Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1AjPCbarAFupM7KnpKbSfqa7cso.cer
File: 1AjPCbarAFupM7KnpKbSfqa7cso.cer (raw, json)
Hash identifier: CFRon05tG8nB7OABFUjyfn5LeEJ9tpkq00ghTI8vhdg=
Subject key identifier: D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA73323E29E28C9A312B057ECEE847
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213066
IP: 193.163.1.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:73:32:3e:29:e2:8c:9a:31:2b:05:7e:ce:e8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d408cf09b6ab005ba933b2a7a4a6d27ea6bb72ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:df:ff:8b:7e:b1:7c:69:f5:8e:cc:76:b7:ec:
77:b9:a9:59:7f:7b:ba:88:0e:ef:9e:6d:2c:b6:04:
b7:df:27:2e:f8:ea:88:25:d4:fc:8c:2f:1b:a3:3e:
e1:1a:f9:95:73:8c:f4:81:f4:50:30:dd:89:56:e9:
ca:4d:f4:6b:6a:28:74:18:9e:65:f2:51:48:2b:dd:
5a:46:e0:73:a7:3a:44:c6:20:83:8e:c9:f1:c8:e7:
d2:d1:c3:2a:89:34:b1:12:39:8a:84:c8:c3:81:57:
1a:bc:f8:df:2d:f6:da:60:63:2d:03:88:56:44:4f:
f0:d1:ff:8a:fa:e1:55:97:fa:a5:21:f0:64:10:49:
a1:03:71:00:a4:13:40:8d:b3:8e:da:e3:75:d8:b4:
ac:a5:7e:5d:bd:cb:38:e9:a6:e1:e1:49:3a:1b:f8:
22:22:9a:55:2c:74:2b:2b:64:b2:79:1b:fa:b8:cd:
0a:d6:07:08:63:06:8b:2d:ed:a0:bd:d5:c1:bb:d0:
67:7b:15:cb:4e:49:ac:19:ed:96:a1:61:0c:fb:0e:
2f:3d:4c:5f:ae:67:7c:cd:c6:fd:c8:bf:41:1f:e1:
58:e4:ac:5b:1e:b7:11:50:d4:e7:0e:98:ae:5e:3c:
de:8c:60:6b:e2:35:51:c0:03:1b:a4:d7:62:38:84:
6b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:08:CF:09:B6:AB:00:5B:A9:33:B2:A7:A4:A6:D2:7E:A6:BB:72:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/a6d124-04e6-4def-a16b-d652368299d5/1/1AjPCbarAFupM7KnpKbSfqa7cso.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.1.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213066
Signature Algorithm: sha256WithRSAEncryption
19:62:e2:9e:d5:d2:66:1e:1c:74:35:c6:ff:a5:0f:d6:f6:76:
9e:b3:be:14:8c:f4:86:71:30:93:2b:8c:85:87:01:94:12:7a:
94:b8:cc:e5:28:c2:7c:94:f6:2b:1e:66:0b:e4:e3:dc:83:76:
11:d4:90:f3:e7:c1:6b:05:e7:91:ff:89:4c:99:07:d8:3c:81:
3b:a6:ae:a3:21:a3:ca:4c:d7:74:a9:1e:0e:1c:95:2f:ab:b2:
38:bb:35:1f:5b:5e:3a:7e:53:99:83:3b:4c:5f:64:81:73:68:
85:7b:8e:5f:b9:d5:b8:a3:08:20:9c:d2:ef:f6:5c:1e:12:be:
b0:b8:3c:85:0f:98:3a:e0:33:87:af:88:1c:fd:17:c2:3c:74:
3a:b5:7d:97:5b:bb:4f:c3:7a:40:d4:c0:56:d3:c5:c2:c7:69:
0a:42:66:1d:da:e6:c4:89:3e:53:68:e9:02:a4:74:0f:d5:73:
8f:f9:e0:f7:64:55:e4:96:88:23:88:13:e5:3a:be:39:6e:55:
9f:1c:52:3b:02:52:89:80:ba:72:f5:e0:ad:ae:95:0d:46:fd:
08:6b:27:8f:3a:a2:73:2d:69:54:cc:37:fb:0b:d0:06:f1:7a:
68:fa:c8:b9:78:81:13:cf:78:55:28:27:71:49:8f:b0:f8:ed:
74:8c:3f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:42:38 2025 by rpki-client