Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CiKtYJcp-O8REq28FY9REhWw854.cer
File: CiKtYJcp-O8REq28FY9REhWw854.cer (raw, json)
Hash identifier: CiDfQXksMJsg6fgInFsPoXJO63aU8FyemVQTNz2aGwM=
Subject key identifier: 0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5F10D40D4E8826AF58C8B8B2227A0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214872
IP: 193.104.11.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:f1:0d:40:d4:e8:82:6a:f5:8c:8b:8b:22:27:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0a22ad609729f8ef1112adbc158f511215b0f39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:e3:fa:d1:ff:0c:59:47:b4:55:fa:2d:e1:d4:
1e:be:92:a5:a1:1b:9b:d7:da:1e:af:02:60:02:25:
b7:08:8c:d3:a9:e6:29:5a:07:4c:89:36:92:33:48:
db:6e:64:5b:9e:6a:e8:89:b6:f8:5a:4f:95:b0:db:
f7:6d:91:75:eb:98:88:38:b6:b5:2c:4f:51:5f:48:
75:0b:2e:c9:d7:a1:aa:69:18:7c:63:5d:83:c6:63:
37:d0:90:1d:ec:8a:82:83:77:73:06:b6:bf:4c:3f:
40:e4:db:d9:f2:70:e4:07:39:ef:7e:79:77:37:ad:
00:32:bc:a2:2a:cc:07:ac:94:6b:cc:19:c7:63:b2:
cd:80:b6:5e:59:43:3b:2f:29:66:d7:a8:80:0b:b0:
8f:89:b1:c5:50:12:63:c7:8d:25:03:34:4b:5f:b0:
51:41:90:ee:9e:95:f8:dc:d3:ab:aa:a0:03:f1:9a:
b6:cf:fc:eb:7c:c6:8e:0d:36:56:d0:38:cd:a0:2a:
75:ae:87:03:bd:e1:78:97:2d:35:c6:e0:7f:24:59:
b0:3a:a6:4e:87:e9:7e:e3:b0:6f:2a:fa:d4:89:47:
0b:10:36:f7:5d:fb:39:a1:d3:d6:85:cc:a1:84:64:
2d:04:ba:a7:ee:53:5a:bc:f9:33:1f:bf:b6:55:bd:
aa:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:22:AD:60:97:29:F8:EF:11:12:AD:BC:15:8F:51:12:15:B0:F3:9E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6ca980-2ce1-4b7c-8321-e5d9a6e48746/1/CiKtYJcp-O8REq28FY9REhWw854.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.104.11.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214872
Signature Algorithm: sha256WithRSAEncryption
59:72:b3:bc:e8:89:08:f6:b9:e5:22:d6:de:da:f1:52:2f:46:
ec:20:cf:22:20:ca:e6:04:40:9a:af:1f:1c:dc:17:f8:5c:a3:
70:91:1e:bb:85:bb:11:17:e0:48:e7:4c:19:3c:e8:3c:96:30:
29:64:27:d4:1a:ad:50:70:f5:16:aa:9f:04:98:35:e8:af:0e:
5d:9c:eb:09:2f:82:dc:92:4d:dc:20:0f:d2:14:cf:9c:fd:a6:
39:f0:b0:c0:de:dd:7a:ec:05:a0:13:8a:7a:5b:3b:93:3e:d7:
9a:9e:af:a4:fc:d1:36:e0:fe:a2:a0:e4:e2:2c:4b:e6:46:d8:
69:e5:04:e0:a6:9a:27:39:18:92:c5:9e:97:50:e6:aa:3b:3b:
70:bd:53:fc:27:ce:61:c5:60:cc:8e:b2:3d:af:e5:68:3b:b1:
02:3d:0f:20:74:30:d9:4d:ad:ad:0e:fa:b6:85:76:e5:e3:30:
36:89:b7:95:dc:f4:c3:cf:19:62:76:33:32:2d:88:ed:d2:89:
21:d5:3b:5f:d4:59:0e:d2:3d:01:20:9a:44:5c:29:59:f1:cc:
65:ff:37:e2:3c:db:d8:97:a6:23:8d:98:1b:04:8d:91:fe:ae:
d0:be:db:93:37:a9:43:93:de:96:e3:db:8a:32:b2:83:5c:09:
ac:c4:89:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:02 2025 by rpki-client