Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/UxAsMB-QQClnkqlOQgV8Fi--MMw.cer
File: UxAsMB-QQClnkqlOQgV8Fi--MMw.cer (raw, json)
Hash identifier: EaF6aLLGIw9vi52BwB5qh06vxWdbetgo6r6MrwQcNYI=
Subject key identifier: 53:10:2C:30:1F:90:40:29:67:92:A9:4E:42:05:7C:16:2F:BE:30:CC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D70FF03834A9F270F7190BF55234B2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25000
IP: 193.201.98.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:0f:f0:38:34:a9:f2:70:f7:19:0b:f5:52:34:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=53102c301f9040296792a94e42057c162fbe30cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:f2:db:ea:b5:04:5c:67:64:0f:5c:e9:b5:74:
a6:03:12:7f:aa:2e:af:76:0a:f7:69:93:1a:ab:90:
30:dd:4b:0b:67:b4:b3:58:0a:eb:18:e1:bd:4e:db:
dc:d5:5a:4d:47:0f:c1:1d:46:9c:7b:18:cb:cb:d9:
54:d7:ca:4e:9b:72:57:95:cf:84:ca:90:b4:9e:d2:
d8:36:6e:5e:f1:7e:27:cc:36:45:85:b3:cd:bd:b5:
39:cb:7a:df:dc:18:3b:a4:ce:3e:0b:19:99:ad:ee:
1a:67:70:d6:81:fc:51:90:f3:c5:58:58:3f:07:7e:
4e:7b:89:74:78:01:80:c0:10:d7:8b:59:51:92:47:
02:be:b5:47:9a:6b:28:bb:bd:c2:30:cf:92:72:97:
ac:b5:d5:23:94:3d:66:b6:ee:71:35:2d:7a:8b:3b:
0f:5f:92:ec:06:96:9c:48:14:4e:20:52:25:57:eb:
ee:45:e9:0c:2b:30:92:6e:53:11:28:7d:50:4a:58:
28:61:44:ec:74:c4:ac:c4:bc:55:7e:f6:cd:3d:29:
e8:fd:c8:ee:13:b3:cc:19:25:b9:b6:c5:aa:00:6a:
c9:fd:b5:0d:e1:13:e9:09:d9:6d:4e:c8:5d:9d:54:
8e:c9:94:1f:83:ab:cc:15:c3:36:79:7a:bd:33:37:
6a:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:10:2C:30:1F:90:40:29:67:92:A9:4E:42:05:7C:16:2F:BE:30:CC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b7dbd0-fe04-4e50-8c41-ebc4588b14a7/1/UxAsMB-QQClnkqlOQgV8Fi--MMw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.201.98.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25000
Signature Algorithm: sha256WithRSAEncryption
b1:b4:e8:1d:d7:83:89:58:21:d4:43:65:6e:58:d3:3a:6d:3b:
66:9f:f3:a4:e3:d5:d0:70:21:73:e2:d2:62:e3:86:ab:87:ff:
44:1f:e4:5a:2a:5c:f4:ab:57:89:e1:93:23:ea:70:3d:2b:5c:
5d:2e:c8:2e:f2:5d:78:8b:de:2d:bf:f2:4d:ee:19:54:35:43:
93:90:60:04:75:4a:a5:0b:f9:f6:e0:ce:e9:a0:80:13:f4:d2:
a5:bf:4e:b7:bb:f8:0f:77:5d:de:0a:fb:90:fb:2a:5d:cf:bf:
af:01:c4:2c:57:13:c3:65:ed:f3:04:6b:01:3a:e4:24:36:19:
18:b9:88:7f:54:ab:e9:9f:0f:58:5f:73:2f:59:e2:5f:ff:89:
25:84:21:6d:2b:aa:df:4d:8a:17:6c:cd:40:85:06:5c:82:a6:
97:b2:c4:2c:e6:fd:30:e2:9a:c0:84:d2:59:c2:ba:d8:81:ef:
ed:b3:73:9d:db:01:14:fd:4d:ae:b5:32:c5:f9:d0:42:7a:76:
f7:00:0b:a7:7a:3b:ef:02:2d:c4:38:71:22:80:3e:07:1c:00:
4d:51:47:7e:74:63:f2:1f:20:a1:c5:78:0d:58:52:64:8a:a2:
35:f1:8e:15:eb:0b:02:10:33:a8:22:b6:b6:77:eb:74:01:39:
6c:99:cd:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:26:53 2025 by rpki-client