Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0Q44sLejPvOhbhVDNAKYfW1njaE.cer
File: 0Q44sLejPvOhbhVDNAKYfW1njaE.cer (raw, json)
Hash identifier: lxHnck3qpBBf62pvxaAYfuB9lORWJEzZQwWh6xUtVbg=
Subject key identifier: D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C25E1EBC2AC92E2F35B19AD67350C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15847
IP: 195.20.198.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:25:e1:eb:c2:ac:92:e2:f3:5b:19:ad:67:35:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d10e38b0b7a33ef3a16e15433402987d6d678da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:6c:ee:b2:9a:05:85:f7:87:e2:e7:e9:ae:ea:
9a:ef:8e:7d:3e:62:f9:e2:d8:8c:c3:9f:71:c4:9a:
f1:98:dd:2b:f2:7f:3c:11:22:91:d4:4d:91:b9:d0:
02:0c:5e:1d:25:69:5d:64:eb:24:e8:75:2f:da:00:
fa:6b:e1:74:08:b8:7a:9b:4b:61:60:60:75:ac:07:
6d:3e:f1:89:31:c4:44:4e:c2:b9:d0:cf:6a:43:1f:
8f:7a:61:df:ae:f7:b4:1b:e5:f7:77:50:44:24:df:
17:ec:75:26:27:5b:71:0e:66:68:1d:e2:a6:84:11:
57:d2:07:0c:6e:72:ae:34:1d:d5:0d:5a:29:a5:fd:
16:f4:29:9f:8c:45:a3:f8:8e:dd:33:dc:73:cd:cd:
99:b2:21:08:a4:46:8a:b2:17:56:58:a2:9f:fa:44:
13:60:f8:ea:d3:5d:4b:ab:94:8f:9e:05:fa:49:5d:
58:05:0c:1b:d2:3c:90:a0:c5:99:bf:d9:3f:3a:73:
b9:02:af:57:94:13:d5:54:8d:96:12:23:c1:08:42:
01:f0:62:b1:64:54:23:63:45:40:7f:52:39:32:9c:
10:e8:48:c6:a6:cb:9d:cf:13:e2:10:4e:38:75:7a:
22:66:36:46:51:c1:cc:b3:48:48:6d:fb:d8:06:66:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0E:38:B0:B7:A3:3E:F3:A1:6E:15:43:34:02:98:7D:6D:67:8D:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/3fa09a-e874-4f34-bf45-2c0eda70666a/1/0Q44sLejPvOhbhVDNAKYfW1njaE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.20.198.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15847
Signature Algorithm: sha256WithRSAEncryption
5b:1e:62:bb:3d:54:67:eb:ba:49:6f:98:1b:f3:7e:8c:a3:8e:
c1:41:5a:bf:07:b8:25:c7:69:05:d1:6f:6a:f0:58:e6:6b:be:
57:c7:93:4e:f5:21:e7:c8:15:5a:53:88:05:a0:0f:07:79:03:
f5:c2:41:fa:e4:d0:2a:2c:ba:63:20:8f:5f:b4:19:89:ac:62:
e7:35:84:ee:0f:0c:a3:4f:92:f8:e0:ce:b0:0a:1f:7e:40:37:
9f:cf:33:b8:97:d4:83:77:44:2c:9d:1c:c6:71:20:0b:32:59:
12:fa:69:b7:cb:1e:28:5a:fc:e6:66:ea:05:bf:cf:a6:5e:d5:
43:87:04:40:c7:f9:4c:e9:11:b4:a3:da:33:8f:42:ec:0a:c4:
f6:a2:27:a9:62:50:4a:b6:3e:45:f5:38:81:e8:27:ee:d7:f2:
a8:39:6d:18:ea:dd:ce:08:ad:83:17:d1:ca:4e:c6:96:3b:3c:
b7:c4:1f:a8:4f:cc:63:f3:c5:81:64:cf:5b:99:91:f9:a2:ab:
15:90:a2:9d:f0:28:ad:c1:33:36:97:a9:9d:67:7a:ba:78:cf:
30:93:0e:21:1d:44:2a:d8:fa:28:de:b3:51:4d:1d:32:78:01:
37:dc:83:ae:cf:f9:4d:0c:73:e0:ee:07:70:ca:04:cb:21:20:
9f:47:b3:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:51 2025 by rpki-client