Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-BaGWSju7uXLyS9MTTiuXGAd7go.cer
File: 1-BaGWSju7uXLyS9MTTiuXGAd7go.cer (raw, json)
Hash identifier: tUvom4i3LzZDs+rHmwnFZ8LQlwF/pEwJRwb2nc3nL70=
Subject key identifier: F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194206876A9A7A32A9E65E882EC6E66A753
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34507
IP: 91.209.213.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:76:a9:a7:a3:2a:9e:65:e8:82:ec:6e:66:a7:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f816865928eeeee5cbc92f4c4d38ae5c601dee0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:52:48:32:6e:83:5b:40:47:4a:97:6e:e5:6f:
bf:e1:3f:fc:62:10:e3:09:60:5f:91:47:c7:df:f8:
1c:13:a7:60:bd:0a:1d:f1:ce:fc:88:ed:e3:62:5c:
01:7f:2f:0c:30:07:37:3e:98:b7:bb:dd:a3:a5:9a:
63:96:ba:82:4a:31:80:79:91:12:1e:3e:59:db:d2:
7e:e9:22:93:a9:d6:58:1b:a3:0e:f1:4c:e2:45:2c:
85:0a:11:89:a2:da:87:4f:7f:08:4c:0b:6f:63:32:
43:cc:8e:d7:06:b6:d5:05:51:30:11:e9:5c:36:8b:
8d:b8:5d:02:11:49:19:9f:46:c2:72:a9:8d:2e:8f:
95:ac:18:07:46:16:c6:7a:62:fc:55:ed:64:6b:1f:
50:b1:dd:a2:2b:2c:92:00:32:c3:ae:ff:d2:3a:cc:
d3:30:42:87:c9:f3:02:d1:6e:50:09:0f:cd:b7:97:
82:25:8f:ee:a2:7f:a4:70:75:f6:5d:f4:1d:e0:80:
6c:7d:99:a0:39:93:4a:ac:df:08:51:f1:b4:e6:02:
e3:78:6e:04:9b:f7:7b:ea:34:f0:5c:09:27:76:c6:
f2:14:1b:a5:e8:57:46:7a:59:58:02:d8:36:cf:95:
ba:6f:e3:4f:5f:d4:57:72:f1:41:fb:a4:e3:b5:0b:
88:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:16:86:59:28:EE:EE:E5:CB:C9:2F:4C:4D:38:AE:5C:60:1D:EE:0A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/68b1bf-8f48-4169-a9a2-5dac720223ab/1/1-BaGWSju7uXLyS9MTTiuXGAd7go.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.213.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34507
Signature Algorithm: sha256WithRSAEncryption
79:f5:c2:62:2d:c6:4d:02:db:1d:e7:f3:57:c6:06:cf:bd:48:
e8:b4:b2:e2:31:d9:d7:9c:fe:21:98:a5:10:9f:d1:23:23:2b:
c8:ec:d3:5d:e2:b2:7c:ee:8a:13:e3:e8:21:be:cb:99:ec:9e:
16:ad:85:75:c4:9d:99:bb:8f:30:21:82:07:e1:1e:3a:5b:23:
e5:99:d4:ff:50:50:0b:97:2d:40:c7:90:35:61:ba:03:06:8a:
12:82:46:d9:a5:a4:e9:e0:c1:f1:54:88:60:cf:18:ea:9b:6e:
65:91:ff:ad:12:2c:1a:2e:d2:51:6e:fa:3e:74:d1:27:c5:bd:
e1:12:fa:0d:be:1f:d2:49:7a:7c:2f:ee:d1:b8:3f:c0:6d:84:
5b:fa:0a:d7:16:75:2c:51:1c:8a:64:51:b8:ec:f1:ab:19:aa:
a8:48:1c:7e:7b:2d:64:c8:64:fd:e1:18:65:7d:df:c7:e6:0a:
6d:0b:8d:6a:8a:0e:d8:b6:9c:55:e4:58:7b:8b:11:f7:de:00:
6e:43:68:93:c1:a0:9e:74:44:ec:3d:69:cc:8d:0d:bd:91:d0:
cf:75:98:25:a5:cd:5e:e4:3f:ac:95:ae:3e:80:3c:f8:f3:fc:
0e:a3:40:20:36:ab:85:bc:a9:3d:aa:ce:13:71:61:12:a0:03:
59:7e:2b:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:34 2025 by rpki-client