Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_5zoM1_DdnayDsFlXFPWfbyG6LM.cer
File: _5zoM1_DdnayDsFlXFPWfbyG6LM.cer (raw, json)
Hash identifier: FnxV3NFTlCFiblChmpFGGTASH04/up5eyHW2Mlv7S4Y=
Subject key identifier: FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942826E15A0661F25BCD3855028DA5BCAE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:53:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50961
IP: 195.14.2.0/24
IP: 2a0c:2ac0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:e1:5a:06:61:f2:5b:cd:38:55:02:8d:a5:bc:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:53:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ff9ce8335fc37676b20ec1655c53d67dbc86e8b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:70:d1:30:fe:7f:09:46:30:4b:30:b8:4f:80:
f1:e6:b7:8f:55:a7:b0:64:06:f7:00:0b:16:07:41:
fa:ee:4d:18:c0:cf:1b:cb:b3:04:c1:bc:5f:97:82:
01:5f:31:f0:81:63:42:22:34:39:ce:7f:02:b7:1d:
13:0c:52:15:f2:1d:02:5c:d6:83:17:4e:d3:a6:33:
1f:7b:0a:5d:53:f7:f3:ed:cd:f5:e8:21:cf:36:c3:
6a:91:9d:0e:b3:6b:ab:41:7b:28:b2:43:a9:86:8b:
a4:b3:59:f2:48:54:c8:65:bc:f8:c6:d7:eb:67:34:
80:85:9c:65:04:b2:db:e4:ee:12:80:24:b0:d1:1f:
c5:7e:c7:82:13:97:2a:c5:6e:6a:51:d4:7f:ea:0a:
01:e6:6f:ad:24:a9:9c:d2:8d:8a:4d:92:2f:3f:6c:
9f:fe:85:6b:86:e4:28:ce:a9:97:85:3b:67:3a:03:
23:63:63:7f:b8:e4:8e:f1:67:13:3c:9e:9b:4c:6c:
8e:24:6f:b2:d5:8b:c1:07:90:4d:7c:86:4f:ca:12:
a3:f5:4d:09:1c:02:68:ee:dc:c1:55:a6:f8:25:4b:
dd:46:3e:e4:60:e1:20:1f:54:9f:70:fc:c7:11:a9:
2f:e9:9d:cb:a5:90:57:34:3e:61:bb:3d:60:d9:2f:
28:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9C:E8:33:5F:C3:76:76:B2:0E:C1:65:5C:53:D6:7D:BC:86:E8:B3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/d73541-3b4d-44a9-82ac-29e53eda6e1c/1/_5zoM1_DdnayDsFlXFPWfbyG6LM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.14.2.0/24
IPv6:
2a0c:2ac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50961
Signature Algorithm: sha256WithRSAEncryption
3a:21:95:4c:67:60:4c:a5:c4:1b:88:1f:5e:d6:f3:f1:8c:58:
53:8a:c9:b0:30:4d:de:16:2c:2e:01:39:a6:fa:50:ce:8c:e9:
05:23:7a:79:01:ca:d8:d5:97:87:ff:ad:74:82:e6:2b:c6:3a:
04:cf:2c:ff:ef:f0:d8:7d:2d:55:80:ac:07:c1:1a:20:b3:1c:
38:06:9c:87:ec:89:24:53:94:8d:59:04:90:10:ae:3d:b2:d9:
45:47:94:84:67:f6:a9:8a:84:11:d4:56:c4:84:73:64:30:46:
87:3f:8e:9e:85:de:40:0e:82:c8:c5:72:ad:ae:d1:cb:b9:ae:
21:74:f6:db:db:01:cc:09:3f:04:a2:f4:7d:ed:f9:d0:84:b1:
1a:2a:80:25:20:bc:36:0e:c3:6b:cb:9a:e0:03:fa:5d:df:4e:
89:df:a0:b9:0f:47:9b:d9:34:c6:d9:85:47:a6:2c:b8:53:da:
d0:0a:76:87:89:0d:8a:d7:33:e3:ab:6e:60:4a:e3:06:88:e6:
7a:03:71:54:91:29:14:eb:e8:5b:07:8b:d0:8c:87:95:07:df:
a7:73:5b:66:43:ef:f5:ec:6a:cc:75:61:d5:4b:67:b2:7b:2d:
99:6b:a1:10:c7:0e:27:b8:e5:61:61:ee:f5:ad:22:44:7a:94:
b6:aa:3e:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:37 2025 by rpki-client