe:cc:a9:08:f5:f4:ec:66:84:4d:64:99:2b:39:
b7:6b:24:7b:e3:5f:ff:51:96:52:12:dc:27:e9:f4:
04:cd:c3:df:65:8f:c3:29:83:0d:e7:f0:07:6d:31:
54:58:37:1c:78:51:29:d1:fc:f5:3c:cf:0b:e5:d1:
ff:9c:56:13:1f:83:54:11:9c:43:6e:00:1b:90:5f:
3c:4f:0f:65:cb:d8:bf:20:be:9a:27:3f:df:c2:27:
bf:f3:30:6e:65:66:a4:65:fb:12:44:18:7c:71:19:
63:df:14:ce:cb:27:7c:6c:37:41:32:cb:02:26:c4:
44:ff:50:f2:bd:db:84:3b:1f:4a:f7:65:5e:18:40:
7d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:89:B4:18:DA:34:AA:39:34:EC:DE:2B:73:1D:F1:D4:ED:7E:C8:0E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/d47163-80ea-444a-a79f-03aa29b6a76a/1/04m0GNo0qjk07N4rcx3x1O1-yA4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.133.115.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212523
Signature Algorithm: sha256WithRSAEncryption
02:03:83:64:a4:fe:95:67:cf:ed:98:5a:50:4b:54:cb:2f:7f:
f1:9e:51:86:a7:16:56:67:b7:e4:04:fb:13:10:6e:ad:66:be:
61:37:7e:0c:5d:2b:5b:a0:72:6b:ab:34:50:fa:32:bb:a6:32:
bf:f2:c0:b4:c9:4d:7e:f6:26:e2:30:05:ab:90:5e:eb:a4:b7:
a6:c0:4e:78:9d:1c:1a:5b:8f:e5:ed:ad:e8:b9:75:78:2f:81:
6c:d9:96:3b:b0:f7:30:7f:7b:f6:6f:a1:c7:ce:9b:e3:83:73:
dc:82:b1:30:92:2b:0c:37:ba:fa:e9:ff:4c:03:3b:a8:ce:be:
a1:13:5c:e9:06:18:96:b1:0b:1f:5b:a2:a8:64:56:88:ee:a6:
0d:cf:60:f6:8c:e2:43:ce:e6:df:e9:db:c4:60:02:6f:cf:2e:
c2:89:75:52:af:13:8d:30:61:f4:3b:74:c5:7a:f2:55:28:16:
09:cb:57:7e:c1:ed:11:ed:50:09:e2:e7:af:37:57:33:22:1b:
16:71:f7:52:52:f8:a4:b8:2d:88:6f:bb:cc:c3:e4:e6:cf:7f:
80:84:9b:34:8a:a6:37:ef:0d:a2:e7:f7:83:3f:cc:6e:8c:54:
6e:be:84:1b:ce:d3:bd:60:39:1f:88:2f:e1:86:e9:2d:6c:fc:
ad:fe:fa:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:33:17 2025 by rpki-client