Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4COOIod_cwOWQAfOPjQG9frZSWI.cer
File: 4COOIod_cwOWQAfOPjQG9frZSWI.cer (raw, json)
Hash identifier: xyYG4+4fX+tCyHflxlod84V5yQ28KrXfBa8BCqwcO5c=
Subject key identifier: E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423691BB76DB945F6DFDB085D07E66944
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202670
IP: 185.151.4.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:1b:b7:6d:b9:45:f6:df:db:08:5d:07:e6:69:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e0238e22877f7303964007ce3e3406f5fad94962
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:1f:68:d3:b7:3c:e8:2b:8f:26:7b:4b:39:80:
e3:34:a7:9d:bb:c3:9f:18:13:6a:43:a8:22:40:5d:
ac:5b:46:33:8c:fe:ed:a2:83:33:38:a5:2d:2e:85:
4b:cc:2d:66:95:f7:fe:3c:d0:3c:bb:78:dd:8b:a4:
a4:ce:89:54:1f:ff:88:89:70:b6:48:ff:8d:cd:f7:
90:8c:c3:f3:f3:b7:d6:84:fe:01:cd:3f:89:22:5f:
34:49:ee:8f:5b:7d:e8:ba:da:46:f8:3a:fa:6a:1b:
e2:cc:e2:43:a8:ab:cd:e5:65:11:8f:6a:06:3d:71:
a2:b0:a9:10:69:08:0a:2c:30:77:b7:20:45:44:d4:
f6:56:f1:a9:a0:f8:65:8d:97:39:ce:be:26:91:e9:
52:01:fe:25:98:e9:53:e5:7c:d3:c9:43:7e:b6:56:
f8:34:9d:90:d7:5c:90:5c:59:35:65:81:f7:c7:c2:
d0:87:c3:e1:b5:cb:13:6d:be:f9:b9:19:33:ed:f8:
ab:31:c2:7f:7e:c2:1d:c4:5e:12:4c:55:ec:f3:2b:
30:c9:8f:d7:9b:87:9b:dd:e2:63:eb:62:1d:ec:a4:
5e:e3:f4:d6:b6:88:dc:f7:e0:2d:79:bd:53:6b:46:
c4:fe:04:41:45:a9:b1:89:71:0d:bc:bb:04:88:70:
a7:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:23:8E:22:87:7F:73:03:96:40:07:CE:3E:34:06:F5:FA:D9:49:62
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/da2276-6dbf-422e-9ebb-561175f04d8e/1/4COOIod_cwOWQAfOPjQG9frZSWI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.151.4.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202670
Signature Algorithm: sha256WithRSAEncryption
43:e3:87:23:5e:50:e7:5a:19:50:b5:bd:0f:9c:c2:c1:d4:82:
31:6e:81:bd:ef:36:f9:0d:e2:8a:40:55:73:d9:11:de:34:a6:
d8:58:cd:77:e4:e9:b8:75:90:c4:71:21:4c:3f:48:4c:9b:4e:
71:b6:8e:c9:81:2c:c5:7f:5b:67:28:df:4f:2e:05:5e:d1:b3:
fe:4c:eb:1c:6e:15:70:e0:95:ee:66:97:7d:7e:6a:db:c9:b2:
9d:db:c3:52:b9:9e:e9:83:ea:c4:7d:7e:a9:5a:9a:53:d2:4f:
98:c3:f7:28:79:a9:a1:c0:7e:4e:2c:97:61:b9:dc:6f:79:05:
fa:c3:e7:8c:be:d2:16:72:d9:22:f7:92:3f:30:11:06:f5:60:
10:08:ca:45:4c:31:8b:2f:bf:15:63:c9:15:9d:ba:d4:a9:c3:
c5:3f:5d:e3:93:51:81:bb:06:e6:1e:b3:b8:e7:9d:2e:34:67:
4f:47:70:9b:b4:44:fe:58:8d:b8:e5:d8:9c:c7:10:37:bb:0a:
f5:97:df:a8:35:1c:db:34:05:5e:b4:a6:b0:70:48:f5:35:e6:
b8:51:3b:93:95:81:0a:5f:4f:cc:20:6a:91:d9:ed:2b:6c:66:
69:ea:1b:39:44:04:2b:17:1f:58:eb:2f:35:4c:88:eb:1e:89:
d5:eb:bd:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:10:27 2025 by rpki-client