Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RjXaOiCHnlX-loU-DXru_1M4bos.cer
File: RjXaOiCHnlX-loU-DXru_1M4bos.cer (raw, json)
Hash identifier: E1OBLbvXuDpgZEomFN2M6KbZfFTo4Jnuun9M0BAHWHU=
Subject key identifier: 46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC554B6066982DF82AD0FE920553DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201130
IP: 5.63.22.0/24
IP: 194.150.184.0/23
IP: 2a13:4340::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:55:4b:60:66:98:2d:f8:2a:d0:fe:92:05:53:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4635da3a20879e55fe96853e0d7aeeff53386e8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:cb:0a:09:a0:b7:f2:08:29:ce:b4:c1:88:bd:
1e:a1:11:35:4a:11:8b:36:09:fd:03:b8:31:34:21:
36:b4:25:17:9c:2f:f0:8e:5e:62:7a:c4:ea:66:c4:
d7:ff:a8:42:93:6c:94:43:65:c0:18:ed:27:ac:df:
e2:0a:d7:cc:5f:6b:59:63:79:d1:58:56:57:c9:07:
3c:b7:e5:b3:b0:88:2e:c4:d9:09:9e:e8:19:ff:fc:
ad:20:11:38:cf:d0:4d:48:d9:6e:84:9f:51:df:91:
7d:3d:ac:b9:72:cb:65:f6:24:61:98:db:02:36:3b:
a3:f5:95:9a:b1:14:11:9d:e8:4c:60:cc:da:24:14:
aa:cf:8a:24:25:7c:2e:4c:14:6a:7b:fd:ba:ff:99:
3f:d7:b3:d6:bf:1c:ea:01:bb:15:62:37:c3:85:90:
1e:f9:6f:d1:43:ce:eb:86:83:72:46:6a:cc:26:ff:
5f:39:df:ae:c3:e4:a9:35:0d:54:a2:1f:d2:d8:28:
e9:3e:d8:c5:44:8c:a1:42:fb:c6:70:ed:58:d1:0c:
27:c2:9e:a4:92:50:b9:91:41:2c:cc:2a:44:5d:44:
ab:4c:dd:c4:98:10:7d:16:fc:82:99:24:99:bc:ba:
64:14:83:d0:06:c2:3a:e4:b2:cd:4f:9d:3f:8c:cd:
e6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:35:DA:3A:20:87:9E:55:FE:96:85:3E:0D:7A:EE:FF:53:38:6E:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/bfb4c8-5655-440f-85b8-c40ce32b6f76/1/RjXaOiCHnlX-loU-DXru_1M4bos.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.22.0/24
194.150.184.0/23
IPv6:
2a13:4340::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201130
Signature Algorithm: sha256WithRSAEncryption
4e:a5:86:38:4d:da:8e:16:0c:9e:04:b4:65:5b:79:ab:27:8b:
fb:d1:08:b8:ed:ca:97:68:2a:fd:bb:34:34:13:0c:a3:86:b4:
b7:ac:20:6d:46:94:26:59:68:9d:6d:de:13:1d:0a:f4:1e:ff:
d8:43:e8:a6:f0:37:ea:32:c6:ec:d1:58:61:22:78:44:c4:df:
38:d2:44:64:f0:2e:33:ec:3e:a9:e8:0c:02:cd:95:27:3d:3d:
c0:82:8b:01:f0:b2:63:16:20:6c:45:c1:2b:27:ba:e7:65:92:
4f:b5:c5:c5:f3:83:c3:b2:b1:cd:2f:e1:5e:35:21:6b:1f:fa:
bb:84:83:1d:cc:09:2f:77:7f:8a:02:32:09:44:fa:49:43:b7:
8f:39:87:0a:3d:54:58:4e:2f:f3:75:00:90:84:de:36:f0:59:
35:55:3e:15:ea:43:a4:be:cd:06:6d:54:a5:fc:8b:55:55:da:
d6:f2:db:80:48:6c:8f:91:1f:fc:74:b7:f7:3d:de:8c:ce:86:
23:84:1c:03:80:c0:ab:60:78:3d:ec:23:55:c8:46:d1:4b:86:
18:43:bb:ab:13:3f:27:72:35:36:bc:91:7d:30:3b:de:37:e3:
b3:55:f1:b4:47:42:6a:1c:06:c9:da:db:dc:b5:bf:bf:7a:66:
0e:c1:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:05:51 2025 by rpki-client