Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/RtcTrajavPd2gcDKQtmWnkR8jqc.cer
File: RtcTrajavPd2gcDKQtmWnkR8jqc.cer (raw, json)
Hash identifier: L4WNQs/nf93MQWu8OLnqXPz3DJAGFptlhS8PbCaKggo=
Subject key identifier: 46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942825A394AFFBC6510FB04812C3B87F45
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:52:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39673
AS: 205036
IP: 91.209.40.0/24
IP: 91.209.48.0/24
IP: 91.209.50.0/24
IP: 91.209.58.0/24
IP: 2a0f:5fc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:a3:94:af:fb:c6:51:0f:b0:48:12:c3:b8:7f:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:52:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=46d713ada8dabcf77681c0ca42d9969e447c8ea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f9:35:7f:95:36:ab:c4:de:0a:1e:c3:7a:7e:
97:59:7b:e0:ff:cf:bb:60:e3:06:60:2d:7b:32:71:
a6:f3:38:d8:7c:bf:7c:c2:dd:94:fa:01:f6:6f:61:
43:05:8d:46:4c:ec:01:cb:22:b8:ad:4a:69:f2:ac:
7b:e1:37:c2:8a:41:d6:91:09:14:06:f3:ae:c8:e0:
93:08:5e:68:b3:fe:de:2d:78:fa:c4:ce:8c:69:45:
33:b0:2e:f8:40:1e:13:49:fe:c5:f4:77:b3:4a:e6:
bd:6e:04:2b:89:e7:c3:8b:bf:ed:a1:3f:ba:05:7e:
e2:f6:ad:83:8c:76:55:5f:6c:3b:9d:b1:92:86:04:
a3:9d:4d:b9:0a:76:ee:0b:f5:25:ad:c8:fb:0e:29:
d7:af:0e:72:8c:f5:6c:bd:0c:8f:6c:97:3a:d5:b5:
38:7d:34:69:d7:4f:25:c3:0e:50:9c:8e:5a:74:1e:
32:37:1e:f6:b0:e0:ee:7a:2a:87:ad:ec:72:5c:1e:
7e:8f:21:1f:3d:33:e8:26:44:24:ab:aa:70:d4:b6:
25:c4:8c:e9:18:43:df:35:b2:ad:0c:c7:85:26:cb:
fb:32:6b:15:2d:d7:5b:4d:73:26:24:00:cf:91:39:
94:4a:f1:ce:12:96:62:26:bb:82:b7:5a:02:1a:64:
71:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:D7:13:AD:A8:DA:BC:F7:76:81:C0:CA:42:D9:96:9E:44:7C:8E:A7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/89f0f6-a5ac-467b-a4ad-be218cef4a11/1/RtcTrajavPd2gcDKQtmWnkR8jqc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.209.40.0/24
91.209.48.0/24
91.209.50.0/24
91.209.58.0/24
IPv6:
2a0f:5fc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39673
205036
Signature Algorithm: sha256WithRSAEncryption
04:46:96:43:22:fd:e8:32:f1:9f:2e:12:7a:3d:d5:11:d0:e4:
d6:08:80:a9:34:4c:45:5f:48:a5:b4:90:f4:53:25:ba:56:c7:
e3:b4:58:89:19:66:b8:87:35:db:6a:a1:f0:c9:67:b3:12:f8:
09:e6:e7:b8:46:b9:83:8b:bd:0b:1f:be:54:cd:4e:c2:a6:09:
a2:77:3d:cd:3f:39:e2:93:21:b0:7e:a6:06:34:29:98:56:d5:
78:d0:7d:41:35:38:6c:43:2b:f3:00:70:b5:25:be:88:0e:63:
d6:3b:75:99:58:21:96:f1:3c:81:8e:c8:35:19:f8:82:61:0a:
94:26:6a:76:10:64:29:24:aa:14:2b:73:f3:a9:f8:5a:78:ab:
54:75:65:a3:4a:3a:19:36:81:0d:e0:49:20:02:85:58:65:d3:
d7:9c:6b:85:f0:f0:00:63:68:68:c5:6b:3a:df:ab:3e:69:94:
66:58:15:46:a0:81:26:27:cc:14:6c:e3:5a:35:b4:00:52:4f:
09:c6:a6:ba:1b:08:b5:bc:08:2c:a5:64:6a:a6:b7:90:ef:12:
33:70:98:db:35:b8:41:9a:57:b5:b1:9c:90:7e:41:fb:d2:70:
4c:de:e7:46:85:85:d8:df:26:6f:b8:9a:0b:9e:d3:8f:cc:c0:
a9:b2:a8:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:56:07 2025 by rpki-client