Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer
File: 9UHUaJOqoWT-JnOZDQeqbAcQA8A.cer (raw, json)
Hash identifier: cYnH24s3Od1/m1Hf2uuhOt/B9PwGG/LqI2e1leg99zw=
Subject key identifier: F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBD569D450B38D0C224D1325869E4B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44084
IP: 45.67.124.0/22
IP: 217.115.16.0/20
IP: 2a09:6240::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d5:69:d4:50:b3:8d:0c:22:4d:13:25:86:9e:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f541d46893aaa164fe2673990d07aa6c071003c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:da:8c:1d:ff:09:6b:35:02:9e:bf:07:b2:5c:
3a:ba:a2:fb:e2:93:1a:42:2c:d4:e3:c5:49:b7:7c:
9f:91:c6:7f:a2:fe:d1:02:b6:20:f2:f3:76:bc:6e:
ba:88:fc:23:73:7d:2d:c3:4e:91:2e:ea:33:97:e1:
e9:11:1c:9b:01:91:d8:ad:bf:23:b4:8d:cc:0c:f8:
df:d3:01:c5:0f:de:59:c4:4c:1f:9d:f5:58:35:c4:
0e:3b:54:7f:bb:6c:51:a4:33:e2:bb:db:8c:42:20:
06:28:a9:58:69:84:b3:cb:46:1a:00:2f:2e:aa:cf:
98:3c:73:64:a0:4a:a3:2e:48:c2:2b:cc:70:ef:a5:
a7:19:9c:f4:d9:8f:1e:e6:77:7d:4b:c9:8c:6a:e6:
bb:98:ce:14:48:93:d6:49:73:2f:ff:a5:4e:40:cf:
82:c8:eb:62:7c:51:2c:50:d5:7a:c0:bd:1c:7c:08:
b2:b3:f8:26:3b:5f:44:ef:76:ff:a5:47:6a:0a:6b:
5e:a0:17:8c:34:77:c6:9f:4d:e9:a8:b8:bb:6c:9e:
e7:31:a3:8f:4a:3d:74:ff:8f:66:d3:b9:51:ef:c8:
d2:3c:45:0f:71:b8:e0:28:17:8e:52:8a:2a:40:69:
9e:95:e0:da:65:9b:19:39:20:8c:73:56:47:11:50:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:41:D4:68:93:AA:A1:64:FE:26:73:99:0D:07:AA:6C:07:10:03:C0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2e95e7-5644-46f2-8fa3-398c045189eb/1/9UHUaJOqoWT-JnOZDQeqbAcQA8A.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.124.0/22
217.115.16.0/20
IPv6:
2a09:6240::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44084
Signature Algorithm: sha256WithRSAEncryption
72:21:b2:ec:b5:cb:da:47:ae:63:f4:4e:98:ae:0f:9c:c0:2b:
fe:3d:99:c3:33:6f:0f:02:e6:cb:91:af:8d:a4:67:fa:55:3b:
10:8e:82:d9:0d:e7:c5:b4:fd:35:cd:3f:b8:e9:77:48:f9:ba:
54:3a:cc:02:e8:92:a6:f9:7f:90:71:3c:b4:7a:5c:52:eb:4a:
cb:7e:f2:e8:0d:5e:a2:14:d8:dd:c1:93:76:ba:ae:21:eb:d3:
12:30:c1:92:6a:16:81:69:de:20:e4:53:d8:95:ed:12:1a:a2:
3d:e0:7e:25:b3:b2:04:b7:f8:2f:27:58:2e:01:6c:84:72:40:
2f:9d:55:27:7c:91:a1:aa:3e:96:8c:ae:cb:bf:42:5f:91:5b:
b1:27:89:d0:9b:32:0c:96:70:86:3e:6c:f5:a5:45:1b:54:1c:
2b:55:26:23:97:be:f0:1a:d4:cb:95:49:8a:9e:c1:70:c3:20:
a5:44:31:fd:40:d3:cd:46:b0:79:4d:5c:cb:12:74:b3:b8:56:
b4:af:0c:a0:28:c6:8a:96:58:6f:b3:0c:58:69:d0:f0:5e:6f:
c3:cf:89:0e:fb:d5:8d:bc:db:95:d5:3c:57:36:d9:65:db:79:
30:a7:47:de:81:84:00:72:a2:94:1e:64:96:4c:82:0c:d1:a2:
4a:f0:cc:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:32:04 2025 by rpki-client