Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5NJxw_qQOlkP31SJlEnmmPLpxjI.cer
File: 5NJxw_qQOlkP31SJlEnmmPLpxjI.cer (raw, json)
Hash identifier: vjP46/FwyT74Q8YpIvJyO/pVVs9CRYJzXRvKYGc5T4w=
Subject key identifier: E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B60E0E1C63D7BE848C77A358FC1F66
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:50:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29296
IP: 193.135.64.0/19
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b6:0e:0e:1c:63:d7:be:84:8c:77:a3:58:fc:1f:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:50:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4d271c3fa903a590fdf54899449e698f2e9c632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:75:39:df:e8:ef:cc:1f:e3:ea:fa:71:72:43:
e4:bb:9a:49:97:10:e0:c9:06:4e:7e:7c:e9:0b:fd:
76:97:ba:34:43:f4:ea:e1:79:6e:f7:93:af:ba:2e:
43:91:45:6e:f5:17:d6:45:e7:4a:21:fb:39:d7:9a:
87:d2:05:6b:eb:c5:00:f3:22:db:d1:91:88:64:a7:
76:57:e1:66:54:ae:33:2b:a4:52:1a:52:ef:a5:a6:
04:fd:f8:21:98:33:7a:a4:01:06:f7:5f:a4:75:97:
46:e1:e0:b3:1e:81:09:65:4a:2d:b9:09:c3:7d:76:
8f:b9:a1:7b:5a:85:81:2b:3b:4c:09:d4:1a:9f:3b:
36:06:ad:62:3e:0b:a8:84:4c:ca:7b:87:85:a4:87:
0b:8c:6e:8b:2c:53:65:1b:22:26:a7:87:24:59:2d:
5d:60:bb:66:bd:90:2f:49:4f:0f:d9:3a:05:a1:c3:
8c:35:03:d9:8b:ce:ba:bc:de:ac:3e:c6:ae:ad:71:
c6:72:79:99:e5:e8:1a:9b:fc:e1:51:6d:53:aa:05:
26:be:bd:4a:5c:a2:ed:d8:48:5a:df:ae:c3:07:91:
94:b7:8c:12:b1:d4:87:d1:f7:7c:31:41:96:eb:9b:
1e:68:3d:ae:47:d7:68:a8:d0:b7:ff:4f:ef:d6:2e:
a5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:D2:71:C3:FA:90:3A:59:0F:DF:54:89:94:49:E6:98:F2:E9:C6:32
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/897092-0750-4d96-b32f-5f205236de1f/1/5NJxw_qQOlkP31SJlEnmmPLpxjI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.135.64.0/19
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29296
Signature Algorithm: sha256WithRSAEncryption
aa:93:ac:22:16:ca:f1:36:38:93:ee:65:f4:98:15:f9:78:fe:
50:0f:a5:05:88:0c:52:25:f2:f7:ed:e0:42:3a:ce:c6:2c:22:
89:88:c7:54:83:84:17:98:7d:04:5e:84:37:a7:45:7c:d4:c3:
81:7a:54:70:7a:7b:46:70:50:c1:32:5b:12:64:69:e8:f7:8f:
cb:17:f8:bf:70:11:75:a7:2c:c0:16:d4:86:51:d8:1f:95:90:
92:ea:dd:3c:a1:a6:09:04:9b:35:13:41:87:e5:6b:b2:d6:7f:
c5:1f:a5:f4:50:89:a5:82:e1:e3:8c:04:8e:1d:c4:4e:a9:d1:
4b:e2:2f:bf:95:18:48:12:eb:f5:5b:8c:59:86:79:1f:ba:e1:
90:0e:58:dd:1a:ff:78:d3:20:44:97:58:79:62:29:75:da:60:
05:d7:5d:8e:bb:1c:2d:04:19:18:55:67:11:df:50:8f:51:d6:
b0:af:8e:fd:6e:f4:4d:83:f5:ae:4f:ce:dc:e4:8d:38:7a:51:
be:9d:d4:31:4b:9a:94:88:a1:3e:34:51:a9:cf:64:a2:b9:d9:
4e:77:87:37:30:5c:6f:62:a8:3c:1b:b8:d8:ef:b7:35:7f:4f:
30:2c:81:02:ff:9a:c0:33:d4:e9:0c:32:d0:80:b9:22:ba:63:
38:ad:54:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:27 2025 by rpki-client