Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/LOcbH07qAVkkYSX8WumtUaRHks4.cer
File: LOcbH07qAVkkYSX8WumtUaRHks4.cer (raw, json)
Hash identifier: BZN5yX93EFje+F1ejYyHEmCHNFP0aSCEbQt6THN/lUg=
Subject key identifier: 2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424449CC212B15FD3C0E1854A243C5A0A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197735
IP: 91.226.26.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:9c:c2:12:b1:5f:d3:c0:e1:85:4a:24:3c:5a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2ce71b1f4eea0159246125fc5ae9ad51a44792ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:52:bc:9b:3c:c4:c4:2d:09:ba:b3:c3:27:c4:
7f:ef:6b:c6:b2:93:51:73:a6:56:f6:db:ed:7a:d1:
80:34:49:27:7e:4d:6f:a0:5b:1c:8d:c3:3a:8a:37:
75:bb:cb:62:9f:6d:31:62:79:8f:ca:f9:84:ca:56:
b0:ce:6f:26:e9:2b:11:9f:b3:2f:73:0c:9a:de:1d:
b6:e8:5e:f5:57:4d:73:81:0b:2f:f1:1a:cf:8e:f2:
b5:57:47:d5:48:3f:a4:ea:c9:e8:66:9b:20:88:45:
42:3b:c6:89:32:b6:21:a7:3a:a2:0d:32:bc:fb:fe:
f6:c7:75:1c:d4:fc:53:ba:70:e4:c2:f9:eb:c8:86:
67:84:67:37:31:9d:c3:62:df:dd:eb:dd:d3:b0:a7:
96:99:6e:c5:08:3e:34:b2:62:a1:7b:63:4b:c3:86:
dd:cf:00:97:1c:64:58:29:8d:b6:d7:ee:dd:c1:e0:
cd:6b:8a:92:88:3d:10:3d:54:43:f4:5b:13:e0:7d:
25:12:5d:df:cd:9b:67:44:07:b1:e2:f2:0c:95:24:
b0:c1:91:b6:2b:94:8f:b2:f3:e1:56:70:3b:99:ca:
45:e2:bd:f8:37:c9:99:4e:fd:a2:0a:df:5c:de:90:
83:71:37:e7:9a:99:4a:a4:e1:cd:b0:da:3c:17:a6:
62:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:E7:1B:1F:4E:EA:01:59:24:61:25:FC:5A:E9:AD:51:A4:47:92:CE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/f1d976-726b-4cb7-9fa2-02b33582c747/1/LOcbH07qAVkkYSX8WumtUaRHks4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.226.26.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197735
Signature Algorithm: sha256WithRSAEncryption
30:3d:50:a4:6d:c5:37:75:99:16:ba:54:b9:97:2b:fc:9c:ea:
19:f8:b1:9a:ba:db:21:e9:45:d9:b3:c7:1f:64:73:b5:9e:96:
4a:2e:ad:b0:f4:7e:df:aa:fd:cf:fd:0c:3c:90:44:3b:5c:59:
7b:51:63:a6:4c:99:56:01:b2:0b:b3:64:58:64:1a:22:b6:0a:
75:d5:d8:a7:1f:67:5e:b6:29:92:d6:26:e9:97:2a:d4:c3:f1:
17:96:07:eb:09:33:c1:ac:98:65:1e:da:9c:e6:59:1e:46:f8:
1e:95:c0:87:ed:68:ee:70:71:1f:11:e0:e5:50:19:18:dc:da:
61:aa:44:b8:75:96:da:d9:f1:58:f5:78:3c:ce:98:59:1a:86:
84:4c:b3:63:b6:e6:95:d7:20:fc:a8:8e:9d:a3:c6:b3:3c:43:
f1:f2:6d:d6:e6:51:4d:1a:77:85:c1:d4:60:0c:c5:ad:c4:3f:
46:73:5a:6d:43:08:1e:c9:ec:75:0f:0a:ae:58:45:7f:fe:7c:
0b:44:f9:ff:a8:b3:6c:a2:b2:75:0c:2e:5d:26:e0:db:d6:a3:
1b:5d:f1:a1:d8:2b:75:81:05:c8:d8:ed:9d:d2:6e:fe:84:c1:
a4:ae:5a:5b:44:01:82:7a:bf:22:65:74:96:8b:29:5c:d0:b2:
83:4e:7c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:43:31 2025 by rpki-client