Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0dcb7gDO14R19tfLJl8hLpyXKI.cer
File: a0dcb7gDO14R19tfLJl8hLpyXKI.cer (raw, json)
Hash identifier: 27lUXAY2E/uq2v9/c3LkHMCj7SaPzmOBmZcoJAfqUvs=
Subject key identifier: 6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C3FA806C9F6C59E429777408115BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 91.227.245.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:3f:a8:06:c9:f6:c5:9e:42:97:77:40:81:15:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6b475c6fb8033b5e11d7db5f2c997c84ba725ca2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:6a:80:f7:87:c1:a3:f6:d5:9d:78:98:c0:97:
48:a1:bb:fe:4d:dd:0a:34:70:c6:f0:c9:5a:61:68:
f9:b2:db:04:fb:16:d3:2f:46:6d:81:a6:97:69:61:
35:d3:c1:77:3d:f1:f2:5c:26:a3:16:14:a6:96:fc:
0a:ce:ec:0f:af:60:0c:78:53:ae:20:16:87:39:e8:
37:13:83:8c:06:56:61:4d:2b:4e:3d:3b:28:d0:44:
b4:7e:77:0b:53:4b:05:33:e5:e0:5a:cb:f9:06:13:
22:11:85:2c:5e:3f:d1:3d:48:44:bf:5c:f7:b9:1b:
d3:e2:ba:56:24:b1:dd:2f:f5:fb:1a:c5:5a:66:dd:
31:67:e4:68:ca:bc:32:e9:04:42:33:65:f4:5f:43:
b8:41:54:94:0a:c8:f3:78:4e:fb:ac:e6:49:8b:8f:
6c:e8:53:35:d0:6b:60:1b:51:48:93:a7:be:36:98:
b5:85:8e:59:35:fe:4b:69:9e:45:4d:7f:ec:c9:cd:
0e:f9:89:e4:67:8e:3f:e0:bb:e3:c0:69:19:cc:eb:
e0:5f:fc:20:dd:21:1c:92:bc:bc:37:19:d6:0f:cf:
6f:b2:09:ea:6d:14:86:43:86:7d:08:1f:d9:cb:5d:
1b:c8:87:eb:98:d3:ce:51:b1:48:fa:84:f7:d7:19:
94:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:47:5C:6F:B8:03:3B:5E:11:D7:DB:5F:2C:99:7C:84:BA:72:5C:A2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/9f43aa-c5c9-4ef7-8766-5a9d702e77e3/1/a0dcb7gDO14R19tfLJl8hLpyXKI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.245.0/24
Signature Algorithm: sha256WithRSAEncryption
63:38:36:3c:41:1e:b3:d2:cf:1c:33:94:7d:60:8f:d4:d7:31:
4a:98:66:5a:51:2f:a9:8f:1c:70:95:ec:bd:2c:d5:4f:0e:74:
52:c8:7e:bf:db:94:4d:af:f6:d7:ff:22:76:4f:ec:0b:ec:33:
65:5a:92:3e:80:1b:cf:7d:5d:59:69:2a:26:10:4a:a3:45:9a:
b4:42:7a:8e:08:b5:a2:4d:a8:f2:a4:8c:e1:e5:4e:31:37:9b:
1d:82:01:1c:b7:45:99:1e:96:a6:c2:b5:65:e2:be:c2:eb:04:
06:ac:85:96:5b:9b:42:50:d6:52:54:5c:aa:3e:93:30:97:b0:
60:52:88:35:94:70:b2:98:d6:3d:73:98:8a:f6:63:41:10:b5:
e6:11:a4:f7:08:54:44:5e:c4:e7:ba:44:b4:a7:9b:94:7a:66:
81:d2:b5:7b:aa:02:4b:3c:55:f8:38:d2:97:d4:40:66:1f:fc:
da:bf:c2:3a:b8:26:15:a4:34:b2:d5:04:29:12:06:a2:e3:41:
b9:15:2f:95:e3:9b:b6:c4:65:cf:4d:29:cf:ee:8a:48:d0:bb:
4c:a7:91:2d:2a:f5:93:ec:b6:06:80:85:aa:b1:3e:40:ce:e4:
51:bf:69:5a:db:24:82:82:fa:25:db:64:c9:fe:3d:ba:72:ea:
d8:1d:11:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:46:19 2025 by rpki-client