Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4AEry55udHI3ckeBpMkZ_FyUGWU.cer
File: 4AEry55udHI3ckeBpMkZ_FyUGWU.cer (raw, json)
Hash identifier: jxZqB6GQ6PkLsedBuoVDYaqZqDB/YbrjlJd4m5OSqOI=
Subject key identifier: E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA9F97BD17B0D1DF119C394861E7AD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 57645
AS: 60065
IP: 91.234.16.0/24
IP: 2001:67c:13d0::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:9f:97:bd:17:b0:d1:df:11:9c:39:48:61:e7:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0012bcb9e6e747237724781a4c919fc5c941965
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:32:84:4b:bd:9c:d5:9a:49:83:cd:e2:e6:82:
76:aa:55:24:26:5c:f5:f5:da:d5:f0:67:6c:54:d2:
99:5b:95:6e:bf:01:8a:61:56:54:b3:be:df:34:d0:
62:c3:58:bf:7c:38:c5:75:4b:3c:b3:24:18:20:9d:
4b:b4:ab:e8:b6:3a:4e:1a:d0:6b:e0:59:bb:55:08:
62:81:81:59:2e:71:67:4c:82:da:f5:83:6e:a5:ee:
a0:d2:23:7e:a1:bf:9e:37:ba:13:d6:7c:ff:2b:f6:
bf:c2:d4:07:8b:ac:58:3b:49:94:44:22:f9:a9:f4:
b9:97:ba:f1:2d:95:e1:49:43:e0:fd:ce:f7:83:39:
cb:6d:47:94:4b:08:5b:53:33:a4:63:37:7b:b2:e9:
07:99:7a:2d:ec:d7:28:99:7c:88:50:01:9c:29:2d:
56:b4:7c:26:64:3f:29:9e:17:f4:d7:a3:1e:55:e5:
53:00:d2:89:3a:7c:a8:e8:51:52:7d:a0:91:90:4c:
45:f3:e8:15:8c:20:b2:01:05:57:f0:d3:8a:6b:92:
fd:21:55:81:32:35:89:3b:34:8a:f3:10:c1:fa:47:
36:eb:72:24:8e:7a:f5:89:93:ff:bb:55:94:87:98:
bd:2d:12:56:b0:ac:28:44:16:55:50:4a:9f:0b:78:
5f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:01:2B:CB:9E:6E:74:72:37:72:47:81:A4:C9:19:FC:5C:94:19:65
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/02ce6f-1429-40ad-b753-0db88ec7342c/1/4AEry55udHI3ckeBpMkZ_FyUGWU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.16.0/24
IPv6:
2001:67c:13d0::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
57645
60065
Signature Algorithm: sha256WithRSAEncryption
95:73:0a:b4:65:af:59:ef:db:17:78:4d:fa:1c:15:8c:87:95:
7e:ae:24:f1:26:5c:20:52:97:08:50:87:7b:cf:6d:ad:0b:09:
4d:e3:2d:ab:d8:04:34:9a:d1:0f:ca:60:23:27:57:ab:20:57:
e2:19:5d:6b:26:e3:7d:b9:2d:fa:28:a3:5d:9c:39:ba:8b:2a:
ab:81:f7:3b:87:0d:23:a5:f9:e0:d6:55:39:59:63:e9:cb:56:
7a:a2:5c:e7:00:d2:5e:40:64:72:a9:88:20:75:3e:2d:d7:97:
a1:0b:23:df:f1:fc:d5:45:76:5f:6d:7f:55:e2:1a:a3:26:62:
46:25:37:85:55:57:ae:d9:54:df:5c:84:6f:e9:6b:5d:23:2d:
94:56:c6:d5:69:7f:a5:df:1a:98:1d:49:aa:ba:60:6d:66:ce:
96:3f:fa:ea:84:90:28:ff:e2:53:f3:97:aa:cf:22:26:f1:e4:
d5:43:62:4e:70:04:c5:89:11:ba:44:d4:c2:51:7f:fc:13:4b:
21:7d:ca:a0:fd:ce:7e:2b:d8:df:08:05:b8:d6:da:ca:65:9a:
53:51:0f:14:09:a4:e7:40:8d:9b:cb:d2:c5:69:0c:d9:a0:f9:
2e:c3:d3:08:ba:04:08:6a:f8:da:13:07:4b:3d:e7:93:ab:93:
72:b0:12:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:16:36 2025 by rpki-client