Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2hRDVmHw7j5o-ph9D0oUNBvh_oU.cer
File: 2hRDVmHw7j5o-ph9D0oUNBvh_oU.cer (raw, json)
Hash identifier: KYcDm/S9Lq/WRFxiIbK5DllYPHrozNdlwPfDw63dHL4=
Subject key identifier: DA:14:43:56:61:F0:EE:3E:68:FA:98:7D:0F:4A:14:34:1B:E1:FE:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1BEBFD82C49A3EDC8B8FD84889B16
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/1/DA14435661F0EE3E68FA987D0F4A14341BE1FE85.mft
caRepository: rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/1/
Notify URL: https://rrdp-rps.arin.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60301
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:be:bf:d8:2c:49:a3:ed:c8:b8:fd:84:88:9b:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da14435661f0ee3e68fa987d0f4a14341be1fe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:82:cc:2c:34:43:ca:66:ab:00:f6:33:fd:52:
2d:8f:24:b7:14:8e:c6:bd:8a:b1:f6:ea:d4:af:c0:
bc:f0:10:87:83:4c:94:96:77:69:a0:a4:12:c4:9a:
4c:9d:43:3d:93:b9:b1:8b:35:4b:88:ce:d1:be:38:
41:bf:fb:82:b0:d8:35:f8:17:8b:6e:90:06:60:31:
03:39:3b:91:91:b8:6e:c8:a1:23:e2:f1:98:b9:33:
eb:23:a1:bb:bf:91:d5:5e:22:1b:d4:e4:01:c7:c8:
fc:d0:64:93:3f:98:7a:c7:d7:af:9f:e4:28:b1:87:
7e:13:08:e6:d3:05:38:25:8d:be:2f:c1:16:21:ab:
e5:06:c2:60:2b:94:f1:4f:93:93:a2:c6:36:a8:ab:
f0:9e:ad:c4:f3:af:40:c2:c5:00:1c:9b:e5:d1:e2:
de:f7:f3:d5:27:bf:af:27:68:0d:9e:0d:2d:15:b3:
30:ce:db:b7:b3:38:a2:ac:e7:de:be:0a:e1:61:be:
72:85:86:0c:9d:72:be:ca:0a:42:d7:c9:d3:fb:9f:
32:4b:80:e4:0d:1c:d5:c9:fe:f9:b0:06:53:bc:8c:
1a:09:53:a1:5b:54:66:0a:5a:13:33:21:a4:71:5e:
4a:70:b6:fe:ca:49:fc:cc:13:d2:cc:dc:67:99:cf:
e4:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:14:43:56:61:F0:EE:3E:68:FA:98:7D:0F:4A:14:34:1B:E1:FE:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/1/
RPKI Manifest - URI:rsync://rpki-rps.arin.net/repository/8a848ade89d095ae0189d3087fdd0326/1/DA14435661F0EE3E68FA987D0F4A14341BE1FE85.mft
RPKI Notify - URI:https://rrdp-rps.arin.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60301
Signature Algorithm: sha256WithRSAEncryption
18:51:4d:5e:22:c6:84:53:9e:e2:f6:35:fe:b8:b9:86:7e:c2:
90:43:6a:5d:7e:32:9c:a0:ce:0e:f7:b8:5c:66:02:77:d7:1a:
be:01:d0:94:3f:eb:72:bf:8f:45:bc:ce:4f:eb:25:e5:b3:6b:
cd:98:d1:b4:15:2d:40:39:d6:f5:4c:a2:a3:5b:93:14:dd:dc:
9c:0c:b3:7d:e7:4b:6e:07:6f:43:19:3b:bb:28:10:4c:e3:cb:
07:de:aa:77:5e:c7:00:3e:44:ae:74:75:dd:fb:9e:38:8e:86:
38:8b:b9:81:eb:a4:92:93:b5:df:b2:4a:37:c4:c9:2a:96:aa:
cf:92:e7:2b:0c:27:38:83:71:14:49:46:df:30:a6:97:07:7b:
17:3e:8f:02:f0:1e:43:45:17:59:d0:39:fa:86:bb:9f:ff:9e:
0a:27:07:b6:61:62:c5:3a:33:2d:c2:13:3a:09:22:dd:19:85:
5a:1c:ea:be:d0:88:3d:be:e0:1c:0f:52:3e:a5:2d:a9:2a:1a:
72:de:66:35:7b:d9:01:59:9a:18:fe:cb:3a:c5:98:3f:a8:89:
5b:72:1d:3b:c4:d5:d4:d0:86:a2:b5:a3:a4:50:75:dd:0a:29:
35:2c:27:8b:ae:bd:0b:2f:83:35:fd:be:1e:53:03:97:ff:e8:
f0:7b:61:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:17 2025 by rpki-client