Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RK1W7mAdrD36Yd_lLL9bALe3opA.cer
File: RK1W7mAdrD36Yd_lLL9bALe3opA.cer (raw, json)
Hash identifier: 1eTdUyRcpxZDVWR+tNQ7KeYjGD3bexi7kzcPsp6oV2M=
Subject key identifier: 44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424454251C4F35189D66A3781E8A77A3A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:48:26 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60133
IP: 91.198.135.0/24
IP: 2001:67c:578::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:45:42:51:c4:f3:51:89:d6:6a:37:81:e8:a7:7a:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:48:26 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=44ad56ee601dac3dfa61dfe52cbf5b00b7b7a290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:64:7c:09:f3:3a:e7:cf:81:e0:22:8b:11:87:
ee:91:78:da:f6:e5:8a:fd:98:f4:82:88:9f:24:1e:
c8:8a:c5:dd:aa:89:c8:9a:4b:7f:d3:83:bd:fb:f7:
2f:d8:0f:15:88:f4:cc:16:b0:8f:ed:cf:cc:ec:63:
77:9e:02:ec:2f:cc:bd:66:2c:b7:4d:94:88:4f:e3:
29:71:35:a6:cd:1b:9e:99:b6:d2:f9:30:e0:b8:64:
d0:42:fa:5f:23:37:68:e4:e3:95:a4:a2:ca:73:20:
25:f5:99:6b:dc:69:36:79:b1:e0:60:11:f1:ce:d6:
fd:4f:e4:e8:80:51:97:84:69:c2:99:5d:6c:58:7b:
59:10:9d:73:50:ab:06:30:9a:45:3e:01:42:57:21:
7b:e6:da:2d:91:b4:f9:73:65:0a:61:7b:b0:fe:27:
8b:df:18:ea:a0:a3:a1:24:7b:87:2c:b4:fb:93:53:
fc:cc:18:8b:61:a4:8b:e1:3f:eb:1e:ee:37:eb:23:
cf:8d:19:97:1f:06:6d:19:55:54:2f:f4:c3:c5:26:
60:7c:5b:96:35:05:a3:f3:b2:dc:21:63:02:07:26:
02:bf:2f:f7:7a:1d:f2:c6:9c:d7:dc:1b:d4:36:01:
2c:81:10:5b:80:d4:06:a2:de:34:f5:2b:c1:89:62:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:AD:56:EE:60:1D:AC:3D:FA:61:DF:E5:2C:BF:5B:00:B7:B7:A2:90
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/cfa5b0-7988-4fe9-9dd5-eed204ed9780/1/RK1W7mAdrD36Yd_lLL9bALe3opA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.135.0/24
IPv6:
2001:67c:578::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60133
Signature Algorithm: sha256WithRSAEncryption
50:03:c5:34:dd:47:14:b3:ec:e8:9f:ed:17:7c:ab:d8:8e:c7:
ff:52:35:d0:1c:56:05:8d:90:48:5d:be:e6:73:9c:ec:45:57:
98:4a:b5:86:ee:4f:45:5b:82:5f:d2:7e:8b:22:52:85:6c:8b:
71:37:04:ae:48:f0:f0:59:0e:49:ba:4d:40:cb:4e:94:28:72:
2b:b9:65:c2:ba:50:54:03:5b:6b:75:1b:b1:71:73:75:fa:55:
bf:3e:bb:4a:cb:90:63:89:b1:42:ef:73:4b:73:5a:13:29:c5:
4c:9f:f9:43:05:36:11:30:b1:e2:2e:9f:73:3b:17:49:d2:64:
79:51:3a:8e:19:10:39:63:4c:f5:da:79:1e:85:b8:0f:8e:8a:
aa:7b:91:cf:b1:6c:b9:51:03:a6:96:51:67:07:5d:83:99:e3:
04:ca:da:cf:2b:98:2c:3e:83:f9:03:d0:15:68:9b:31:18:a9:
a2:85:ad:e4:1a:9d:31:c9:f5:e1:6f:45:d6:9a:70:f0:ed:6e:
5d:7b:8a:5b:df:bb:55:5a:b9:0c:c4:3d:4e:ca:65:0d:31:79:
15:e2:14:c6:b0:9c:c4:62:2e:2c:2d:ef:05:cf:7d:3a:f1:99:
ce:1e:46:2f:ce:95:60:fb:03:b5:6e:e3:ba:c7:d1:1f:67:a9:
3f:bc:3b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:45 2025 by rpki-client