Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer
File: aNr9Y2BjamMndHoHCA9_Ll4yzoU.cer (raw, json)
Hash identifier: jadyl5GniQE0rJUGIQhP8l1ubhTTD9moOPhFIXh1Vpg=
Subject key identifier: 68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C7F69FB66A7E71C5FFCD071150DE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204626
IP: 91.218.152.0/23
IP: 2001:678:5f4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7f:69:fb:66:a7:e7:1c:5f:fc:d0:71:15:0d:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=68dafd6360636a6327747a07080f7f2e5e32ce85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:f3:bb:f8:dc:4f:20:00:a5:f6:d5:6f:3c:dc:
9e:6c:ae:52:4c:c8:07:f6:32:46:37:a5:3e:2c:78:
1c:00:9b:8c:49:f8:91:9b:2c:bf:ce:cf:cf:d5:47:
dc:41:a3:6c:4b:8d:0f:75:7b:4f:3c:15:40:4e:b6:
ee:2a:f4:e9:21:fd:ba:4d:43:7a:56:11:77:0e:fa:
68:7e:d2:e2:73:36:fd:7b:9b:b8:d2:4d:7d:76:e7:
9e:1f:8e:dc:ef:a1:08:1c:82:49:a8:96:48:bc:e8:
b0:cb:b7:57:89:e5:ea:2f:42:03:58:4e:f9:7c:29:
e6:e3:45:ad:3e:49:3f:f6:b7:03:a0:02:37:74:0f:
2b:fe:84:e9:87:92:25:62:41:98:52:11:0c:f1:20:
25:16:d8:69:6f:76:25:e9:59:e4:55:2c:7a:c0:4a:
b5:f8:40:4d:b7:75:f0:4f:57:b4:ad:14:47:de:5f:
3e:d5:6a:71:39:de:11:eb:44:54:b8:01:8d:80:e0:
58:4b:2a:1f:ab:9d:d6:b0:af:93:1b:9a:67:82:b7:
3d:38:1b:e8:ab:67:5a:cf:04:7d:b4:ac:cd:32:70:
48:39:03:a4:ce:54:91:f9:d8:97:51:ca:c6:ac:95:
ce:dc:01:44:8f:bc:4e:e9:f7:12:20:24:2c:1c:7b:
88:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:DA:FD:63:60:63:6A:63:27:74:7A:07:08:0F:7F:2E:5E:32:CE:85
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/601360-adb9-4cb5-86d9-2bb2377e5a1c/1/aNr9Y2BjamMndHoHCA9_Ll4yzoU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.152.0/23
IPv6:
2001:678:5f4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204626
Signature Algorithm: sha256WithRSAEncryption
b0:88:98:d1:97:9b:ab:bb:50:f8:23:9f:5c:d9:cf:9c:51:37:
17:ec:ec:ce:88:95:59:b8:db:d3:4e:a4:51:65:83:b3:87:b6:
1d:ba:e6:14:d4:96:b4:29:09:6f:f4:51:cf:83:c8:0b:20:08:
3b:0c:f2:b4:2d:b6:49:92:7b:dc:a6:a3:99:7c:82:3f:e4:49:
cb:bb:ef:b7:5f:b7:b1:66:40:9c:63:a5:11:34:48:85:b7:a9:
0a:c3:ba:56:71:ae:b2:a3:db:c1:32:be:a8:a5:2a:4c:e0:cd:
c9:bf:43:1f:0d:91:a1:01:c5:05:58:4e:34:8c:d4:c7:8d:3a:
64:b4:cf:1b:ff:3a:60:95:49:36:86:7b:62:23:fc:59:31:a3:
e3:5c:f9:26:75:90:a0:65:c9:d5:fd:93:e4:ba:bc:84:a4:0b:
8a:22:f8:a4:59:13:72:af:9f:dc:0a:70:01:bb:24:85:8c:7f:
3e:8b:4b:d9:11:5a:f0:16:2d:ab:b8:4c:ef:16:23:5d:6f:d9:
33:92:67:1f:d3:82:64:6c:10:b0:c3:2d:08:68:ac:48:ce:a6:
b4:21:ac:24:c5:2c:0b:e4:fa:bd:c4:0d:44:ff:d1:1e:be:08:
38:19:62:6a:e8:2e:0c:e7:32:b8:b8:5c:ab:bd:39:06:d6:e4:
52:6e:89:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:10 2025 by rpki-client