Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/G9JpBH0C_otaKsnrjV_sB7GH7aE.cer
File: G9JpBH0C_otaKsnrjV_sB7GH7aE.cer (raw, json)
Hash identifier: AybS3iTuDFeFnCup+00gL2NChhZPCqCeh4gUib6XnhQ=
Subject key identifier: 1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FB917B48036F912E82D79818BEA9C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214224
IP: 121.127.38.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:b9:17:b4:80:36:f9:12:e8:2d:79:81:8b:ea:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=1bd269047d02fe8b5a2ac9eb8d5fec07b187eda1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:02:95:32:d0:35:4f:6e:bd:1f:78:4a:3f:e5:
2e:9b:87:3b:38:47:d9:6a:cf:78:00:79:6e:5f:e1:
cf:7c:7d:c6:d4:16:42:23:97:e8:4a:a7:e3:87:f0:
7c:4e:6e:fd:5a:47:7e:b6:ba:af:3e:ab:1c:8a:91:
b0:ed:f8:db:16:04:e4:84:c0:d1:97:dd:40:2e:3c:
18:a1:13:c9:6d:e6:76:73:23:a4:12:0a:19:fb:9a:
e8:60:54:7d:c7:84:ed:c4:ba:1f:b8:12:1a:5f:a3:
aa:24:e7:12:ca:98:61:9e:a8:71:8c:b0:ce:69:18:
60:19:90:4f:46:c9:bb:58:ab:a7:46:35:75:63:7f:
7c:40:f0:bb:be:77:55:cd:b0:53:02:82:27:8b:36:
f9:e4:94:84:18:7a:f4:9d:30:09:cc:0f:eb:7a:14:
b9:d7:ad:ce:84:a7:69:d8:1a:69:37:47:fb:d5:50:
da:77:ee:57:b7:93:87:5f:98:84:a2:a8:69:03:6f:
6b:7f:6b:fa:a9:df:db:17:96:1a:71:ba:ae:e8:17:
d2:b9:46:32:14:02:a0:5a:27:38:63:e8:e1:a1:78:
fa:e8:13:e0:b8:e8:21:ea:c4:59:4f:68:f3:04:99:
84:2d:15:18:3a:8c:63:9f:23:0e:2e:ad:7e:0e:c5:
cf:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:D2:69:04:7D:02:FE:8B:5A:2A:C9:EB:8D:5F:EC:07:B1:87:ED:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/8c6e96-d778-49dd-9e5e-3cf2b8002031/1/G9JpBH0C_otaKsnrjV_sB7GH7aE.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
121.127.38.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214224
Signature Algorithm: sha256WithRSAEncryption
11:e1:b4:a2:82:23:9a:ce:de:98:30:41:c3:90:75:24:19:67:
0d:ee:9a:e8:72:ac:00:df:4a:76:e2:ea:6b:e7:65:66:c5:c8:
c6:96:a6:3b:6a:0e:47:9f:7d:5b:95:5d:86:5f:52:e0:66:aa:
a2:dc:a7:79:4c:77:14:85:20:b1:7a:56:d4:48:80:d9:dd:d9:
aa:ad:a9:57:2a:eb:ed:d5:c8:81:36:a2:5c:65:df:9b:97:76:
61:95:27:c7:65:05:7f:4c:b5:2f:5d:47:4c:5c:1f:f0:a2:b0:
73:79:b9:e0:4d:29:57:36:6f:6d:39:09:60:4e:f3:2b:19:3d:
05:b6:8f:d1:b1:e7:7c:7e:f5:1f:91:9d:17:fe:41:f9:2f:54:
cd:2b:f7:21:7b:82:a4:50:31:dd:70:59:6f:9a:ef:77:8e:33:
24:83:da:6e:4d:b6:3c:55:21:c7:9e:c0:b4:a4:51:60:34:3a:
36:f7:5b:91:e8:43:5b:e4:7c:ac:27:be:ff:0d:94:8f:27:42:
5c:00:85:7f:73:72:98:32:26:6b:36:c4:80:3c:9c:44:cc:f8:
43:da:7b:51:3c:03:7b:8e:2c:46:cf:66:8e:99:25:4b:a5:08:
5d:6d:4b:db:a7:9f:2b:80:79:ba:49:e2:a4:94:75:35:25:60:
dc:40:bb:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:53 2025 by rpki-client