Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AAydVUKlqozV4BmKuD_OD5RypGE.cer
File: AAydVUKlqozV4BmKuD_OD5RypGE.cer (raw, json)
Hash identifier: o6CrTIcY0e0xe0Q93pzkqqR7TLUWFTOOqQzGHcmQi8Y=
Subject key identifier: 00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB7EA7F7FBB2A9CD90F5AC3EFEE5E6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:14 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209682
IP: 95.214.64.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:7e:a7:f7:fb:b2:a9:cd:90:f5:ac:3e:fe:e5:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:14 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=000c9d5542a5aa8cd5e0198ab83fce0f9472a461
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e0:ad:3f:ac:14:5d:41:fd:64:10:79:47:8e:
12:4d:a6:3e:41:f9:c3:ef:c7:0b:42:3c:34:92:94:
e8:e5:b8:f1:f9:9d:3e:0b:20:fd:b8:f1:69:bd:fd:
c7:91:09:8e:14:fd:e3:1b:2f:a6:0f:41:21:f9:1a:
1e:b3:8b:24:68:f9:d9:87:73:44:84:6a:95:72:c3:
02:13:75:dd:17:34:7c:40:07:54:ed:13:06:d6:17:
5a:d5:de:ed:cb:31:df:39:e6:4a:7f:06:f2:50:db:
aa:5b:41:89:1f:e4:a6:18:d6:31:d6:43:67:34:b6:
7f:ef:ea:fb:f4:a8:25:a8:d3:47:f4:e2:74:e2:39:
6d:40:4e:c1:ba:eb:d7:34:8f:42:47:83:13:dc:1f:
36:a5:32:7f:ea:fc:29:67:8b:51:88:bb:3b:4f:a2:
01:dc:6a:22:53:7b:d6:b2:37:ea:35:03:3d:4f:66:
19:b9:2c:06:96:01:3c:78:b1:3b:e9:a2:58:46:34:
b9:57:6d:37:3d:0a:8b:73:9d:ff:77:8f:3c:c0:31:
12:39:92:a9:49:05:b8:49:46:ea:d9:a0:0a:f2:1a:
52:3e:4c:6e:e2:2e:71:70:dd:76:f4:ab:a3:50:5c:
ee:d2:7c:e5:76:53:64:e3:0d:1e:d3:55:2e:e4:91:
ba:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:0C:9D:55:42:A5:AA:8C:D5:E0:19:8A:B8:3F:CE:0F:94:72:A4:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/19d867-fd39-409e-b20a-ddcc25881128/1/AAydVUKlqozV4BmKuD_OD5RypGE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.214.64.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209682
Signature Algorithm: sha256WithRSAEncryption
b0:06:9b:41:c2:b6:25:33:c6:ba:5a:28:0a:86:66:ee:0f:94:
03:fc:89:00:c1:2d:ea:f1:a7:00:a6:6f:e4:37:21:52:d5:92:
b5:56:1c:7d:2c:ce:78:c4:7b:3e:7b:2f:6d:fd:18:c6:fc:58:
e1:97:36:2b:0b:4a:15:a7:9f:0a:65:0b:4f:bc:7a:70:e5:11:
f2:80:7f:c0:d2:9a:4a:13:90:3a:4c:88:1c:d6:49:e8:0f:42:
37:1f:44:d1:c3:92:07:c7:7b:d2:78:5a:f0:9e:c9:65:0b:33:
56:a7:4e:94:0e:68:f7:41:3d:bf:86:fb:37:0e:93:33:cd:89:
4a:25:f8:d2:43:ec:91:51:a2:62:b4:ca:f7:ad:3d:8e:c5:db:
ba:b4:48:79:62:19:80:47:b5:10:c1:05:e5:4f:a2:83:f9:4f:
46:53:f5:a8:47:f8:74:99:ed:8c:d1:06:0d:99:ea:76:19:bd:
87:99:a0:af:5f:b6:7e:d2:d3:b6:5b:ca:30:7a:7e:47:65:95:
c7:75:18:31:20:c7:80:44:0f:51:8e:1d:a1:19:97:74:25:c7:
18:2e:8d:4f:3e:54:48:0f:34:bd:71:a0:12:28:33:e1:b4:47:
ff:b3:ae:38:0c:73:3c:27:2a:57:b9:2c:74:20:e6:64:3f:9f:
37:87:3e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:08:07 2025 by rpki-client