Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BCSFBLVFValEOwKjPTUakChju5k.cer
File: BCSFBLVFValEOwKjPTUakChju5k.cer (raw, json)
Hash identifier: oJpMeRKOWqjrIvUunjVIPFh8/biK9PTw053nCEBNWik=
Subject key identifier: 04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C188DB3126128D08941A146931E01
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 198063
IP: 194.116.167.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:18:8d:b3:12:61:28:d0:89:41:a1:46:93:1e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=04248504b54555a9443b02a33d351a902863bb99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:37:c3:29:c1:6c:fa:6d:e9:2b:1d:f5:f3:
e1:06:45:31:e2:93:41:de:75:96:84:d1:ac:d2:c3:
d7:ce:9c:9e:0d:39:fb:12:14:11:1f:b8:d3:1e:33:
20:14:6c:b6:86:45:ba:28:08:43:1d:3d:1f:7b:51:
9a:e4:4b:50:b9:9e:5c:73:cd:95:15:a8:3b:81:34:
11:09:eb:86:d5:ef:0f:e9:79:16:f4:1b:76:4e:b9:
d3:f1:fe:db:90:4b:11:32:c1:55:d4:9f:67:da:c0:
56:01:78:fe:94:c0:49:06:18:0b:3a:f6:fd:c1:3b:
d5:aa:d5:68:61:b4:18:62:02:3e:5e:c1:2b:84:b3:
6d:f6:10:64:c4:ea:d4:a7:1e:81:15:38:ce:2e:fe:
37:82:62:56:a5:56:ad:06:2d:c8:e6:6e:db:0e:11:
55:bf:8e:5e:61:9e:09:7a:ac:e1:72:4a:46:9a:23:
9d:8f:44:9b:5d:19:84:f7:27:db:e7:7a:23:8c:1e:
ff:12:d6:4f:67:4b:a6:fb:09:61:97:82:89:e0:88:
9f:2b:cf:86:8f:3d:8c:bb:89:ee:de:05:2b:78:95:
df:9e:78:17:6d:b7:43:d8:fb:c1:72:ef:76:84:53:
3d:cb:bb:3a:0a:d0:25:1f:a6:43:5b:e1:8d:9e:7f:
27:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:24:85:04:B5:45:55:A9:44:3B:02:A3:3D:35:1A:90:28:63:BB:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/b8bb1a-a88e-4b2f-987f-47015a6077b2/1/BCSFBLVFValEOwKjPTUakChju5k.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.116.167.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
198063
Signature Algorithm: sha256WithRSAEncryption
4c:c1:5a:68:de:25:17:bf:1d:3a:9c:ff:ac:2a:f7:4f:93:3f:
25:d4:f3:37:1f:23:2c:85:16:f0:08:23:22:2e:ee:fe:fb:d1:
67:7b:16:cd:ab:85:74:46:05:74:9b:8a:b7:da:09:2b:a1:36:
0f:12:04:c6:ae:6c:ac:6c:20:9b:ac:35:bc:3b:c6:77:ca:f5:
b1:b6:c0:40:13:55:43:de:3b:1b:71:fd:86:3f:b6:d2:de:03:
80:f4:78:4f:6a:be:e7:d0:49:6a:78:f1:56:ea:2b:7e:91:07:
d8:66:9a:0f:ca:d2:53:a6:9c:66:ff:9d:d6:86:98:90:15:80:
c1:96:50:e3:da:b5:90:3c:25:5c:35:fc:6d:b4:b5:67:ee:bb:
00:9a:59:7b:9b:02:67:c9:ae:ae:42:03:f2:3c:67:fe:55:d2:
89:4f:94:39:98:69:8c:a4:ab:5e:0c:5d:5f:9f:3a:71:fd:2a:
e1:21:35:97:ab:ca:fb:39:2c:d7:2b:ac:9e:60:29:8d:02:32:
49:92:de:24:7b:19:62:84:7d:87:a6:9e:af:e5:fb:7a:f0:e2:
31:21:77:e2:60:bf:99:7a:5e:2c:56:22:a7:ce:17:02:47:f4:
3d:d4:ec:29:45:4f:54:54:b4:04:9d:ce:db:fd:4e:25:d0:4f:
46:a9:eb:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:56 2025 by rpki-client