Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0elpYhQkgMux04QRdx60_z45g58.cer
File: 0elpYhQkgMux04QRdx60_z45g58.cer (raw, json)
Hash identifier: yBNXjw4j3VKoEeRI2+o20tfchxE6oLamNswOQdAts6U=
Subject key identifier: D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5D5A22CFB08B13E91FC1C1EDBDE47
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211057
IP: 185.203.66.0/24
IP: 2a11:a40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:d5:a2:2c:fb:08:b1:3e:91:fc:1c:1e:db:de:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d1e96962142480cbb1d38411771eb4ff3e39839f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:9f:61:13:a4:3f:13:08:57:1c:9d:90:22:22:
b6:61:3b:65:eb:be:ca:e8:91:fc:42:4d:8b:bb:27:
32:d2:c3:3b:46:04:34:4c:c0:20:fd:9f:b2:c7:5d:
ad:17:9f:11:bc:ec:5d:53:64:8e:0a:72:6d:d8:98:
a8:f5:21:04:23:00:0c:c7:a2:4f:fe:ec:55:84:da:
3c:2c:db:b3:3e:9e:15:31:bf:d7:b4:99:58:8a:65:
e5:58:19:3f:21:79:20:32:97:2b:b4:ac:94:d4:aa:
2f:0b:9f:bf:9c:66:99:aa:3e:52:94:d1:b3:42:0f:
f0:1f:b2:b9:b3:3b:ef:ac:9b:2e:f9:cb:27:e4:5f:
1f:4b:21:d0:ba:5c:af:f3:f4:43:85:74:c0:8a:e4:
c7:b1:46:c9:32:56:d7:3c:af:05:13:f7:d5:52:65:
cc:1a:d5:ac:58:d2:98:c9:58:54:3d:6a:70:f7:cd:
1a:0a:4b:10:67:ab:1b:1a:08:67:bc:31:4b:50:3c:
f5:45:96:76:70:6e:6b:30:4b:aa:d9:f2:6e:ad:8f:
46:86:0c:9f:ec:14:75:e4:0f:dc:4e:37:5b:e6:82:
26:70:82:4e:60:64:ec:6a:ec:81:41:14:36:3b:ab:
0e:14:8a:f8:87:9a:68:6d:62:ff:a1:24:dd:32:a2:
46:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:E9:69:62:14:24:80:CB:B1:D3:84:11:77:1E:B4:FF:3E:39:83:9F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/2c7499-cd42-4321-bc40-88f641688e0f/1/0elpYhQkgMux04QRdx60_z45g58.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.203.66.0/24
IPv6:
2a11:a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211057
Signature Algorithm: sha256WithRSAEncryption
85:94:23:4c:91:c5:e1:a6:63:f7:5f:bd:4b:53:6b:70:6c:e1:
ef:91:e1:5d:af:f2:b8:c4:71:43:57:78:c0:17:4b:73:40:ea:
92:4f:e0:21:0c:85:66:5f:d6:14:b6:13:9a:f0:cb:4e:9d:de:
e2:d3:db:04:e7:d7:e1:e1:e6:89:2c:42:dd:e1:13:d8:c3:52:
25:bc:7a:f9:ab:1d:ae:ad:ae:da:57:88:00:f1:12:d0:4c:f7:
54:76:18:a2:2e:b8:25:e6:97:18:44:81:8b:77:cc:f6:14:62:
45:94:d7:12:72:e2:50:00:f5:35:9b:29:69:bc:5a:45:68:c7:
08:5e:13:ef:47:a1:d9:ca:27:c9:0f:73:e3:a0:28:53:59:f5:
a1:7b:5f:79:c9:3c:d7:c8:db:fa:7f:4d:c7:82:4d:fb:21:df:
b8:c6:31:b8:fc:ba:13:bf:a1:ae:a7:3f:09:eb:b6:13:93:48:
33:77:b7:fd:cb:4c:a0:d3:f9:9f:ed:1b:38:04:4e:d8:91:df:
df:57:07:4b:4e:8e:f9:67:3a:c8:14:ef:da:41:18:9c:0b:8c:
47:d3:cc:2a:00:bf:77:61:65:98:7d:fa:e3:b5:d4:f8:1f:ce:
e6:4b:fa:20:54:b0:6d:ac:aa:da:f1:e7:43:70:3d:83:19:37:
b7:eb:10:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:19 2025 by rpki-client