Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer
File: 0rNq0o5SHtq0tN6jSaJ3ctSyp74.cer (raw, json)
Hash identifier: P3Wl/4bXtvCJp7Oer1VG6wGJPCHVRy96oZ+lGY7aShY=
Subject key identifier: D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B22E6E2014EC7F91AD061BAD503348
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:32 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43487
IP: 91.240.180.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:2e:6e:20:14:ec:7f:91:ad:06:1b:ad:50:33:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:32 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2b36ad28e521edab4b4dea349a27772d4b2a7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:14:d3:6a:78:c7:e8:d2:ba:87:29:5a:8f:62:
ae:34:d1:b3:5d:ae:0a:37:12:53:1f:8a:0b:29:f9:
1e:35:2d:e6:43:bd:97:8e:bc:80:1a:df:32:b2:7f:
73:9a:4e:40:f4:42:7e:ab:18:57:52:dd:2b:83:2d:
45:cb:32:ac:05:76:ca:9b:c0:ec:e3:fd:23:d1:71:
af:56:73:95:01:56:47:e6:d9:8c:b5:4c:4d:bf:09:
26:71:ec:f3:11:1f:34:da:f1:be:94:2e:c6:bf:1a:
45:aa:30:f8:96:b0:3c:68:be:32:3c:cf:fe:f6:79:
55:bf:b8:73:7d:f8:0e:c4:22:4c:ee:8b:d1:64:73:
0a:20:24:39:af:b1:74:06:4c:b7:ed:51:aa:d4:d7:
64:81:1d:22:d5:51:5d:0f:66:ab:44:7f:47:f9:7f:
eb:45:be:51:26:6a:8f:06:73:42:28:33:c5:8f:eb:
dd:d3:e1:c0:5e:f3:2b:20:50:c9:ee:4d:95:0d:79:
f3:68:d8:71:b2:6e:89:53:8d:2a:03:7e:0d:44:23:
e8:c9:91:ef:68:62:ea:6a:6e:1c:a0:52:67:23:51:
4c:4d:51:b9:3e:55:3e:68:ee:44:e2:e1:96:e3:6d:
9b:3c:cb:f1:ff:9a:ee:5b:3e:38:aa:f4:b3:ab:17:
1b:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:B3:6A:D2:8E:52:1E:DA:B4:B4:DE:A3:49:A2:77:72:D4:B2:A7:BE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3a9a0b-d424-4eca-a938-92a877bb19f7/1/0rNq0o5SHtq0tN6jSaJ3ctSyp74.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.240.180.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43487
Signature Algorithm: sha256WithRSAEncryption
6d:2a:78:ad:6e:5e:d9:3c:1b:bf:0f:ab:77:07:ab:ea:cb:5c:
5b:b0:15:11:7a:04:f6:59:23:22:91:93:ac:12:8e:4b:f8:2f:
03:f3:10:7e:0b:f4:34:f8:05:7d:74:2b:52:53:cc:87:02:46:
39:32:fd:cd:43:a1:45:38:42:fb:c6:62:77:57:94:9a:74:4b:
d5:c5:f9:b7:41:8d:01:91:3c:f0:3c:fa:ed:c3:ac:43:88:7a:
ac:6a:a4:bb:c7:ec:6b:6b:6a:e2:5c:37:5e:5a:6d:a9:22:86:
7a:2f:2c:84:c6:cb:e0:b0:1d:3f:be:91:62:91:1f:85:8a:ad:
b5:e3:50:13:3c:05:ce:e3:0a:02:ec:4d:c9:39:0e:33:30:f4:
cd:71:ee:81:c6:c0:05:bd:c2:a5:ed:89:5d:29:8a:28:5b:5d:
62:39:9e:85:5d:d3:05:09:81:71:db:dd:5d:2f:0f:93:82:54:
6d:b5:9d:f4:b5:1c:a5:09:d8:b6:04:6b:64:74:25:6b:2d:70:
8d:77:66:81:16:ed:7c:7d:2d:a0:1f:a6:9c:7f:14:67:33:0f:
17:2e:fe:7a:ab:03:1e:07:32:9a:81:8d:bd:35:76:48:2e:6b:
b5:04:1f:18:ef:70:a6:0f:6e:d7:24:bf:a3:e5:7c:c0:3a:03:
d9:2a:47:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:48 2025 by rpki-client