Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5aiGWRTezNyYByQf1wtrsIOkRLM.cer
File: 5aiGWRTezNyYByQf1wtrsIOkRLM.cer (raw, json)
Hash identifier: OlP+eRjb3Og7eqW5lF0yckEsxEtxc3d3uJn5P2qNtnY=
Subject key identifier: E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA03224F0B1A2E822C453F30BE29F7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:46 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 24620
IP: 2001:67c:958::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:03:22:4f:0b:1a:2e:82:2c:45:3f:30:be:29:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:46 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5a8865914deccdc9807241fd70b6bb083a444b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:99:12:e0:5c:fa:8b:3f:c7:27:d0:b6:1b:80:
ef:32:c1:73:88:fc:41:32:d4:b2:4b:9a:50:a9:ac:
23:de:1f:8d:27:82:b6:7b:a4:1b:d8:46:40:1c:01:
7c:0d:50:1f:1e:7b:f0:b2:ac:d1:cb:fe:10:e4:64:
1c:48:27:36:c9:cb:85:10:6b:fe:0b:c8:ae:03:5f:
ef:f5:97:28:48:8e:1f:74:2d:55:3d:5a:91:5b:f5:
2b:15:d1:c0:7a:51:21:dd:3c:b1:ee:c7:8e:49:22:
a6:1e:ec:d9:85:96:82:66:bb:fd:66:e9:d3:56:44:
0a:a5:e5:1d:8f:0b:12:ba:72:a5:ef:29:db:2b:d8:
ce:5c:e1:22:4b:ea:03:01:8c:02:d0:7c:e0:90:7a:
8c:af:97:58:02:fa:ff:38:8f:53:c0:2a:76:c4:a6:
9d:11:13:9e:12:99:06:2e:a6:51:ea:5c:36:b6:66:
b2:1e:37:0f:ee:13:56:2d:ad:b0:70:7d:be:9b:f7:
90:cd:2a:1c:d6:0e:fa:6f:dc:47:c1:ac:6c:96:0d:
9e:84:4c:1e:fc:6f:6e:84:e7:7f:dc:79:00:9d:4d:
30:ef:5e:2a:43:38:39:20:28:dd:0b:3d:f3:47:4e:
2f:c4:ad:a8:05:3f:d2:4d:ad:14:d0:d1:ba:4d:81:
92:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:A8:86:59:14:DE:CC:DC:98:07:24:1F:D7:0B:6B:B0:83:A4:44:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/3afc81-30e6-4b8e-8d3b-57f54ea43e16/1/5aiGWRTezNyYByQf1wtrsIOkRLM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:958::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
24620
Signature Algorithm: sha256WithRSAEncryption
84:a1:d0:40:59:48:ab:ee:a4:0f:06:0c:ca:ad:22:92:00:a0:
ab:59:99:e2:27:ad:e3:f0:70:05:61:01:2d:1f:d4:cf:3c:79:
ce:57:fd:df:b8:d2:17:5c:13:2e:5b:83:dc:51:7d:6c:bd:6c:
18:f2:4f:d3:1f:87:f8:a1:fb:9b:c8:22:41:e9:b7:9d:86:fe:
77:31:78:b7:e2:5b:90:e8:54:fc:b1:99:0d:1c:35:81:57:f1:
32:3d:ba:72:97:1f:c5:e3:69:7e:a7:83:ff:bb:cf:11:a7:2c:
fa:38:e8:b8:23:47:e7:ad:f6:a7:c0:1e:8f:e2:d0:8e:4d:91:
a8:0f:8a:1d:40:04:c0:a3:35:66:41:aa:17:d0:cd:bc:f0:e1:
d6:ad:a1:c7:2e:66:e3:0a:d9:d7:73:e6:5b:86:e8:f9:0c:f4:
b7:e4:e9:f6:d8:73:f0:c1:f8:03:ae:de:e5:00:e1:53:36:69:
56:53:a1:d5:72:30:2a:42:bf:8e:54:55:61:95:ca:cb:3b:aa:
b7:8d:1d:74:50:ee:2c:92:23:51:d8:3c:35:d9:7c:c5:4d:a5:
45:f6:7a:af:63:3a:f7:61:0d:41:31:3d:25:0d:45:18:7a:13:
f6:a9:fd:30:eb:27:17:22:5e:cb:84:16:c7:1a:c9:e8:47:63:
1d:e4:81:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:09:16 2025 by rpki-client