Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer
File: PJ9AD4hPcDAxjra-dMUoSFq-RGA.cer (raw, json)
Hash identifier: cPek5JLkQac+BJEcljPuRtoIE5qrhNgdV5QE074lMEM=
Subject key identifier: 3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC1759AC1631C0D1F6F3402E8469A9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 48869
IP: 91.199.59.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:17:59:ac:16:31:c0:d1:f6:f3:40:2e:84:69:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3c9f400f884f7030318eb6be74c528485abe4460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:18:1c:38:7c:a8:83:c8:6e:4d:85:f6:d9:cb:
39:41:c0:dd:43:fe:ee:ad:49:6a:d3:cc:f1:2d:cc:
bd:81:16:1f:6e:bf:bb:17:f1:30:d0:27:e1:12:31:
95:6d:fb:42:31:07:f3:a7:ba:2c:45:12:2b:c8:2f:
07:50:7a:cf:9e:c9:db:07:eb:df:d0:34:aa:fe:36:
00:ae:cd:8a:d8:53:0e:59:59:9a:72:c0:33:13:32:
9e:a7:93:8c:cc:79:1d:23:89:f8:cb:91:80:a7:f3:
71:8e:23:b1:8f:95:f9:04:8e:da:78:21:d8:dc:de:
3b:cf:93:f4:77:8a:7e:3c:1b:f5:5c:8e:06:9d:ea:
c2:10:0d:11:e9:2c:bc:6c:39:63:8f:f8:0d:4b:b5:
99:aa:aa:ea:49:4d:3e:4c:6f:a0:26:04:85:69:70:
ad:6d:2d:fa:41:2d:56:97:a0:16:90:d8:66:09:1b:
b8:99:e5:96:9b:24:55:bf:17:81:da:b1:13:93:ee:
48:b7:11:b4:e2:9c:9d:aa:b8:23:de:f6:88:2e:5b:
c7:34:02:04:0a:9c:55:8c:17:81:91:41:a4:c1:81:
c9:64:83:08:4f:4a:64:2f:91:96:05:58:be:2d:5f:
5b:43:48:af:47:67:80:51:6a:ef:e3:57:d9:df:ce:
d4:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9F:40:0F:88:4F:70:30:31:8E:B6:BE:74:C5:28:48:5A:BE:44:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/84abd5-191f-4f88-bde1-f848ddc5a0b2/1/PJ9AD4hPcDAxjra-dMUoSFq-RGA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.199.59.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
48869
Signature Algorithm: sha256WithRSAEncryption
86:2a:fb:d0:cf:3c:db:00:d1:b5:b7:d4:c7:31:85:8f:5b:1c:
b8:21:89:27:36:74:3d:68:93:1b:dd:e3:95:8c:36:0d:f1:3c:
80:93:f4:7a:20:ba:90:08:fc:bd:0f:51:21:72:e8:7b:78:04:
e8:ab:57:fd:1d:38:ba:a9:31:75:02:bc:a8:e2:2e:eb:98:c2:
c9:29:f4:76:3c:d8:c9:ff:08:05:02:49:29:43:0a:ef:00:c9:
a1:2d:5e:0c:9f:6a:0b:a7:f4:47:d9:91:0f:86:91:d2:56:7c:
de:59:67:19:c7:ef:3c:00:17:3c:ae:62:ed:65:00:e6:e8:70:
dd:ba:6f:b7:14:73:8a:c5:3b:fd:09:b9:da:52:94:19:9f:ae:
77:c8:48:3a:60:10:49:6c:78:58:f7:49:0f:ce:12:c0:60:63:
fa:ec:40:20:8d:7a:a8:3b:6d:31:bd:01:f6:a0:12:90:7a:28:
48:1d:dc:46:d0:75:1b:37:85:7a:2b:f1:3d:27:49:b1:58:8e:
b7:15:38:8b:41:10:49:a0:92:74:d1:3f:f5:98:b7:c3:0c:c8:
d4:31:9f:99:75:e0:02:7b:68:ce:51:c1:12:71:a2:60:b8:0e:
b5:61:73:36:b6:c9:24:16:fb:6c:10:63:80:a7:dc:ac:b0:b0:
6e:8c:93:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:52 2025 by rpki-client