Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JPUbvfAQiNNMa6ru-GvaJanwIZY.cer
File: JPUbvfAQiNNMa6ru-GvaJanwIZY.cer (raw, json)
Hash identifier: 8EH5QIRzedKwGkOs41zqQCQGMQqFDCR8vMShHFprorM=
Subject key identifier: 24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942444F0FB02474F66AC0E5A08458A712B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 49471
AS: 49500
AS: 50814
IP: 91.205.221.0/24
IP: 190.211.144.0/24
IP: 192.68.136.0/24
IP: 2a11:4000::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:f0:fb:02:47:4f:66:ac:0e:5a:08:45:8a:71:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=24f51bbdf01088d34c6baaeef86bda25a9f02196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:31:6c:1e:71:ee:c7:23:79:42:ef:b8:c3:3d:
c4:88:ca:ac:41:33:0b:62:f7:08:ee:d7:b5:e4:5d:
25:b1:1d:e7:a0:79:2e:1b:ad:84:e1:e4:4f:72:31:
d8:0f:61:bd:28:6a:75:15:cd:34:11:10:d7:69:5f:
e3:f7:59:5f:f9:6e:76:87:b0:88:66:02:8e:eb:b4:
eb:db:31:7d:64:65:5c:d7:d9:8d:19:56:a2:f8:6b:
04:84:40:2b:8c:57:b1:e0:6c:9a:cc:42:16:68:98:
de:75:58:68:80:6a:88:b8:12:19:78:ec:65:35:2c:
11:4f:7b:a4:1e:23:06:4b:17:12:1f:28:4b:ca:77:
ed:7d:ed:e0:19:31:64:1b:6e:09:72:a3:f9:6f:93:
aa:36:73:2e:ae:55:e4:36:07:d2:55:24:de:4f:1e:
ac:2f:5c:b2:c0:ed:87:1b:1c:f0:28:4e:42:8b:80:
4b:50:40:4b:7e:dc:98:29:5b:b3:9a:97:06:f8:b5:
36:43:60:9e:85:ed:bf:d4:32:98:8c:63:6a:7b:ca:
6d:d6:07:2c:b7:9d:06:d0:cc:2b:11:4a:c5:8a:18:
4d:06:50:48:f0:25:31:54:ef:93:d2:fb:a7:d8:f7:
62:a4:b6:2e:87:08:66:b5:7f:6b:4a:7c:d5:ab:dd:
c8:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:F5:1B:BD:F0:10:88:D3:4C:6B:AA:EE:F8:6B:DA:25:A9:F0:21:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/e8ebd6-561d-42af-bb36-5201a23d7a49/1/JPUbvfAQiNNMa6ru-GvaJanwIZY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.205.221.0/24
190.211.144.0/24
192.68.136.0/24
IPv6:
2a11:4000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
49471
49500
50814
Signature Algorithm: sha256WithRSAEncryption
07:b7:2e:17:f1:20:45:a3:b2:2c:8b:53:70:db:90:ff:b0:91:
38:ef:a4:22:bb:64:ce:9e:af:07:47:b3:41:b5:c9:d4:eb:e6:
03:a9:2d:ba:c0:f0:6a:a9:d1:56:d7:b9:19:38:52:83:60:7f:
ba:8a:95:50:18:42:b7:86:fa:4b:e6:55:ad:53:35:94:e0:c8:
d5:b1:ab:02:cc:e4:bc:0d:1d:7d:c1:1c:ca:a8:a7:a5:51:49:
38:0d:45:84:40:cc:39:f4:cd:8b:50:24:bf:c8:07:86:df:4b:
72:a6:a0:65:31:ed:7a:79:5e:ab:dd:24:b5:1d:44:20:b4:d7:
99:d5:e9:ee:54:69:e8:90:7c:89:0f:63:50:82:43:e6:32:44:
3f:59:67:01:e5:3e:26:63:d4:42:29:30:79:4e:18:e8:c3:fe:
43:01:ec:85:d6:47:50:b2:49:5d:05:83:f1:33:14:93:dc:c7:
bd:3c:40:50:ea:44:fd:5c:38:d9:d5:77:a5:44:d3:ef:57:80:
69:62:ba:46:f7:ae:1b:0d:a8:9f:6d:b6:c7:3f:86:1e:4c:3b:
29:50:91:0e:56:00:9f:0f:b8:4f:ef:65:c0:e0:26:38:df:f8:
09:fa:0a:05:8c:0e:30:3f:70:2d:4c:bd:fc:06:a3:22:83:ca:
ee:1c:5c:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:11:03 2025 by rpki-client