Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer
File: bNxpTwwyVdXVVz8TKOU2VM-yLE0.cer (raw, json)
Hash identifier: fqaKIWCcK+jXgiKAg3q1fFPZQvEo3uU34oWTQDIvEDs=
Subject key identifier: 6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942067C99B4A4A752AE1B022108BEFCCD2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210045
IP: 217.28.133.0/24
IP: 2a12:2140::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:67:c9:9b:4a:4a:75:2a:e1:b0:22:10:8b:ef:cc:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6cdc694f0c3255d5d5573f1328e53654cfb22c4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ef:d9:24:47:f9:be:37:27:69:4c:bb:50:5b:
7f:69:1f:c4:37:51:36:fb:40:ee:6f:fb:75:72:89:
3b:66:46:f1:eb:7e:77:74:79:43:57:7b:fc:c5:8a:
fc:0d:d9:0f:a8:0a:64:4e:ca:60:58:0f:05:eb:a0:
c1:1f:95:eb:f0:36:bf:9b:44:58:43:ca:8f:a8:be:
1c:19:72:bf:5b:7c:d3:f3:ba:d9:5a:08:d8:02:12:
e4:b0:e8:37:b5:0f:88:c6:77:24:0a:9c:55:6d:11:
8b:2c:92:cb:36:04:3b:4a:b4:cd:07:41:85:d0:b0:
dd:90:f0:21:c0:6a:c1:0f:69:e2:09:2e:4d:b8:cb:
4c:5b:32:a5:1a:82:a2:11:6b:48:c8:15:2e:44:94:
f0:2a:02:1b:c5:78:9c:f1:e2:d2:6e:8b:59:e2:db:
59:63:f4:46:8e:a2:d6:e2:ef:a3:9a:bb:a5:be:ba:
2f:23:08:b3:36:9d:14:48:86:ff:2f:05:42:58:21:
cb:bf:69:07:0b:7f:7d:0d:ad:1a:50:7e:42:69:44:
9e:db:b4:10:00:f2:79:ad:3c:d3:ca:c9:94:17:13:
90:f9:bd:0f:e4:93:20:fa:82:b9:92:72:fb:6c:54:
40:c0:41:8f:57:6f:d9:6f:78:13:47:b7:dc:14:0b:
1c:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DC:69:4F:0C:32:55:D5:D5:57:3F:13:28:E5:36:54:CF:B2:2C:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/d74cb2-f0fc-4f2c-be01-536e1f0c4ff9/1/bNxpTwwyVdXVVz8TKOU2VM-yLE0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.28.133.0/24
IPv6:
2a12:2140::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210045
Signature Algorithm: sha256WithRSAEncryption
ac:6f:0c:72:d8:10:3a:f0:5d:bd:8f:56:31:55:ee:9a:31:33:
b6:45:1a:7d:76:59:ad:b1:d1:69:ea:44:6f:42:fa:21:de:e5:
5c:c1:8f:80:36:3a:b6:5a:23:f0:7d:15:2d:c9:bf:1d:39:a2:
66:5d:2c:70:1e:53:71:2f:5e:3b:12:af:6b:4a:03:d0:c7:c9:
0d:a0:9f:72:ac:62:b1:50:02:ab:f3:1e:10:80:bb:1e:b0:6c:
5e:8a:77:0e:36:d7:65:d0:1c:95:69:b5:36:ff:e5:61:5e:ec:
9a:9e:bf:eb:ce:7a:7d:b7:35:ed:30:80:c9:ca:43:c7:2e:3d:
8c:1d:52:e6:75:66:dd:14:53:87:c5:cf:5d:57:98:4d:8b:20:
10:24:5f:9d:59:43:1a:65:f0:7b:6a:c5:bd:0d:dd:94:23:b4:
1a:96:ce:c3:89:51:0d:6e:ed:73:d8:93:37:d7:81:22:bc:62:
49:58:cb:f7:bc:e1:8d:61:5e:8a:c2:cd:a6:c0:40:ad:ee:3c:
02:9b:c1:7c:59:3b:1a:c2:40:96:f2:68:79:1e:7b:11:a3:6e:
5c:ad:f6:cf:65:2c:2c:2b:2f:37:09:0e:6f:f3:f7:c1:58:37:
6c:b1:df:24:da:59:d4:8f:78:d5:b5:b1:b8:6d:a8:16:a2:e3:
c1:e3:ac:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:51:09 2025 by rpki-client