Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lIlI8N1eL7CpArl5ypxcGkT5j6E.cer
File: lIlI8N1eL7CpArl5ypxcGkT5j6E.cer (raw, json)
Hash identifier: AKzaIrIcGQgnCZuCjzNTl8jBbaLn6ZI5YGP5uwq1xi8=
Subject key identifier: 94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FC4CFBE40A8C48BD16D4D15E2A6EE4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212977
IP: 2001:67c:1298::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fc:4c:fb:e4:0a:8c:48:bd:16:d4:d1:5e:2a:6e:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=948948f0dd5e2fb0a902b979ca9c5c1a44f98fa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ee:75:51:07:10:ed:92:7e:9f:8a:31:2e:cd:
78:05:58:84:56:ee:d8:9b:7c:2f:62:97:c7:3a:24:
56:67:81:a8:5c:61:e7:6b:c6:fe:f7:df:1e:e5:ae:
2b:2d:08:c9:5f:6a:e4:55:1c:22:d8:b4:ff:bf:31:
44:db:d1:41:7b:9f:64:35:d2:fa:90:f0:3b:56:ba:
d7:8a:5b:9f:3a:aa:0e:22:06:07:23:18:84:02:02:
82:ae:60:5e:9e:ab:c0:c1:a6:4e:ca:d0:87:e6:8b:
29:73:09:7d:ad:4c:d1:ec:22:c3:f9:fb:d0:46:9c:
a3:6f:78:00:82:e2:87:3e:91:c5:53:f5:d3:18:51:
f1:de:b6:6c:74:f5:64:51:7d:da:e7:a7:e5:98:75:
db:bd:52:18:65:66:65:86:4b:dd:eb:a8:d3:fd:4c:
8d:2b:fa:93:51:49:28:75:53:94:2f:9c:6a:7f:ff:
e2:88:57:25:0b:5b:24:2c:eb:18:4a:6e:f4:01:41:
2d:c8:ca:0d:57:3e:6c:d9:f4:84:23:46:cc:92:c6:
56:a3:03:4a:17:8c:6e:62:6b:14:05:56:1c:1c:15:
f1:f9:77:82:fb:64:0d:42:b4:a2:f9:2d:a3:45:bd:
d5:93:c0:c7:5e:88:b2:8a:c6:3b:ce:95:b5:f8:42:
93:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:89:48:F0:DD:5E:2F:B0:A9:02:B9:79:CA:9C:5C:1A:44:F9:8F:A1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/abb885-a794-4bd5-861e-8961c7a3bbab/1/lIlI8N1eL7CpArl5ypxcGkT5j6E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:1298::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212977
Signature Algorithm: sha256WithRSAEncryption
77:7e:50:b7:b8:5d:59:74:0d:25:be:32:71:20:e4:92:6d:b1:
83:c4:d0:a3:ce:57:41:94:43:17:3b:1a:af:e8:e6:23:d7:3c:
a2:ea:70:5b:7b:c6:d0:95:b4:9a:25:5f:92:dc:fd:4a:ad:92:
c0:c8:16:28:93:e5:ab:c5:bb:91:b2:d2:6c:32:1e:fc:43:99:
97:14:9a:cd:78:a3:58:6f:b0:67:ee:0b:e2:1c:cd:f0:af:2c:
a5:98:f8:97:e8:3f:33:91:cc:44:fc:d5:6c:91:9a:9b:72:75:
d0:ad:e1:cd:05:1c:10:b6:2c:73:b3:f2:4f:8b:18:6a:d2:2d:
18:4e:ae:21:e6:51:50:eb:de:35:11:af:52:b5:8e:9b:74:1c:
d2:49:13:44:86:dd:b8:38:04:ab:a6:61:59:0b:b8:a2:a0:a0:
a9:8c:20:ad:08:91:61:6b:da:da:67:f6:e1:8a:ac:8e:00:32:
69:73:8d:f5:dc:b9:d2:86:22:91:7b:fd:89:4b:96:3e:46:c3:
cb:bb:86:b8:2b:77:e0:c7:da:c3:0a:76:03:42:e6:df:1c:ac:
17:85:3a:01:56:46:7a:e5:bb:e9:3b:23:e7:90:1f:e5:ec:d5:
2c:b0:12:6e:33:5c:cb:d1:43:d0:a1:a4:be:78:8b:08:f4:83:
30:3e:a2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:22:02 2025 by rpki-client