Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-jDy9nL7VLpJd8bhpronExwjH_I.cer
File: 1-jDy9nL7VLpJd8bhpronExwjH_I.cer (raw, json)
Hash identifier: ITEWmkC2UD8EttvtNYM6R6/G4XGjNkDjWtWjm05+dFY=
Subject key identifier: FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D771D67866DB4A6A2AAC45FFD14564
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214759
IP: 2001:67c:2c1c::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:71:d6:78:66:db:4a:6a:2a:ac:45:ff:d1:45:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fa30f2f672fb54ba4977c6e1a6ba27131c231ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:9d:ca:28:56:fd:02:5c:91:76:d7:4c:92:81:
d4:bb:8f:6c:31:e7:25:56:74:ec:e0:6b:0a:c6:b4:
43:a4:f3:42:35:ab:21:ba:95:36:0e:1d:28:ef:ed:
ce:a0:78:d4:03:7a:40:cd:3d:7d:13:3a:b6:3f:7b:
ed:04:e6:7b:6b:f3:f7:8a:64:30:2c:01:f4:f1:05:
95:b2:05:95:20:a5:da:ca:ea:e2:30:ba:10:ae:3b:
f1:83:9b:81:77:6e:b5:fd:45:df:38:81:b1:c9:ee:
b9:f0:1d:c1:52:66:dc:d5:70:d0:99:c9:87:52:a3:
51:78:99:95:e5:5a:21:1d:a6:1c:60:57:bb:38:2d:
5c:3e:6a:2b:90:33:b2:7e:5b:69:4e:54:cb:3b:8b:
82:97:43:e1:aa:f9:6a:72:a1:33:f0:29:32:2c:a5:
af:a8:d0:73:9c:fa:30:23:f1:15:5c:cb:a3:10:af:
db:f3:03:d7:79:58:b2:5c:d9:0b:6e:32:9a:b1:c0:
97:90:04:50:64:f5:69:f2:27:cd:e9:a4:2f:a2:63:
b0:61:84:fc:e4:d8:a5:60:2c:af:29:e3:ef:88:a4:
0d:90:c6:7f:a4:46:a2:41:fe:65:a5:ac:bc:3c:c6:
2e:c7:e6:56:00:09:51:0f:8f:c2:80:5f:a7:37:59:
a0:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:30:F2:F6:72:FB:54:BA:49:77:C6:E1:A6:BA:27:13:1C:23:1F:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/1968d0-faf1-4e37-ac88-d404b480c567/1/1-jDy9nL7VLpJd8bhpronExwjH_I.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:2c1c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214759
Signature Algorithm: sha256WithRSAEncryption
33:59:2b:8e:fb:4f:af:26:17:ac:04:93:f4:51:b9:a8:b7:de:
06:6d:0a:63:c1:8d:2c:28:c9:31:25:53:39:fa:8b:81:70:6a:
2a:fd:6c:fd:41:43:22:ee:22:7d:33:71:3d:6e:b1:f2:b7:10:
4a:37:f0:ac:f1:99:be:62:b4:04:13:cb:90:8a:ff:c2:05:99:
47:e5:a4:3e:2d:41:58:ec:b8:f4:37:96:c7:2f:46:bf:f5:f5:
c7:a4:21:77:5c:ea:3c:3d:8b:e5:ab:09:f8:48:a9:f9:18:25:
d5:c1:83:9b:34:6e:8e:26:c4:b7:7a:b6:f6:03:ad:0f:aa:b6:
85:5d:6b:49:fa:49:63:ff:64:e9:20:76:bc:ef:80:de:35:f3:
0d:9a:4b:85:62:a0:99:b2:fc:61:f3:2d:b3:37:4a:bd:5a:3e:
91:2d:ff:13:22:91:39:ba:56:de:84:f6:70:2d:5a:7d:41:a0:
93:bc:89:99:25:d0:93:d0:c9:c7:4e:15:59:03:d7:7b:d5:4d:
31:f9:59:c8:da:33:02:6b:d7:2e:30:0a:b3:5a:26:ea:2b:c8:
dd:22:e0:77:b5:ba:af:8a:0a:7f:aa:6e:c7:35:42:73:e5:17:
c8:d1:9f:04:3a:e0:b6:00:9c:0c:0f:d9:0a:19:62:81:a9:6d:
54:bd:79:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 17:00:54 2025 by rpki-client