Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rw9am9KtHpaGXwDQhSK5qtPpGk0.cer
File: rw9am9KtHpaGXwDQhSK5qtPpGk0.cer (raw, json)
Hash identifier: FavXY2bvBvPmTo+D/clj5fiV5G7OAN6DbGugS9A8wsE=
Subject key identifier: AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143C9CAE578DFBE1D961BE250740C76
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39528
IP: 195.60.224.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c9:ca:e5:78:df:be:1d:96:1b:e2:50:74:0c:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=af0f5a9bd2ad1e96865f00d08522b9aad3e91a4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:bb:3d:54:6b:cb:0f:bf:08:1f:f4:46:4a:85:
b6:9a:a4:35:93:3f:25:64:91:6a:9a:11:fd:de:8c:
ef:df:dd:b5:86:f7:5e:96:c0:29:aa:50:b6:e0:5f:
43:82:2d:d8:84:7e:6b:97:a1:8b:84:cc:82:d6:8e:
8d:bf:1f:57:73:4f:47:a8:6b:61:aa:6c:ee:da:a0:
d4:df:fa:dd:e2:19:db:99:ae:9e:5a:c6:13:e2:52:
9b:18:c4:f1:a8:65:ff:ed:60:73:6c:10:79:cd:01:
d8:77:1d:3f:01:2a:7d:f4:a0:35:a6:30:ad:7f:a0:
54:05:db:75:72:c9:a5:03:36:2e:4c:38:cb:1c:62:
75:b4:b9:84:bd:d3:f4:bc:cf:67:6a:aa:34:de:18:
b4:c2:dd:d3:23:51:c2:6a:be:58:86:ad:4c:d3:17:
55:a6:fc:c6:bf:0d:37:cc:34:21:91:64:a2:0e:65:
f0:33:34:f9:a1:48:da:7a:2a:11:42:57:c4:1b:ea:
c9:95:52:fc:2d:3b:fc:03:f5:d9:cb:0a:bb:ce:44:
52:f3:cc:df:9d:ba:43:bd:ee:55:3a:55:23:02:85:
7d:68:d5:09:3d:2a:0c:bb:c3:b4:97:e7:d3:bc:74:
24:f5:17:1a:90:6a:a1:ff:41:fa:28:2f:25:20:9d:
61:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:0F:5A:9B:D2:AD:1E:96:86:5F:00:D0:85:22:B9:AA:D3:E9:1A:4D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/6ad9b8-9f0e-4ad0-a220-3ac3b6737042/1/rw9am9KtHpaGXwDQhSK5qtPpGk0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.60.224.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39528
Signature Algorithm: sha256WithRSAEncryption
63:73:c8:93:15:d0:e3:57:b1:53:c6:4d:d2:55:f8:e6:08:0f:
33:49:6a:3e:0d:02:4d:3c:2d:48:74:cd:d8:a8:15:5f:5d:64:
61:0f:17:e5:ee:81:02:b4:bb:d3:07:20:d7:f5:0e:58:6b:ec:
d2:6b:49:2a:c8:3c:71:ce:48:0e:3b:9b:ee:e5:ec:78:16:16:
8c:1e:5c:a8:11:6d:3b:a6:9a:bf:62:52:a9:2c:1d:7e:6f:45:
be:af:1e:29:21:79:02:c6:89:0a:e3:98:b6:a3:4c:69:a6:c2:
5d:c6:13:c7:53:b8:eb:7f:72:ab:c0:49:e1:bb:6d:3f:9f:4b:
88:04:de:42:bb:6a:22:2e:c9:7c:cd:77:80:87:9b:14:68:49:
9b:e1:d9:8d:60:a4:08:c6:e1:61:19:0c:8d:4e:fe:75:11:95:
1b:9f:13:f2:c1:2f:20:e1:78:d0:1e:b5:3d:06:83:66:a5:bb:
4c:de:04:e9:69:53:99:3c:1e:5e:ae:86:6e:9e:31:0c:f5:2b:
9e:01:7b:99:9e:53:9e:aa:fc:73:72:49:8c:fe:53:f3:e1:dd:
68:66:17:fa:87:61:36:d5:01:cb:3e:3d:e7:cc:b7:62:3c:a6:
95:32:d4:69:89:0e:59:5f:a2:85:36:d9:6d:fc:7d:cc:17:55:
d6:bf:bb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:10:32 2025 by rpki-client