Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nYHLUEMmdDsX02SiBIdcOcbtvAk.cer
File: nYHLUEMmdDsX02SiBIdcOcbtvAk.cer (raw, json)
Hash identifier: m1NOTaoo7X5V7sbZvu5CxfeAsabu8hLLsz/jNbdi070=
Subject key identifier: 9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA4F12423E5D58F4C0CE8978F1C435
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 50139
IP: 130.255.173.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:4f:12:42:3e:5d:58:f4:c0:ce:89:78:f1:c4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9d81cb504326743b17d364a204875c39c6edbc09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ac:ee:fc:34:92:26:32:a0:9c:06:98:48:13:
db:4a:d4:61:19:32:5a:9c:7d:68:b3:e8:be:b6:96:
60:09:00:92:77:28:35:a3:17:1a:52:59:e2:9f:08:
72:8c:2d:0c:73:4a:9d:95:ac:71:de:71:fb:98:44:
e2:da:5c:4f:f0:85:5e:c1:a0:d0:a4:eb:b8:7b:8b:
41:6a:a6:b7:ea:42:c2:d8:cd:93:d6:b6:5a:7c:dd:
f9:9a:4e:26:d0:ce:f0:db:db:3f:ea:60:dc:89:09:
ca:4f:97:73:cc:4a:5a:48:9a:51:54:4c:41:e7:e3:
59:c4:3c:5a:51:a9:18:9e:f8:be:91:18:7a:0d:5b:
b5:1a:48:f9:27:80:fc:e3:10:06:62:c0:84:0c:d4:
e2:a5:00:5a:b6:fe:e3:be:0d:df:3f:af:8c:aa:51:
e4:52:c5:ea:44:6c:57:54:98:02:2b:62:a5:86:50:
12:54:c1:ed:64:20:ff:45:fa:8f:93:bd:cd:43:27:
57:86:0a:84:3f:74:a7:58:9b:cf:76:66:23:57:4d:
d6:e3:ec:7c:07:1b:c6:88:2b:58:46:38:c6:69:16:
4b:f6:54:b7:2b:1a:4f:66:31:b2:4c:c2:b3:de:fd:
a3:c4:56:f1:b6:08:9d:eb:25:8f:55:4a:3d:0d:51:
f5:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:81:CB:50:43:26:74:3B:17:D3:64:A2:04:87:5C:39:C6:ED:BC:09
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/339d29-712a-4c86-9510-e4d6bcf336b7/1/nYHLUEMmdDsX02SiBIdcOcbtvAk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.255.173.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
50139
Signature Algorithm: sha256WithRSAEncryption
7e:ec:16:da:69:91:87:41:eb:8f:1b:c8:eb:8b:39:f9:92:46:
a0:95:2b:6e:e1:95:7b:8d:4a:44:b7:d2:d5:3e:6b:90:5e:6a:
c5:2d:9c:a9:2b:d5:47:eb:9c:48:96:8a:cb:5d:51:58:b1:8a:
73:4a:52:6a:d2:f6:8b:31:ab:b0:78:ab:0c:a3:02:fe:b1:08:
16:ce:20:9e:51:09:53:4b:35:5a:74:d3:bb:b5:17:d2:63:b3:
77:97:95:36:46:07:7a:07:2f:b2:64:27:39:dd:17:eb:5d:28:
9a:87:85:80:32:74:af:f8:ab:1a:75:e3:fb:06:6f:fd:a0:cf:
a4:f3:16:73:c9:39:31:0b:db:a7:6c:b4:39:67:c6:64:05:75:
f1:9a:d5:28:89:44:a6:19:8d:15:b4:8e:be:f3:d7:bb:da:00:
cc:de:5e:9a:55:d2:2a:c0:8e:f6:29:95:ac:95:f7:fc:eb:63:
ce:ba:5b:1f:5c:e5:54:9e:3b:dc:20:f8:94:6b:a2:58:eb:ee:
7b:4a:ee:2c:12:73:eb:0e:89:bb:52:67:66:de:1b:2f:5e:f1:
7e:7e:91:d6:7f:d3:5d:15:61:32:1a:01:d0:9a:50:c4:c9:bf:
f6:83:a7:10:7b:ff:ae:f7:62:6b:1a:c7:77:47:c8:b5:84:c3:
ef:18:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:08:16 2025 by rpki-client