Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer
File: J9BIQ8TzpOdmlNs8-_m-Optnxpk.cer (raw, json)
Hash identifier: aDPsYdnyjvUeiyppKVchy4FFjv9DprzBM2eTwee5dEQ=
Subject key identifier: 27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067E6EE5BAA70709D047D24707FF0C2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211326
IP: 185.134.80.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:e6:ee:5b:aa:70:70:9d:04:7d:24:70:7f:f0:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=27d04843c4f3a4e76694db3cfbf9be3a9b67c699
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9d:71:21:87:f9:1a:2e:49:66:8d:49:d8:33:
1a:7c:37:31:66:c9:d8:d0:7f:46:1c:57:a4:6c:b5:
bc:26:16:14:be:fe:d6:17:5b:8b:52:e9:ba:2c:c1:
a9:7d:0a:dc:2e:91:eb:82:7d:af:29:48:ab:d2:c9:
45:32:ba:70:b3:0d:aa:1c:1e:ac:30:a7:94:8b:1e:
90:3c:2c:dd:05:bf:9a:50:0e:0c:eb:11:35:1e:da:
d1:b1:06:d2:a8:3f:9a:b9:74:c4:55:ff:fa:3d:74:
d1:05:6c:53:c8:10:a4:79:e4:c5:84:46:5a:ce:ed:
bf:75:e2:81:3a:bc:6e:b1:68:e6:b6:9c:a3:a3:39:
11:75:8a:09:fb:4d:55:c7:2d:fe:85:e6:ca:85:84:
3d:50:04:1b:52:4f:34:46:1a:45:a2:3c:0a:52:41:
26:9a:af:c7:e6:75:6a:83:82:a9:3e:05:15:0f:cc:
8e:25:21:1f:d4:46:98:76:4c:08:be:aa:39:3a:ee:
a8:4a:b7:af:6a:49:61:47:1b:6b:f0:09:6e:9d:7e:
d5:cf:9d:12:af:59:6e:f8:55:cf:72:6d:ad:d3:36:
44:ea:58:12:5e:27:51:1e:15:01:04:23:ff:78:32:
35:8c:dd:a5:42:86:aa:5f:4c:34:be:36:40:1a:1b:
d1:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:D0:48:43:C4:F3:A4:E7:66:94:DB:3C:FB:F9:BE:3A:9B:67:C6:99
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/0b647f-a6e5-46f3-b99c-b09b9385d727/1/J9BIQ8TzpOdmlNs8-_m-Optnxpk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.80.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211326
Signature Algorithm: sha256WithRSAEncryption
6e:fe:b4:02:73:b5:20:59:e4:19:a1:21:cd:2b:54:47:40:99:
05:0e:4e:1e:95:e9:15:5d:60:b4:b9:2c:12:d5:4b:bb:8b:e4:
12:9d:cd:05:dc:df:4d:f3:2e:22:a1:3d:ca:04:f0:e8:aa:29:
9a:70:9c:7d:10:d2:85:fd:66:e1:bb:17:aa:93:58:89:9f:3a:
f2:32:02:a0:d4:0e:fc:66:ef:b1:3c:a9:58:b1:e8:6f:16:8c:
6d:e6:c3:73:b3:37:56:c2:58:f7:d7:e4:27:1f:57:00:dc:85:
29:b1:bb:b3:ef:a6:92:a5:7f:dc:f7:0b:45:77:f1:4b:a3:e9:
a5:a9:6a:99:b1:2c:06:8d:25:fa:8a:fd:09:dc:b4:5c:1b:3b:
98:ac:5a:11:d4:59:a8:1b:0d:7e:63:86:ce:81:fb:5a:79:1f:
e5:20:0c:9d:2e:22:28:b5:ee:fd:5a:90:24:76:fb:a9:07:c9:
db:6a:36:70:f1:4b:d0:a0:19:3e:e0:ef:f0:82:89:27:22:02:
0a:f6:5e:2d:16:75:86:f0:2f:50:83:05:ec:f4:3e:19:cf:aa:
81:e9:e2:42:a5:ab:a5:4f:4a:08:a1:45:4b:a1:67:72:97:a9:
d4:1e:04:a5:96:f3:43:9c:6e:35:6b:91:4c:fa:41:14:1d:a5:
ff:a9:a1:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:37 2025 by rpki-client