Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3A4bkNUSzDQC92FBQGKXleTUrEw.cer
File: 3A4bkNUSzDQC92FBQGKXleTUrEw.cer (raw, json)
Hash identifier: Wy/s4Jag3rhk6cmUm9ZX8rjfhAoNy3LY8auxoNyHJck=
Subject key identifier: DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F72568902004765C9E5B3050EB4B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211378
IP: 193.106.188.0/24
IP: 2a11:8c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:72:56:89:02:00:47:65:c9:e5:b3:05:0e:b4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=dc0e1b90d512cc3402f7614140629795e4d4ac4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:77:d2:c5:4a:54:b1:90:2e:3e:d2:64:cc:49:
f6:92:45:3b:6c:ea:8b:22:a4:98:5f:96:c2:8d:f3:
55:f7:84:eb:c2:6c:dd:01:7c:16:4c:78:48:c0:7c:
e1:3e:37:87:b2:b7:71:fc:fc:06:a8:8b:91:f6:bb:
58:ef:4f:ab:07:34:f6:47:55:b3:c1:d0:76:2f:4e:
aa:fb:42:ba:44:34:d4:9e:28:61:97:83:b7:18:b9:
6d:a8:93:9a:fc:61:a4:3f:95:39:33:e4:f3:21:3e:
1b:a4:49:ae:ba:0a:0f:99:9e:10:db:f6:24:f6:80:
6d:e8:ff:12:e7:5f:e7:7c:38:5b:b4:f7:b6:e3:86:
7d:82:2f:93:a4:0f:bd:5a:49:f3:8c:d3:0c:19:56:
4b:f6:0b:16:33:a9:5d:64:f3:d5:32:55:21:f7:66:
f5:db:af:72:41:78:b8:ca:d6:96:ff:61:86:17:db:
d5:f0:a1:86:36:c6:4f:46:a4:e2:27:1e:62:41:d4:
32:2b:01:0c:1e:5b:a9:3e:27:1e:50:e4:3b:36:cb:
20:d0:a8:dc:fb:5f:7d:11:48:b5:d6:1f:15:6a:59:
fc:54:7e:75:f6:b3:15:5d:59:18:8b:c1:f2:f0:69:
34:87:14:6a:63:71:32:fd:29:91:13:35:08:8d:d5:
be:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:0E:1B:90:D5:12:CC:34:02:F7:61:41:40:62:97:95:E4:D4:AC:4C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/9a2314-2310-43dd-a766-16f52cea4eb1/1/3A4bkNUSzDQC92FBQGKXleTUrEw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.106.188.0/24
IPv6:
2a11:8c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211378
Signature Algorithm: sha256WithRSAEncryption
8f:e5:5b:86:36:2b:d9:21:c1:ad:7d:2d:be:55:5c:ca:fa:5f:
44:a2:58:66:28:17:95:5c:d7:9c:bc:65:20:39:e4:d9:de:bf:
0c:72:b1:0a:2d:b7:f5:d2:b4:47:f8:24:a8:94:cf:de:dd:9c:
3f:80:5f:12:ef:77:d2:bf:9c:7c:ab:4c:a2:13:0c:df:27:72:
ee:87:0d:ee:1a:8d:5f:fa:d5:4c:c6:ac:c2:d2:72:64:42:e1:
5c:9b:05:12:77:d1:18:c0:36:5e:75:3b:2e:b1:3c:52:88:0b:
6d:72:83:13:84:76:7d:fe:8b:65:31:cc:44:8a:12:46:1d:42:
ec:e2:5e:bb:01:96:35:8a:b1:81:15:a4:4f:cd:e7:57:a6:85:
1f:7d:65:3a:e0:5f:67:c9:17:b7:4e:36:80:ce:04:81:e0:73:
e8:f3:33:99:78:7a:69:fa:e1:dc:49:49:7b:e6:81:08:1d:db:
a0:5d:18:66:5e:e9:c2:ba:4c:76:50:c3:f0:90:e1:88:ed:5e:
bb:06:08:2a:1f:4a:e0:86:07:ea:9d:cc:36:c6:41:ba:19:a7:
94:4b:bc:93:33:83:f3:0c:23:12:c0:4c:30:95:40:74:67:26:
f9:a6:b7:09:a2:c4:1a:c8:39:47:8a:cb:cb:9b:8b:a5:16:03:
db:e8:24:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:58 2025 by rpki-client