Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer
File: 0t1N3VNvGKhyy6wV5YlUKu3NBzc.cer (raw, json)
Hash identifier: zvkM1v0Kk6/bImcX9GWLf4yvvHePuKrjASP8SASzFVg=
Subject key identifier: D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB0DA3CB162F28C8EEE63F236D844A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 58121
IP: 193.176.97.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:0d:a3:cb:16:2f:28:c8:ee:e6:3f:23:6d:84:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d2dd4ddd536f18a872cbac15e589542aedcd0737
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:7c:fc:5b:93:d9:75:34:42:85:95:fa:2c:fe:
7e:d1:97:9d:3c:4f:0c:28:35:e1:b9:89:02:fd:bd:
be:ae:1a:93:b9:a1:e7:f4:59:1a:4a:29:42:3f:fb:
09:b4:0f:67:aa:15:5f:5a:5d:4b:eb:7c:7b:63:28:
19:4a:30:7f:20:43:54:c3:d5:c2:8f:ba:08:3d:03:
d8:a4:f3:bd:45:af:b9:82:88:d8:99:f7:3e:29:0a:
88:f3:82:7b:b3:06:3b:c9:82:7b:80:19:0c:3f:7a:
0b:10:49:6f:d0:b8:fb:78:04:99:fa:f6:ed:c8:3e:
34:46:43:95:04:d7:00:d9:99:4b:32:74:aa:a8:6b:
56:24:0b:4d:05:ec:18:69:5c:f9:eb:a3:b3:00:6c:
44:76:7e:80:e6:9a:81:df:86:36:12:6e:4d:fd:16:
69:f4:f2:c6:8f:2d:56:f7:74:b4:36:92:ba:af:65:
73:49:de:e1:05:62:82:6f:cb:58:c4:eb:72:43:be:
09:13:a6:a7:32:f7:9c:11:09:36:1f:f8:6c:e6:af:
08:69:36:38:42:f0:7f:d6:23:38:0a:a9:1c:bc:d1:
df:e5:2d:aa:2e:dc:fc:49:a8:1b:44:4e:bc:92:fa:
5c:65:49:dd:75:f0:16:c4:2f:95:1e:7b:8b:56:8d:
99:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:DD:4D:DD:53:6F:18:A8:72:CB:AC:15:E5:89:54:2A:ED:CD:07:37
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/eca01c-5232-47c5-b014-5b132f7d3b49/1/0t1N3VNvGKhyy6wV5YlUKu3NBzc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.176.97.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
58121
Signature Algorithm: sha256WithRSAEncryption
4b:94:b8:c3:03:00:ff:ac:5c:92:1d:46:ca:cb:ce:a7:ff:8f:
89:18:26:da:bb:6c:63:8a:aa:0d:1c:e3:d8:b1:98:88:af:58:
a9:21:66:95:65:1f:b1:43:1c:66:e0:32:73:e8:03:45:ef:04:
16:9a:50:fa:92:38:e1:43:1a:a4:ae:15:17:10:5f:4f:ed:87:
c9:39:78:2a:b0:c8:e4:99:5c:db:36:b0:88:90:a1:24:b5:52:
4d:64:ea:52:87:2a:1d:df:6d:b1:2d:a8:9c:4e:b8:bf:8d:bf:
9f:bd:f0:6f:6c:4a:84:77:d6:cc:be:bc:7a:1e:fe:9e:70:05:
ad:81:88:ea:11:42:24:07:c0:25:0b:2f:c1:af:5e:74:01:f1:
78:8c:e5:fc:38:0c:47:3c:b2:c4:b6:6f:57:b4:88:30:99:b6:
1b:03:69:8d:fb:0b:ff:50:67:ff:6b:e3:08:51:6c:96:34:28:
30:c8:94:ff:68:e7:7b:84:76:5c:d0:22:a4:1d:f3:e7:f5:7e:
46:73:2a:7c:28:24:b0:a3:be:db:a3:24:fe:7b:eb:a8:d2:d4:
9d:47:16:3c:bb:6d:06:6a:b4:35:ce:52:ea:2f:0b:3a:a5:4d:
b9:c6:94:4f:88:dd:0a:aa:e7:94:d6:3a:92:00:f9:15:a8:ab:
2b:68:59:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:39:30 2025 by rpki-client