Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/PYAS-hSs56DDvS6C4KKdmkS_4pA.cer
File: PYAS-hSs56DDvS6C4KKdmkS_4pA.cer (raw, json)
Hash identifier: jv0pdRz5j3vup6BhHbi1BxaAIiGuHczgbBBFrI2UPHw=
Subject key identifier: 3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427464A32F270AA76113CE9B3C346EDD8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 206801
AS: 209137
IP: 5.180.168.0/22
IP: 185.170.136.0/22
IP: 2a10:c00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:46:4a:32:f2:70:aa:76:11:3c:e9:b3:c3:46:ed:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3d8012fa14ace7a0c3bd2e82e0a29d9a44bfe290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:3a:91:cf:f8:ed:bc:8e:a6:08:64:63:fc:b0:
c7:1c:fa:c1:a5:0a:42:82:41:a8:4e:e0:f9:20:aa:
4e:b8:e0:08:3d:be:16:e2:79:e9:c8:73:63:2c:90:
86:42:de:82:cf:ab:5f:4f:46:d3:1b:5b:e2:50:fe:
bf:5b:2b:21:f1:45:1d:3b:d0:e6:8d:e6:57:08:70:
06:5e:6b:d8:74:cc:4e:7d:0e:b3:20:97:bb:a0:51:
b2:64:37:1c:99:e9:d7:17:c2:6c:ad:59:d4:0b:0a:
3d:04:08:a5:15:fd:5e:b8:e5:cc:8c:77:4b:b5:d4:
8c:90:36:41:d7:cc:7e:d3:14:f7:83:ab:e6:aa:3f:
be:dd:0a:3e:fa:36:46:f9:67:74:bb:b8:85:b3:38:
2d:06:a3:4a:be:de:e3:4b:5d:d5:29:69:ad:12:df:
27:8c:53:95:f9:3f:7c:93:4c:b6:38:29:be:c4:33:
fd:27:30:11:3b:f9:64:60:c8:de:58:65:ee:b0:78:
20:2d:b6:4f:33:1c:13:a3:f1:7e:ff:5c:45:7e:d4:
47:ae:34:24:0b:87:ea:fb:db:67:98:9c:79:b0:65:
df:c9:03:19:6a:97:fa:66:06:12:de:6b:3a:93:d9:
57:25:4d:de:66:70:cf:d7:b6:c8:fa:fe:6a:e0:68:
60:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:80:12:FA:14:AC:E7:A0:C3:BD:2E:82:E0:A2:9D:9A:44:BF:E2:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/ef5ed1-bdee-4639-9248-77f84c562a5f/1/PYAS-hSs56DDvS6C4KKdmkS_4pA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.180.168.0/22
185.170.136.0/22
IPv6:
2a10:c00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206801
209137
Signature Algorithm: sha256WithRSAEncryption
36:53:b9:a3:96:24:c0:98:57:9a:6d:74:ad:1a:2c:2a:92:bc:
ee:8b:0e:9c:db:eb:4a:df:99:50:b4:9c:0d:24:c0:94:cb:78:
b2:da:21:6b:e7:64:9b:47:9b:80:f2:08:9e:46:c4:ce:3d:5c:
ce:ac:71:95:1f:73:8b:17:e0:f2:fb:32:0e:bc:ac:61:9c:95:
fb:62:73:d2:68:83:2b:e8:58:07:eb:48:94:de:aa:e3:aa:34:
1f:22:14:cc:ad:d6:26:5e:6e:79:ba:50:23:0b:10:e2:dd:7f:
be:f0:47:05:fe:9e:d1:17:43:f5:b9:a9:d7:e8:ce:e9:14:e1:
3d:d0:3a:73:eb:6b:af:2c:3b:f3:95:cd:e5:e8:20:d8:b6:c6:
41:01:76:58:50:0e:d3:2f:1a:04:11:f7:3e:30:db:54:ad:24:
53:73:ac:ba:06:5a:a1:9f:ee:92:1f:72:fd:b2:53:ec:08:03:
bb:73:34:20:95:ec:3f:3a:06:04:45:41:91:18:bb:f9:15:7b:
ba:f5:ab:b2:32:d1:d6:3b:c6:00:30:83:99:e6:8d:a4:5e:bd:
5d:94:a1:2d:b7:ea:39:f0:7a:1c:03:17:70:c0:15:bd:8f:cb:
aa:40:a2:3b:be:c6:00:d2:7f:92:d0:fb:d5:fc:53:06:82:a9:
7e:f8:d7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 18:45:33 2025 by rpki-client