Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer
File: S1dyWwpgXU3cxGS3Dcs6FipfBVs.cer (raw, json)
Hash identifier: FHHFTHEr07a0vd7eCf6gtpUeg0LUX/hN0Cs6sZThe4I=
Subject key identifier: 4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B37D54E8BFDD5E72E12444CC485A0C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51440
IP: 37.122.158.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:7d:54:e8:bf:dd:5e:72:e1:24:44:cc:48:5a:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4b57725b0a605d4ddcc464b70dcb3a162a5f055b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:4f:e1:6c:fe:17:db:ac:b3:7d:46:ab:c7:cb:
40:3e:53:57:56:38:00:b7:b6:00:7c:8c:f6:bf:44:
34:bd:aa:e5:51:35:21:33:90:a1:50:68:0b:0c:63:
02:8c:33:4d:a7:4c:0f:23:87:c0:72:e3:86:03:ce:
bf:7e:6b:57:cc:72:d6:a0:3c:da:b7:b8:d2:df:98:
f1:0f:fb:99:5f:41:cd:b3:a8:2d:b5:20:ec:8e:06:
e7:af:2d:ed:06:cf:4b:25:28:9a:a6:fe:40:47:15:
74:7f:db:9f:78:8d:93:b1:d1:bb:ba:b4:df:1b:4a:
f5:28:59:01:91:31:f0:6c:58:d8:c8:c3:0c:50:06:
fd:58:1f:19:0c:dc:04:e6:81:0f:fb:aa:58:47:7d:
ce:6a:b9:16:2c:f4:4f:ee:5d:76:90:01:a9:64:04:
29:ab:b5:76:76:0f:dd:85:cc:cc:ba:d0:16:c0:f4:
c0:d9:de:7a:40:71:7c:45:b3:ce:51:dc:6a:e0:3a:
dd:ea:95:fb:bd:1a:5e:99:d7:5b:e8:15:11:27:63:
1e:93:62:f0:3f:df:df:be:24:01:aa:32:d1:05:16:
a8:88:38:da:26:52:33:aa:4c:72:d5:65:35:57:b7:
bf:31:a8:63:3a:36:91:89:f0:18:d0:1f:af:80:ef:
21:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:57:72:5B:0A:60:5D:4D:DC:C4:64:B7:0D:CB:3A:16:2A:5F:05:5B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/e005c2-affa-458f-aaf8-8af56e733600/1/S1dyWwpgXU3cxGS3Dcs6FipfBVs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.122.158.0/23
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51440
Signature Algorithm: sha256WithRSAEncryption
a6:04:e0:6b:74:79:fd:97:f3:b5:0d:7f:14:b7:47:87:60:5b:
16:05:92:c0:22:74:ed:81:37:a8:26:91:7c:63:8b:56:65:86:
15:e3:52:c4:a2:1b:8a:9c:23:8f:aa:86:7c:ae:cd:82:79:57:
65:1a:70:fe:f3:71:43:d6:c5:0b:2b:a1:14:0e:64:22:45:5f:
c1:a2:b6:ae:ff:24:cd:34:84:eb:11:b2:5f:08:13:31:3f:69:
2a:d7:de:59:52:79:07:8b:9f:46:a8:32:48:55:a1:83:ee:e5:
67:68:ad:09:bd:fc:69:d7:f0:0d:59:81:41:82:35:b8:b3:70:
de:16:cb:7b:16:f2:d9:a4:e8:c9:2d:a4:2c:c8:0a:56:87:e2:
45:b8:4e:91:37:72:1e:b0:b3:f1:b7:08:d1:de:78:83:ea:52:
cd:e2:40:ef:36:32:4a:9a:fd:61:f4:aa:15:a2:94:d1:38:73:
29:82:e0:b3:c7:95:52:6b:4d:3c:40:65:08:2f:80:f0:17:fd:
93:19:d6:79:46:82:1d:39:66:2b:21:26:07:d7:66:ae:f1:bf:
86:ec:02:d2:1b:3d:fb:72:3f:32:61:f3:12:54:ef:1f:94:af:
03:3c:e8:4b:c7:a3:1c:ab:83:0f:21:80:89:d7:33:f0:53:b1:
ee:eb:f0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:30 2025 by rpki-client