Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer
File: b4Wk1WQoOn_d9jRWl9a8M3OjIkY.cer (raw, json)
Hash identifier: 4s6rEEj4R4L6i1vWT9jLDN+qj9FI/Cfpp3bnm9KdTmg=
Subject key identifier: 6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427B37F088A7818A55E9288701752EAC4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 15:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197302
IP: 91.223.124.0/24
IP: 2001:67c:20a8::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:b3:7f:08:8a:78:18:a5:5e:92:88:70:17:52:ea:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 15:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6f85a4d564283a7fddf6345697d6bc3373a32246
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:7f:05:6e:4c:64:8e:9c:9a:9c:b9:47:16:ac:
ef:83:7a:36:da:6c:82:f0:ef:38:0a:5e:6a:f7:ce:
58:50:f7:1a:9d:ec:bd:37:50:f7:9e:ea:da:33:c8:
07:ff:bc:cb:72:82:04:58:3c:ce:3e:bc:e7:04:d0:
17:d8:98:a0:48:55:1c:77:72:c9:c1:ac:32:ca:f1:
ce:a9:81:99:be:e6:42:01:a8:43:5f:fc:9d:78:7a:
f3:21:47:80:a6:6f:7b:9f:e3:86:68:0a:40:02:8b:
b2:7c:15:74:34:0b:9c:96:42:bf:0b:5a:d2:a9:21:
1a:bc:5b:b5:48:d6:40:6e:12:4b:06:07:ad:7c:49:
80:ca:98:33:1f:61:50:86:f0:f5:5a:88:25:e7:3a:
72:06:47:a6:16:0f:66:f9:90:9f:60:38:b1:e3:82:
05:9b:a1:ec:55:f1:d6:f1:01:0e:66:b6:61:91:10:
44:63:94:08:e9:09:17:ab:9d:ee:dc:74:79:8f:5b:
62:20:e0:cf:25:ee:d7:da:45:04:3c:bb:e2:97:a1:
d3:5f:b1:31:e6:9f:fc:6e:46:ae:07:be:f1:60:cb:
24:e5:9c:a3:41:dd:f2:82:6b:0e:9c:75:0e:53:5a:
87:2c:f1:25:d5:8e:2f:95:15:ae:4a:2a:61:cb:77:
5c:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:85:A4:D5:64:28:3A:7F:DD:F6:34:56:97:D6:BC:33:73:A3:22:46
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/98dffa-810b-49b5-addd-061fc1aeb158/1/b4Wk1WQoOn_d9jRWl9a8M3OjIkY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.223.124.0/24
IPv6:
2001:67c:20a8::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197302
Signature Algorithm: sha256WithRSAEncryption
78:59:13:85:ee:42:cd:3e:63:ce:35:29:b1:88:c4:e1:20:e6:
48:4e:9a:b4:e7:bd:22:55:00:c4:61:93:d7:a9:b1:13:43:5f:
8b:e9:5d:4b:e5:b7:67:ee:20:eb:17:7f:9f:03:01:f0:db:3a:
29:57:14:7f:86:22:0e:ba:b9:83:9a:71:d4:aa:e3:a1:f1:a8:
12:4a:3a:9b:50:1f:22:c3:fa:93:f8:a7:c8:6d:a7:e8:cf:89:
48:86:29:b5:0a:59:a5:a3:42:d2:e5:cd:2d:78:94:8a:d9:84:
ba:24:a4:32:bf:fb:50:a7:3e:aa:44:b3:92:d7:8c:33:60:51:
02:89:eb:fa:e0:b6:8e:e7:e5:21:49:70:38:f6:60:35:bc:a8:
ef:dd:13:82:8f:07:49:5d:1c:5c:2a:33:c8:45:74:bd:93:c8:
ab:a5:71:71:85:97:78:b9:b1:e8:c8:33:ea:af:53:0a:5b:8b:
57:15:0c:ef:95:71:e5:22:66:39:64:54:33:56:26:26:6b:14:
c5:9b:09:5d:ab:51:4f:b6:bb:fe:63:1f:df:22:08:f9:fa:29:
78:2c:ce:ca:a8:31:4f:03:f5:4a:46:66:80:69:36:1a:a0:70:
34:e3:18:e2:61:6f:a8:f6:b7:ce:e0:e5:bc:f2:95:5f:77:5e:
64:55:f7:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:32 2025 by rpki-client