Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer
File: _c9yu2yGh1CGKJ3SUY-wP4gi7p0.cer (raw, json)
Hash identifier: 8nfxqUpYPvomjDgzybUusQLn+GrFTf8xah9wJM96REo=
Subject key identifier: FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D7540C0AEB2653496AE828C7E8B057
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34212
IP: 194.145.229.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d7:54:0c:0a:eb:26:53:49:6a:e8:28:c7:e8:b0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fdcf72bb6c86875086289dd2518fb03f8822ee9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:85:37:70:22:36:7d:ac:cb:cb:f6:fe:ab:b8:
3d:e0:81:b1:2a:de:94:44:a4:73:a4:c8:1e:90:46:
4b:a3:36:98:13:13:ec:b6:ce:af:66:7c:53:e8:50:
d9:78:f8:16:c2:b6:69:a5:0a:dd:15:42:c9:c8:ea:
ed:e8:71:ef:17:a1:e1:16:c7:f0:77:2d:06:fb:55:
f2:33:1d:bd:02:fe:14:b7:c9:49:01:aa:72:3b:d5:
37:1a:78:b1:b3:88:9f:59:24:c5:1d:d9:74:47:e3:
d0:07:68:29:9d:53:4b:0f:4b:93:13:f5:27:d1:0f:
b7:d6:65:9d:c6:f1:a3:b4:26:a6:24:43:b4:46:f9:
9e:46:3a:ee:82:9b:a9:f7:7b:ae:f7:40:78:3b:0f:
23:8c:f5:48:5e:1e:46:52:2e:2b:9d:c5:62:77:b0:
c8:eb:25:3f:f1:68:ac:a6:4b:f9:18:e5:c4:07:43:
2b:64:9d:02:01:7b:f8:12:98:91:df:16:3d:5c:42:
5d:73:17:63:bb:57:5b:f7:43:48:08:1c:32:02:a5:
f7:9c:6e:01:91:5e:cd:e3:b7:6d:e6:2d:62:66:60:
19:10:dc:46:6c:d6:d5:8f:17:79:41:de:a2:94:ac:
84:b9:70:54:49:5c:70:ce:ca:5d:af:14:60:6f:e2:
f7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:CF:72:BB:6C:86:87:50:86:28:9D:D2:51:8F:B0:3F:88:22:EE:9D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5e8f06-0ac1-4e1b-b07f-7e033b9de23e/1/_c9yu2yGh1CGKJ3SUY-wP4gi7p0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.145.229.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34212
Signature Algorithm: sha256WithRSAEncryption
34:d7:39:cb:8d:77:20:7b:64:e8:a3:6d:ca:cb:fb:d6:5b:95:
57:c6:72:bd:0c:5f:15:34:de:7d:1a:52:11:c5:f7:57:f7:b4:
06:6c:18:22:33:9d:ea:39:66:9e:49:64:de:f4:d0:d6:c6:50:
f5:46:87:c5:f0:89:6e:1b:b8:df:27:6a:51:6f:4b:2e:cc:c4:
60:ed:ae:04:4e:4c:4c:fe:bf:9f:7b:f6:b4:55:b9:96:fb:2e:
53:19:58:10:82:ad:ee:13:c5:25:2b:ad:b2:98:f3:b8:45:cd:
9d:36:01:82:83:8e:c4:cd:a8:c8:6b:2a:94:ff:a4:bd:8b:af:
3d:a0:4a:6d:2a:71:3b:cc:07:48:5e:8d:66:77:47:7a:74:7c:
9b:f2:ef:b1:04:68:41:7f:45:3e:73:d8:26:71:f4:fd:09:62:
d2:72:1f:40:29:86:66:e4:a7:76:57:45:6e:32:f3:39:34:a8:
aa:e2:65:70:32:c8:5b:f5:e8:60:70:a2:95:88:30:a1:76:4a:
57:e5:26:0f:1c:4f:4e:db:42:d5:6b:13:36:57:17:bc:54:95:
5b:48:21:58:ce:fd:2d:77:1f:18:cf:52:d7:0b:fc:b0:02:55:
db:33:e6:21:95:b6:ed:af:3c:1f:9d:c8:a9:bc:a2:9e:83:64:
a9:3a:7a:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:13 2025 by rpki-client