Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer
File: LLo1Vmm0-bkDXwWx-6IR74aWEB0.cer (raw, json)
Hash identifier: nfDbFBaWEzB8ielEL0SJ5piMu/Nko+9DEFnAs0jQlfI=
Subject key identifier: 2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421445955B07D83B7870B0FCA296D404A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202886
IP: 2001:678:158::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:59:55:b0:7d:83:b7:87:0b:0f:ca:29:6d:40:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2cba355669b4f9b9035f05b1fba211ef8696101d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:4f:b6:4c:6d:99:88:8a:b8:4a:3b:68:3b:8a:
72:17:45:7a:57:80:1d:5e:a1:31:b3:82:d2:26:d8:
ca:ee:1f:65:1f:ad:83:bc:84:ca:cc:30:67:f8:ca:
f6:87:5e:e1:82:4b:2c:7e:4a:f3:35:57:f1:48:a9:
8b:0d:5f:85:39:22:24:29:f4:7f:31:73:10:99:9e:
85:4b:74:40:d3:ef:5f:f4:bc:30:0a:40:0a:4d:54:
17:3a:2e:2f:79:c6:ae:56:79:2a:23:9e:52:e4:ad:
69:9a:3a:48:29:82:50:ce:b7:2e:a7:1c:77:84:84:
93:c4:6c:d0:66:f9:8e:f1:22:3a:47:d4:df:67:36:
db:ff:03:4f:6c:e4:d8:3b:b1:92:67:61:59:63:38:
72:a7:33:73:f3:02:b6:b5:c4:c7:be:f8:f6:cf:d1:
a9:c3:81:57:3b:06:dd:c9:c6:52:13:01:80:70:1b:
c3:5c:79:8d:0d:88:1d:db:1f:dc:3b:36:d7:c1:56:
b9:0a:4d:38:b1:76:8f:f2:6e:42:84:47:33:f4:57:
0a:f4:4e:57:0f:4d:84:0a:91:c0:dd:27:ab:d8:01:
db:a8:fd:3c:17:de:93:8f:62:80:86:c5:04:5b:60:
0e:06:9d:82:95:40:c1:aa:ed:e4:83:d6:ad:02:da:
ef:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:BA:35:56:69:B4:F9:B9:03:5F:05:B1:FB:A2:11:EF:86:96:10:1D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/6fa6d0-f2c8-412c-9bc7-365c51a5f9ff/1/LLo1Vmm0-bkDXwWx-6IR74aWEB0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:158::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202886
Signature Algorithm: sha256WithRSAEncryption
0a:21:7e:d8:01:45:c6:9a:71:6e:dc:f5:a3:95:1f:3a:60:ac:
44:8a:d0:c5:0a:30:08:a0:51:59:12:96:e9:0f:35:53:01:93:
5d:1c:9e:33:d1:4d:9b:6d:7c:99:cb:53:67:0b:d0:06:df:2a:
6e:87:06:98:99:f6:9b:85:e7:de:e9:55:d9:c9:a1:ef:1d:26:
4b:42:66:10:1b:39:23:4f:e0:c4:1f:c8:06:df:42:99:b5:45:
02:7d:92:7b:5e:00:d3:ca:a1:02:88:2e:f5:3e:1b:e5:c4:7e:
3c:23:cc:4c:e2:bc:89:09:3d:e8:78:d2:92:db:74:1c:31:15:
b9:dc:21:b6:a4:9b:90:f6:fd:b2:cf:a1:3d:be:b7:01:01:8f:
6a:db:37:03:16:3a:ad:57:a0:72:7e:0a:f8:86:f2:c0:5f:50:
63:35:a6:b1:91:0b:6e:d3:6c:be:34:0b:e6:a2:e8:c3:5b:d2:
38:21:e1:da:47:a6:01:3b:40:33:d4:8d:71:3a:64:80:8c:c6:
e5:3f:33:be:b2:25:98:71:28:7f:99:4f:e6:be:cd:8d:56:3c:
ef:dc:33:08:ad:38:a1:2d:c8:9a:bb:87:7c:0e:fd:c8:31:ae:
34:ad:35:c8:5f:bf:3c:ac:b9:e0:af:55:59:ab:67:68:a5:b2:
0e:97:d9:5a
-----BEGIN CERTIFICATE-----
MIIFlzCCBH+gAwIBAgISAZQhRFlVsH2Dt4cLD8opbUBKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMDk0ODM1WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyY2JhMzU1NjY5YjRmOWI5MDM1ZjA1YjFmYmEyMTFlZjg2OTYxMDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuk+2TG2ZiIq4SjtoO4pyF0V6V4Ad
XqExs4LSJtjK7h9lH62DvITKzDBn+Mr2h17hgkssfkrzNVfxSKmLDV+FOSIkKfR/
MXMQmZ6FS3RA0+9f9LwwCkAKTVQXOi4vecauVnkqI55S5K1pmjpIKYJQzrcupxx3
hISTxGzQZvmO8SI6R9TfZzbb/wNPbOTYO7GSZ2FZYzhypzNz8wK2tcTHvvj2z9Gp
w4FXOwbdycZSEwGAcBvDXHmNDYgd2x/cOzbXwVa5Ck04sXaP8m5ChEcz9FcK9E5X
D02ECpHA3Ser2AHbqP08F96Tj2KAhsUEW2AOBp2ClUDBqu3kg9atAtrvGwIDAQAB
o4ICozCCAp8wHQYDVR0OBBYEFCy6NVZptPm5A18FsfuiEe+GlhAdMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzYyLzZmYTZk
MC1mMmM4LTQxMmMtOWJjNy0zNjVjNTFhNWY5ZmYvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNjIvNmZhNmQw
LWYyYzgtNDEyYy05YmM3LTM2NWM1MWE1ZjlmZi8xL0xMbzFWbW0wLWJrRFh3V3gt
NklSNzRhV0VCMC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUF
BwEHAQH/BBMwETAPBAIAAjAJAwcAIAEGeAFYMBoGCCsGAQUFBwEIAQH/BAswCaAH
MAUCAwMYhjANBgkqhkiG9w0BAQsFAAOCAQEACiF+2AFFxppxbtz1o5UfOmCsRIrQ
xQowCKBRWRKW6Q81UwGTXRyeM9FNm218mctTZwvQBt8qbocGmJn2m4Xn3ulV2cmh
7x0mS0JmEBs5I0/gxB/IBt9CmbVFAn2Se14A08qhAogu9T4b5cR+PCPMTOK8iQk9
6HjSktt0HDEVudwhtqSbkPb9ss+hPb63AQGPats3AxY6rVegcn4K+IbywF9QYzWm
sZELbtNsvjQL5qLow1vSOCHh2kemATtAM9SNcTpkgIzG5T8zvrIlmHEof5lP5r7N
jVY879wzCK04oS3ImruHfA79yDGuNK01yF+/PKy54K9VWatnaKWyDpfZWg==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:24 2025 by rpki-client