Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer
File: 0L1A7zQGZHFcjCz6UOPWG6KG4Dc.cer (raw, json)
Hash identifier: yPQZipP3hPbHx0EvYWsx8uUqwsBPrpx0Maxg+7e59WU=
Subject key identifier: D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420684670D79A4F4C6B20D3843DE4E995
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:12 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44823
IP: 193.16.152.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:46:70:d7:9a:4f:4c:6b:20:d3:84:3d:e4:e9:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:12 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d0bd40ef340664715c8c2cfa50e3d61ba286e037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:8e:7a:24:6d:57:0d:ac:26:cc:e5:35:77:f6:
cf:b1:e8:45:9e:cb:5c:85:38:74:aa:a5:e5:49:2a:
36:9e:6a:4a:92:6b:4b:a9:56:ca:6d:c5:cd:59:a0:
fa:fb:92:59:0c:9a:bb:f9:e3:7b:90:a8:84:96:d6:
b0:48:99:83:26:c2:38:b6:de:50:ae:55:63:fa:74:
b8:21:0a:a7:da:a3:d4:31:f1:60:50:69:d3:e6:4c:
47:94:fe:b4:20:28:e5:64:1f:6f:13:60:09:93:15:
1f:2e:3b:3a:01:2a:41:39:d1:ec:15:a7:15:7b:0c:
ac:01:43:90:ba:67:e6:ce:95:65:62:94:e1:38:bf:
ce:01:54:40:df:95:57:d0:03:36:8b:88:e8:c1:2d:
83:20:21:d8:b0:08:60:2d:30:9f:0d:e6:5f:dd:d1:
2f:6f:03:a9:e8:4e:4c:07:32:0d:26:30:b5:83:73:
e0:f7:10:24:82:5c:fc:12:24:25:e8:4e:e0:b0:2c:
fd:ed:bf:06:42:e7:11:33:1c:ed:0f:6a:e7:be:68:
42:1a:54:ea:96:5c:e3:c6:60:2d:61:85:20:34:d5:
ea:ef:8e:70:66:a2:e9:9b:97:0a:39:f2:b5:b3:a8:
b8:6b:05:46:f2:0e:d8:58:b7:e7:ae:76:62:0a:2a:
55:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BD:40:EF:34:06:64:71:5C:8C:2C:FA:50:E3:D6:1B:A2:86:E0:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/4d4d9c-fbaf-42fd-98aa-2cd09b577066/1/0L1A7zQGZHFcjCz6UOPWG6KG4Dc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.16.152.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44823
Signature Algorithm: sha256WithRSAEncryption
1e:d8:86:2d:5e:c9:07:f1:35:ec:1c:a1:11:4f:d7:91:89:e4:
00:19:8e:ce:9b:f4:07:54:9f:e1:c9:38:88:39:6f:91:a2:f8:
83:d3:3e:7f:fe:b3:b6:ed:9e:c1:cf:a3:bb:45:b7:21:41:cd:
4b:15:fe:14:40:15:be:9b:e7:34:13:22:87:d6:3d:b1:f6:c0:
e3:87:b6:c6:d2:ef:55:52:f3:c1:3f:37:22:7e:70:0b:42:ca:
36:c0:9d:c1:b6:9f:70:4b:af:e9:7e:63:5d:97:04:67:91:67:
c2:35:17:1f:0f:3c:98:42:bc:32:72:7e:00:c1:de:28:76:cf:
70:ec:c5:d7:8e:f8:68:f5:53:e7:22:c0:c8:ea:46:8f:ce:f7:
43:27:fe:21:5f:af:96:5e:48:db:4d:dc:b2:18:61:69:98:ad:
dd:26:ca:4d:cc:b7:e9:c9:4f:d4:f0:35:ab:20:34:42:a0:21:
b3:10:95:6f:62:a7:3d:de:57:07:cd:de:eb:2b:8b:6b:22:24:
2d:19:6e:54:7b:68:90:f0:f1:3c:ff:c6:7c:06:04:98:f8:6f:
6f:2f:63:4b:4e:c0:d9:a7:c6:77:c3:a6:f0:1d:49:84:f0:7b:
82:80:62:b3:dc:b8:91:f0:92:59:f7:67:37:6a:25:5f:71:d2:
64:ca:0b:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:51 2025 by rpki-client