Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UlkVtMckB6-3lB5b4pSscTOxB7M.cer
File: UlkVtMckB6-3lB5b4pSscTOxB7M.cer (raw, json)
Hash identifier: raTb/29JXMKbPEMvzAOSlJVm8lyjstMMbDHvEHbj0KQ=
Subject key identifier: 52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B21D5CE21C4D3B4DE418D8FC54FF64
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44683
IP: 45.152.244.0/22
IP: 2a0f:6d00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:1d:5c:e2:1c:4d:3b:4d:e4:18:d8:fc:54:ff:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=525915b4c72407afb7941e5be294ac7133b107b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:84:fe:8c:d1:3f:85:3e:6c:a2:55:e6:31:2a:
46:15:9e:1e:8a:d5:6c:e5:99:d3:85:07:77:79:9b:
6e:fa:8f:30:d9:67:ff:55:d2:ef:d0:cd:f3:1d:cb:
32:94:01:60:e2:d2:b8:cc:48:5c:a0:3f:71:c5:bd:
83:5c:3d:69:29:f2:73:a8:a2:e1:ba:22:15:41:c3:
7e:6e:bd:ec:3c:11:2d:06:f8:1d:e0:86:04:1f:82:
07:f6:77:9e:b6:ae:0f:bd:c3:29:6d:54:34:d2:e4:
7a:70:61:17:6b:3a:0b:99:c3:79:c8:f8:be:71:21:
0b:68:e0:ee:53:53:af:29:02:5b:e3:b4:04:6b:45:
28:08:71:07:04:13:3d:8c:ca:cd:72:2b:b3:db:6c:
5a:52:d4:01:fe:d2:aa:a0:27:0c:6c:ab:fd:44:61:
fd:ae:aa:eb:f2:25:7f:06:45:c7:88:3a:8c:01:87:
d4:3f:4b:13:4f:84:8b:6b:3d:83:53:43:b1:47:cb:
8b:c4:3b:56:28:1b:b3:82:d2:a4:b0:f2:07:19:9b:
18:14:f2:a8:a7:4a:57:89:e6:b2:bf:3d:92:61:88:
ce:94:fa:26:0e:93:98:41:56:8d:06:c9:e6:57:6b:
67:13:75:7a:6b:a0:e6:6d:ac:74:1d:10:9a:7d:c0:
ec:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:59:15:B4:C7:24:07:AF:B7:94:1E:5B:E2:94:AC:71:33:B1:07:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/851708-19f9-4ecc-a442-0ce3a2efc8dd/1/UlkVtMckB6-3lB5b4pSscTOxB7M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.152.244.0/22
IPv6:
2a0f:6d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44683
Signature Algorithm: sha256WithRSAEncryption
4b:71:2a:e1:df:41:71:74:1c:01:91:71:d1:d8:a8:77:1d:5a:
d4:0f:c1:2d:e8:d5:1d:ff:3d:83:f7:4b:ca:e4:f3:63:d8:e6:
0e:c4:51:be:c5:4e:06:6c:64:d5:97:31:ec:d4:97:2c:fd:fb:
83:fc:6c:da:92:ec:e1:1d:7f:26:90:a1:56:5d:9e:13:9d:18:
47:46:25:0c:73:91:5b:a5:b7:b4:6e:0d:41:84:e4:88:57:26:
0a:4e:00:63:29:60:6f:ad:a8:d4:46:20:51:f3:a9:38:6f:2a:
bf:94:46:ae:75:ae:23:72:9f:c3:5f:76:33:9e:eb:52:93:d9:
4a:20:f1:9b:5e:1e:56:c8:aa:c9:08:39:3e:8a:9d:26:65:20:
4f:8c:3b:86:95:cd:8e:d0:9c:e9:3e:2b:93:82:d4:a7:2e:3d:
48:5e:7e:18:95:92:7c:78:2a:bb:41:c0:b2:9e:64:50:f9:70:
bc:39:95:f2:26:f0:cd:a9:d7:06:4c:18:52:24:1e:f2:4c:5e:
e2:86:5f:a2:42:ff:b5:a0:f7:48:dc:57:99:35:18:3c:30:15:
3d:a6:16:fb:de:e9:7a:5a:0f:03:6a:ae:0b:a1:d4:13:1b:9d:
1c:30:8a:7a:f3:a0:c7:de:71:3f:d5:f7:39:99:81:7d:d6:32:
49:ab:44:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:36:38 2025 by rpki-client