Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer
File: sJR4D_uwa3tX8CFOhFUrlkxQQdY.cer (raw, json)
Hash identifier: DUr4PQmTiWGCRC3SBUDMr46kNWBIdZFK+hwrZ2B3zHE=
Subject key identifier: B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F2EC0A9FECD8966A25B51AE026E9E
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 9180
IP: 195.214.224.0/21
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:2e:c0:a9:fe:cd:89:66:a2:5b:51:ae:02:6e:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b094780ffbb06b7b57f0214e84552b964c5041d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a6:cd:b0:56:c7:33:63:93:a5:83:d0:35:34:
ca:1a:fd:8a:ed:d4:9d:7f:35:c7:0b:f8:ca:ae:55:
a9:0e:b2:37:54:db:7f:f3:ff:ed:88:cd:6d:bd:e1:
96:82:c8:e4:73:c7:52:e0:4f:ec:71:65:cc:90:02:
73:0c:33:8d:1b:c9:8d:c5:71:21:66:16:85:9a:36:
03:ff:39:95:ca:f0:5b:2b:93:d8:d5:16:52:cc:2b:
bc:4e:43:1e:c1:8a:b1:19:b6:c4:33:ab:3e:f0:91:
29:f5:8e:4e:fc:c9:94:0f:4b:ea:3b:b6:0a:87:99:
3e:10:04:e5:ad:be:69:11:47:1b:44:ee:47:f4:8d:
6a:87:ee:ba:70:ed:62:b1:c6:7b:e6:3b:6a:c3:5a:
fd:b9:e6:11:34:20:4c:cc:35:3e:8c:8f:54:98:83:
9d:22:08:a2:c5:94:58:ac:33:c9:6c:7e:43:06:ff:
f9:88:b0:bf:1e:17:fc:9b:78:b9:4f:01:3e:31:ce:
cc:5a:7d:ec:87:0d:15:88:9c:a9:bd:9d:42:3e:36:
11:6e:d0:11:9f:54:20:6a:46:81:c1:c3:9c:e6:6d:
66:5f:6f:97:a7:39:1f:d5:91:0c:74:c9:0c:35:4e:
0f:76:92:67:30:94:2b:9f:3b:cc:5b:2d:17:f6:91:
61:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:94:78:0F:FB:B0:6B:7B:57:F0:21:4E:84:55:2B:96:4C:50:41:D6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/6683ca-a688-4141-ad41-8adf0da22545/1/sJR4D_uwa3tX8CFOhFUrlkxQQdY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.214.224.0/21
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9180
Signature Algorithm: sha256WithRSAEncryption
42:d5:6d:bf:fb:0a:c7:ff:3a:f9:32:f4:bb:bd:27:16:29:93:
87:f1:0b:ea:0c:8b:cf:90:d7:d7:a4:5e:79:9b:7b:c9:a2:7f:
47:6c:3e:94:08:c3:46:a1:5a:08:b2:ae:43:a9:25:b0:bd:3b:
e6:b4:2d:b2:5b:bc:b5:4a:15:39:bc:4f:36:94:cc:32:f5:21:
a9:12:44:38:6d:da:64:bb:33:e9:a9:0c:56:65:af:55:59:b9:
34:60:78:69:2f:f8:e6:1a:bf:55:ce:b3:80:fb:a2:f5:fb:f5:
1d:6e:72:53:2d:e7:41:8c:25:74:b2:ac:b2:4c:02:60:2d:c8:
a3:dc:a6:18:87:59:73:7b:ff:e9:19:3f:2b:b9:c0:98:e8:e6:
71:f0:c4:e1:f4:87:7f:e4:f1:7d:69:e9:a1:f4:12:3a:fe:d4:
9c:70:5a:ef:19:67:5b:97:c0:c4:f4:8b:86:ea:cf:ee:c5:1b:
59:24:0a:f8:e8:54:18:a7:eb:2e:b4:de:6c:51:fa:ca:fb:c1:
f8:15:c4:63:b5:ba:5d:d1:23:ca:91:ee:13:4e:11:c2:cf:e7:
c6:7b:0b:ef:6d:b4:cd:39:e1:2f:c8:b2:21:80:dc:9c:81:ea:
6c:4b:21:29:34:66:6c:43:d9:7c:86:a5:e1:2e:d6:fb:23:2f:
28:79:2f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:55:52 2025 by rpki-client