Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/p5ROOKJ1k6RvXEoqli9YO49r5GA.cer
File: p5ROOKJ1k6RvXEoqli9YO49r5GA.cer (raw, json)
Hash identifier: 5xCSa4EmNh9yR01iIGsxVKjQXT5JpBy8nqOW1qH5hzE=
Subject key identifier: A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F40EA15CE810E47409228D2972559
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 211840
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:40:ea:15:ce:81:0e:47:40:92:28:d2:97:25:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=a7944e38a27593a46f5c4a2a962f583b8f6be460
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:33:f4:2f:09:9b:4b:97:a7:ce:e2:5c:a4:95:
a1:98:2a:74:0d:ff:a4:90:b1:69:55:1b:5a:33:65:
f4:37:81:f2:ba:ba:5e:d1:3a:91:21:74:9e:70:91:
4e:95:8d:1a:ab:cb:a6:8b:51:78:12:c7:02:2e:16:
2f:12:cc:3f:ad:be:78:e2:b6:1c:bc:73:4d:95:b2:
da:1b:b9:5d:f3:08:3e:56:b3:ad:74:b2:60:93:87:
d2:56:f5:13:4c:60:22:39:98:ae:c7:0b:56:5f:3d:
e1:dc:19:f2:fe:cd:9c:16:27:ff:35:69:59:c1:40:
77:5b:12:7a:57:a5:71:3d:fd:17:ce:72:d2:66:ec:
e7:3c:95:e7:e0:02:8a:01:a2:02:82:7d:1f:b0:c4:
70:76:8f:98:95:8c:df:8f:b9:51:6e:9d:b2:bd:7f:
5b:a5:6d:43:63:ba:a8:99:4b:f9:71:bc:3f:c7:b4:
80:2c:a0:1d:2c:55:0f:e8:b2:18:63:33:d7:fd:03:
8d:fe:32:94:c9:8d:96:f8:94:1a:65:33:e0:b8:e1:
09:a3:71:79:69:85:86:c4:56:b4:a6:66:ba:3a:f2:
86:02:a7:75:e9:ca:ad:41:3d:2c:5d:33:da:67:54:
84:01:69:a5:df:77:e5:29:b3:3f:46:1f:3e:cf:c5:
36:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:94:4E:38:A2:75:93:A4:6F:5C:4A:2A:96:2F:58:3B:8F:6B:E4:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/71d89f-1f19-4ebe-9a02-ee8ae882c5c7/1/p5ROOKJ1k6RvXEoqli9YO49r5GA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
211840
Signature Algorithm: sha256WithRSAEncryption
4f:d7:6f:1e:ae:b5:f9:1d:68:b7:5e:91:a4:79:d2:42:f7:fd:
73:f0:d2:2f:e5:86:be:42:f8:fd:fc:6d:b6:93:e5:6c:51:af:
b3:8a:c2:b6:22:7d:fe:c8:54:09:d0:30:40:18:56:13:4a:91:
d7:85:20:ed:0d:27:d4:0a:27:ea:e1:d1:bd:b0:7b:84:59:ad:
ef:81:3a:fa:2a:ba:76:a3:ec:5c:7c:e5:3b:58:a7:f1:7e:f2:
3a:43:b5:45:57:ff:c2:e1:8d:47:6b:41:ec:4c:70:00:c4:de:
93:48:dd:23:67:a9:42:c6:89:31:ce:c3:bd:a6:95:5f:3d:23:
1a:d1:9d:e8:f5:d1:37:1f:ee:18:6e:d7:4a:99:9f:f7:63:48:
54:97:78:ab:bb:ea:ab:a5:66:7a:7c:d9:eb:98:c0:d7:89:c8:
a2:8f:a0:8f:a0:c9:c4:7e:22:7a:61:c9:83:b7:c5:d6:c7:0f:
36:0a:30:15:7e:f5:69:2a:25:8b:ea:4d:c2:1d:05:01:80:a8:
a8:63:78:c2:af:2a:db:d5:ca:e6:c2:ed:73:6f:03:64:29:61:
eb:a3:08:ef:b1:41:7d:5a:e4:d0:0c:b1:47:3d:91:b6:bb:91:
30:26:81:fd:0c:1a:77:45:54:09:2a:dc:4f:86:ca:11:4d:7c:
2b:a9:fd:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:37:47 2025 by rpki-client