Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1R31-9viXy1eU4x53RjD1sQualU.cer
File: 1R31-9viXy1eU4x53RjD1sQualU.cer (raw, json)
Hash identifier: o0aPzoIKhdOOOIuyu0m8VGLXpEL91VlXw87QY+GdBe4=
Subject key identifier: D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427488777D2A4D3937897D4DCA17D527A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205377
IP: 185.220.156.0/22
IP: 2a0b:f5c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:87:77:d2:a4:d3:93:78:97:d4:dc:a1:7d:52:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d51df5fbdbe25f2d5e538c79dd18c3d6c42e6a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d2:3b:82:14:40:a3:b2:3f:44:02:c4:9f:1b:
2a:27:c4:b8:45:89:06:47:06:6e:56:a4:56:e8:bc:
18:07:0f:e4:68:9d:79:5e:42:91:a1:ac:78:a4:49:
ec:9a:e6:33:bc:a2:73:ca:69:7b:d9:33:8d:95:5c:
66:7f:d7:8a:38:f4:34:71:18:54:b5:66:4a:92:e3:
c5:69:91:ce:7a:0f:79:39:08:f3:3c:85:63:44:db:
d9:0a:89:23:4e:14:c6:02:ce:e1:d2:44:53:61:29:
9e:8c:58:d6:19:78:0b:55:e7:31:7f:9f:52:8c:bd:
ab:9e:38:25:7d:68:d8:3f:0f:f6:56:09:39:7a:53:
b2:51:42:a4:7e:2d:7a:9c:88:a6:d4:fe:cf:ee:0e:
82:c6:9d:b1:1d:d0:ea:b9:74:2a:ef:3e:bb:b9:28:
41:7c:08:b1:1d:e5:e5:dc:9a:eb:96:b0:53:0f:a2:
f3:34:41:d7:90:16:7b:28:b7:b0:ed:df:d2:f6:53:
9a:78:2a:f4:6c:a2:9c:a1:60:22:26:7d:6c:42:fb:
e8:87:45:01:ce:ef:f2:3e:f8:55:a1:7d:e4:f1:87:
cb:0a:e1:14:02:59:59:7f:6d:e0:0f:3b:70:35:ec:
d6:9b:41:c4:1f:ed:ca:ff:32:66:4b:61:5b:ae:2d:
7a:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:1D:F5:FB:DB:E2:5F:2D:5E:53:8C:79:DD:18:C3:D6:C4:2E:6A:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d49aaa-ee08-4b04-8e83-6df1e0bf1593/1/1R31-9viXy1eU4x53RjD1sQualU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.156.0/22
IPv6:
2a0b:f5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205377
Signature Algorithm: sha256WithRSAEncryption
98:4e:66:d0:d3:e5:4b:2e:12:a2:99:97:fb:99:89:f0:fc:8d:
41:14:ab:87:26:fa:38:60:05:50:5c:56:59:96:d8:9f:e4:59:
eb:24:d4:2e:12:e2:f7:35:d3:5e:48:9d:c9:5d:eb:e5:61:25:
bf:f1:1f:05:33:5a:8d:9d:68:b8:e0:c9:26:cc:c8:a5:5d:12:
4f:4b:88:93:b6:a7:df:93:01:71:83:ee:f1:37:29:8d:ad:2a:
48:e2:96:e5:61:d1:65:a0:b9:71:2f:22:e4:43:f8:a1:76:84:
f6:12:1c:f2:3b:bb:8d:3c:9c:e7:bf:69:65:9d:1d:f2:f6:ce:
9c:66:25:8d:b7:db:ab:39:bb:a0:00:42:d1:4d:3b:1e:c6:1f:
e8:75:24:8e:5d:06:0a:45:a9:ba:18:3d:f1:8c:ae:0c:28:c3:
c0:73:55:b1:b7:a2:39:9e:e2:b5:40:68:2a:57:c6:0b:8c:d7:
15:60:a0:13:d4:4c:da:55:a9:e6:90:13:4e:54:3b:55:8d:6f:
a5:b3:27:12:96:54:b8:9c:92:d8:75:8b:11:ac:27:df:d8:44:
6d:b4:3c:01:27:15:fc:c5:73:51:48:e3:d3:26:f4:29:ab:4c:
97:ba:41:c3:25:08:1b:00:d7:ed:40:04:6d:b7:31:3d:8f:2e:
52:6b:79:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:18:24 2025 by rpki-client