Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/L5INmRKzpyi5SBgYjvPj5X-NP5w.cer
File: L5INmRKzpyi5SBgYjvPj5X-NP5w.cer (raw, json)
Hash identifier: /jnk2JMWrcsvBmiBSOjCZJklmJh+yuT139DlwRvv17g=
Subject key identifier: 2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420686EA5A05F1B98D66B10CD4DE38712
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204991
IP: 91.203.226.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:6e:a5:a0:5f:1b:98:d6:6b:10:cd:4d:e3:87:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2f920d9912b3a728b94818188ef3e3e57f8d3f9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:01:c1:ad:5e:cb:bc:de:16:74:b1:87:6f:12:
b8:c7:c3:19:f6:6f:74:f0:8b:58:f9:18:6a:b9:e7:
92:af:e3:19:07:0f:ab:b9:20:6c:52:cb:b5:41:61:
bb:dc:25:21:4b:ab:5d:ac:0b:f8:b8:47:64:bb:12:
d9:a0:9c:74:07:42:f2:52:19:5e:c1:84:9f:5f:9a:
2f:73:aa:ba:b0:e2:b1:6f:50:6d:27:f4:53:ae:64:
04:c3:b0:e6:d2:ce:2b:68:55:63:95:e6:01:09:69:
22:12:4a:5a:e8:91:ed:a8:36:77:87:88:6e:99:57:
2c:eb:b6:c9:60:1a:20:37:c4:c0:c5:d2:27:6a:4e:
67:70:45:81:00:b5:a4:04:7a:66:1e:46:eb:53:b8:
b4:3e:90:b7:0c:61:da:92:d3:02:15:83:9d:3d:c0:
38:05:c7:92:8d:3c:8f:af:ab:f6:b6:69:b4:f5:f3:
7a:32:1b:96:e2:2c:94:a0:89:63:38:16:ef:be:07:
df:2f:71:bb:66:8c:f6:2e:93:01:1e:d7:9d:b8:0b:
41:4b:43:d2:e8:4d:7e:cc:33:40:57:be:86:fb:8b:
e7:99:16:5e:52:36:dd:6b:72:f4:bb:c5:23:4c:83:
d3:35:e2:50:7e:21:f4:d1:95:d3:d6:0a:f3:d1:5d:
eb:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:92:0D:99:12:B3:A7:28:B9:48:18:18:8E:F3:E3:E5:7F:8D:3F:9C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/626525-6ac4-4ad3-b8d2-9c3000245676/1/L5INmRKzpyi5SBgYjvPj5X-NP5w.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.226.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204991
Signature Algorithm: sha256WithRSAEncryption
90:00:c4:c9:ea:e1:eb:da:93:d7:a9:4b:87:fb:3d:c3:ac:20:
7e:ab:4f:bc:b1:fa:25:ad:1b:a8:4f:8f:c2:50:15:0f:8c:d8:
bb:c1:88:58:d1:57:05:dc:08:60:84:a3:a0:26:e6:5b:11:10:
d3:30:23:de:25:87:5a:c8:95:e0:d7:85:43:e9:29:2e:ed:66:
87:bc:55:aa:59:12:aa:11:fc:d2:f1:7d:02:89:89:79:91:17:
b2:5d:a8:e9:f4:7c:74:58:6d:cf:78:bb:e5:71:fa:1b:e1:f6:
1e:ff:c5:98:35:19:40:96:52:1c:75:62:4e:57:9e:6c:77:02:
ca:5d:e3:8d:c5:67:39:e1:f7:c9:de:b9:25:f8:6a:29:cb:67:
81:a9:1a:41:d8:bb:db:2a:7b:2a:52:8e:a2:10:6f:cd:37:76:
76:ba:20:fb:1f:bd:f3:f6:53:a8:8a:fa:49:e1:84:b0:f5:81:
68:da:78:4c:24:0d:0d:36:3b:f4:ad:b6:bb:7b:a9:44:48:03:
4d:bd:ba:40:5f:28:2f:c4:c6:d5:3a:f6:c4:ea:a3:f4:10:3c:
ed:c7:56:58:75:b6:2f:44:ec:ea:81:5f:4a:06:80:a0:97:d8:
b7:3f:e5:50:95:50:ba:c6:84:6b:fe:7e:5a:08:e9:a1:48:47:
19:4e:57:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:22 2025 by rpki-client