Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4DHWfVY-ca-iN0iakOdmcnqzww.cer
File: c4DHWfVY-ca-iN0iakOdmcnqzww.cer (raw, json)
Hash identifier: spV5jEra0dmRcXcFfWP5yR9SioNHPcB3qGi2yuX6auY=
Subject key identifier: 73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C5D1F3FB6F14AC44D51B45EE38090
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15870
IP: 91.216.46.0/24
IP: 2001:67c:1b28::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:5d:1f:3f:b6:f1:4a:c4:4d:51:b4:5e:e3:80:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7380c759f558f9c6be88dd226a439d99c9eacf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:05:0b:50:f9:b8:24:eb:5d:12:64:0b:47:79:
72:ec:4b:5c:8e:a5:a1:1a:fa:e1:b5:2b:c7:1d:cf:
5d:54:8a:dd:7a:12:99:bd:58:94:51:93:94:2c:76:
72:cd:1c:ba:70:64:4d:26:60:85:90:7a:2e:48:32:
c1:cd:a9:31:45:69:93:af:13:a7:e8:08:30:4e:dc:
28:11:f7:1a:dd:54:36:60:16:14:6d:69:74:ce:b1:
1b:fb:1c:7a:74:5d:d0:da:7c:b2:20:d2:80:d3:9d:
97:30:94:c3:c4:d4:61:fa:3e:35:5a:c1:bf:22:82:
3b:5e:fe:ea:e0:4f:dc:39:ff:28:01:ef:f0:ad:68:
12:12:be:79:62:95:03:63:47:6a:41:05:55:7b:33:
d9:2c:e0:85:89:e0:a4:eb:93:32:19:8f:47:36:67:
19:f0:ea:c7:7f:95:f3:48:b6:df:db:c1:52:ce:eb:
63:e4:a4:73:28:a8:5f:a3:03:c4:87:6a:75:5d:8d:
99:a7:03:d2:a5:ac:5c:f7:33:03:dd:51:0c:5e:79:
a5:f3:d4:e0:72:27:f9:8c:58:83:37:47:19:11:99:
ad:81:90:0f:ea:61:58:a9:ba:2e:36:a7:f6:47:cc:
65:df:50:88:7f:0a:f6:ee:a9:84:51:d5:48:a2:48:
3e:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:80:C7:59:F5:58:F9:C6:BE:88:DD:22:6A:43:9D:99:C9:EA:CF:0C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b80000-0609-488f-a34a-2ca626cfed45/1/c4DHWfVY-ca-iN0iakOdmcnqzww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.46.0/24
IPv6:
2001:67c:1b28::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15870
Signature Algorithm: sha256WithRSAEncryption
09:ed:6f:c2:51:ee:f0:f9:d9:b4:f6:11:54:58:60:26:45:86:
59:e6:fb:ae:35:b5:59:06:08:dd:c7:43:c0:b3:45:bd:ef:d3:
e1:6f:f3:94:aa:ca:05:ac:b3:9e:dd:be:34:ef:1a:14:fe:21:
ad:2c:f2:27:43:5a:bf:fd:b4:c2:ec:b1:f3:02:60:9f:f1:34:
42:04:f4:f1:36:c9:6e:5f:d7:e9:4e:e2:7a:2a:67:9e:c4:db:
b2:80:4e:44:8d:9e:77:00:67:97:d5:d5:1b:a9:86:c3:48:eb:
9e:f2:21:12:2a:a6:bc:60:f1:19:b4:f5:7b:dc:65:c7:17:04:
31:a6:d4:de:14:33:4e:ed:e7:c9:b6:51:cd:e0:ae:43:01:2b:
f7:56:38:18:33:ee:0b:f0:f2:0d:33:28:a9:db:a7:c7:f8:b7:
9e:4d:2f:5b:20:46:7e:1c:08:95:42:38:20:2a:57:48:e4:17:
9c:bc:3c:24:7a:09:13:33:66:1b:e4:fb:39:79:f4:ec:23:7f:
e7:e5:a5:37:05:2b:57:51:c4:5a:79:c1:e4:d1:33:99:f6:df:
d4:22:8f:eb:4a:88:11:7d:26:11:c1:fc:79:52:7a:7e:ed:9a:
c9:69:04:2a:2d:ac:5f:ac:a5:5d:72:86:7e:71:e3:c5:1d:ea:
ca:b8:54:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:47:33 2025 by rpki-client