Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BU1P54D-RTMHgN627DhMuUk_LfI.cer
File: BU1P54D-RTMHgN627DhMuUk_LfI.cer (raw, json)
Hash identifier: eKYDKCN2wcEkZhxh2qP7t59Ase+alDKVZx1xXmM6pT4=
Subject key identifier: 05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3EE434737F1D0F28E61C145DFD3B6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203787
AS: 216172
IP: 185.30.108.0/22
IP: 2a00:9e60::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:ee:43:47:37:f1:d0:f2:8e:61:c1:45:df:d3:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=054d4fe780fe45330780deb6ec384cb9493f2df2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:8f:60:53:f3:58:4c:ba:13:49:f6:d2:d4:7a:
e9:1a:68:24:2f:52:4e:03:9a:c7:ec:42:cc:1d:31:
ea:23:17:ba:08:fe:ff:91:66:2e:0a:bf:80:49:aa:
0d:93:3c:0d:2d:a4:79:fa:73:0d:c0:6c:45:36:f5:
1b:ad:2b:8c:8f:68:6b:69:2f:91:cb:61:5f:02:30:
a4:93:95:8a:bd:36:bb:64:66:82:54:9c:67:09:51:
d0:f1:24:f9:4f:b7:2f:dd:fd:ef:e7:ae:3c:a3:a7:
58:7c:70:39:9b:d1:a3:4a:df:a8:91:4c:b8:f9:9c:
51:be:86:db:ff:b9:9a:68:e7:93:6a:37:25:c8:d6:
13:9d:4e:f4:ba:35:a4:bf:77:a1:5e:4e:be:fe:94:
2d:40:37:02:06:5a:37:48:16:d8:ca:5a:49:a4:af:
62:66:30:c7:8f:c8:34:69:6a:ec:ea:10:55:59:f9:
45:a0:18:2e:f6:87:a5:67:c4:02:cb:4d:ea:ac:8d:
c1:50:d8:08:fd:97:1b:25:aa:83:49:06:bf:69:cf:
ff:75:15:31:1f:46:4f:c3:34:93:de:5b:b8:26:cf:
57:4f:83:d4:a4:2c:e0:d7:3b:4d:23:39:7d:10:da:
f5:86:1a:40:ec:51:85:c0:fd:50:81:e4:89:10:31:
60:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:4D:4F:E7:80:FE:45:33:07:80:DE:B6:EC:38:4C:B9:49:3F:2D:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/1f3f11-5499-4c7b-b2e4-051b8984866e/1/BU1P54D-RTMHgN627DhMuUk_LfI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.30.108.0/22
IPv6:
2a00:9e60::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203787
216172
Signature Algorithm: sha256WithRSAEncryption
80:81:ca:87:22:43:24:1f:70:e9:1e:9e:30:f2:c3:2b:26:90:
4e:29:1f:bc:15:63:d7:3e:33:6a:81:df:9e:b9:ea:2e:d9:60:
60:77:ab:ee:8e:8d:09:5e:b8:c7:c5:36:10:68:2a:10:a1:4e:
39:0b:bb:54:e1:03:47:34:10:b4:48:99:7d:b6:7a:f7:a2:dc:
94:0b:6f:be:3c:e1:0e:7e:da:c4:e3:1f:0d:cd:2e:c3:40:f0:
7e:07:23:37:ae:38:be:d3:de:6d:e3:bb:68:65:0a:6c:e2:20:
c2:ea:01:0e:36:1e:ec:7d:76:5d:28:6e:d4:4a:db:1c:eb:f5:
e0:f8:ac:3b:0f:3c:78:a0:61:47:bb:b5:8f:09:e2:22:48:65:
9b:1d:78:46:ab:b7:38:c6:cb:1a:ff:8c:4a:f0:20:55:0f:9e:
82:90:bd:73:7f:88:a8:4e:b0:2f:98:0c:f7:be:3e:20:31:e3:
27:0d:37:fb:e9:4a:de:0b:d7:57:55:53:01:95:74:ca:64:2a:
b1:9c:87:72:cd:f0:9f:5e:a9:cc:7a:e0:b2:98:18:a0:cc:84:
09:a5:a1:bf:8d:93:66:72:c6:98:30:2d:cf:dc:25:9d:cf:c7:
fd:61:83:ce:6e:bd:53:1e:9d:b8:88:ba:dc:10:df:02:14:fa:
7e:31:d8:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:29 2025 by rpki-client