Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
File: N1UunJZN5v9U4JnHEVXBod7IpzA.cer (raw, json)
Hash identifier: eHJWtylJZuJXn4XAL2QyGKArqp0BmxIlcjc6P3uSVlM=
Subject key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B2248B84D63D4D0F053DAA78DF5593
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209543
IP: 45.92.204.0/22
IP: 185.150.36.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:24:8b:84:d6:3d:4d:0f:05:3d:aa:78:df:55:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:53:9f:b1:f1:7c:75:ba:35:36:e6:3a:6e:5d:
0e:f7:36:52:dd:aa:48:59:f9:2b:f9:71:cc:e7:50:
a2:ba:fd:11:a5:bd:50:cd:d1:68:1e:49:b7:6d:02:
40:25:be:75:2e:e2:26:98:7b:c2:38:d2:a6:ff:1b:
bd:6a:7e:61:fc:4e:cb:c2:ea:21:03:1f:63:af:eb:
17:be:08:f2:90:3b:8a:c5:01:db:e4:12:31:e0:5b:
3a:b9:a4:1b:98:a9:87:6b:c4:fb:bc:2f:68:93:40:
43:af:29:f2:f6:68:58:99:cc:77:8b:ca:87:25:45:
29:9f:a3:57:ab:9f:77:ec:bb:4a:a9:04:d9:64:f3:
ab:5f:ab:9b:4e:6f:98:b5:51:f7:1d:79:c5:4c:dd:
37:7f:82:91:ce:68:03:62:27:eb:9c:a7:94:3b:fe:
62:f3:14:78:d8:bd:fe:08:9a:8a:b7:aa:82:4a:61:
d4:2d:97:7f:0b:97:d5:d3:47:26:59:f9:38:3f:86:
fc:a9:3a:5d:05:67:e2:2e:d3:eb:4c:ad:34:d3:37:
5f:76:ce:d4:2d:0c:8c:81:6c:8e:77:c6:63:d7:30:
db:40:a8:4e:1a:16:45:8c:9b:1f:1f:9a:14:b4:72:
5c:20:0f:c7:f2:41:90:c2:5f:05:a4:ec:7a:fa:08:
82:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.92.204.0/22
185.150.36.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209543
Signature Algorithm: sha256WithRSAEncryption
97:84:26:ba:b9:6c:17:2c:da:9a:1b:6a:23:23:6c:d8:3b:86:
3a:c9:f6:34:9b:5c:46:8f:86:12:db:ac:4e:c7:49:b0:bc:b5:
01:cb:db:ae:a0:16:fd:a5:0f:e0:6b:40:11:81:8c:7c:84:91:
2b:e7:9f:bf:85:c7:bc:c6:0c:38:59:13:a3:f9:78:95:bf:a8:
d1:ca:18:d6:5e:8a:c6:d2:ed:0d:5a:a6:a4:1f:b6:10:8f:4d:
44:95:e9:88:7a:3d:88:45:09:c2:06:ce:f6:90:ac:82:6c:d3:
16:84:ed:df:86:46:bd:92:c1:2d:2f:2a:a2:02:73:12:f6:50:
26:f2:8a:1b:37:e9:9d:c6:51:ec:e3:03:64:f6:15:1b:4e:16:
66:02:43:10:09:6e:4c:3e:5e:0e:f2:d8:db:73:b0:de:6a:5b:
97:9c:1e:33:8d:45:27:47:bf:63:ef:99:ce:bd:32:47:41:15:
aa:f6:8d:ac:e8:11:59:b2:0f:ee:f5:77:8d:a8:b3:bd:c6:96:
40:ba:9b:21:fa:df:88:96:a5:36:ea:78:66:1e:91:1f:cd:1a:
ea:a1:5b:53:2c:6b:bd:74:17:bb:a1:b6:dd:e9:3d:21:2b:81:
51:fd:58:bc:97:57:6b:80:48:0a:30:f7:d9:98:c4:32:95:fa:
c9:16:e3:bb
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:29 2025 by rpki-client