Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/tTRCGKSIC1AMAzMh52vXi088Flg.cer
File: tTRCGKSIC1AMAzMh52vXi088Flg.cer (raw, json)
Hash identifier: v7pCYZwb9ry/CvSruB2Z9IlA7gaGOyzcbPsey05DZW4=
Subject key identifier: B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F1023A96A80CA8131E1CAACAC53DF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:40 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 34615
AS: 61320
IP: 192.109.30.0/24
IP: 192.109.37.0 -- 192.109.38.255
IP: 192.109.47.0/24
IP: 2a0f:6c40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:10:23:a9:6a:80:ca:81:31:e1:ca:ac:ac:53:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:40 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b5344218a4880b500c033321e76bd78b4f3c1658
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8a:e9:d3:19:19:46:0e:18:aa:c1:40:53:e6:
0e:4d:33:9c:a2:4e:57:82:52:37:e1:35:f2:0f:e0:
eb:46:85:a7:61:79:be:35:9b:b0:c4:f7:95:b7:47:
ac:d0:67:61:7c:12:cc:1a:bc:51:90:b3:30:af:81:
2f:79:c5:f3:ba:64:4f:30:6a:53:2b:e7:54:71:25:
77:10:49:d7:33:51:a2:2a:cd:e5:2a:c1:10:50:3d:
2f:ee:aa:b7:64:b4:c9:8d:5c:63:5e:6d:90:cc:84:
c1:07:d1:db:3d:73:db:20:f8:ad:14:9d:23:71:10:
df:73:2d:97:b6:95:0e:29:bd:33:ff:10:3e:fc:3c:
34:4c:90:ba:62:87:a8:14:82:a6:ef:24:cc:9b:c8:
29:80:b1:cc:8b:42:52:93:59:f3:59:5f:1f:c1:8e:
fa:ed:1d:ea:9c:81:26:e8:3a:6a:1d:9c:42:0a:cb:
e1:61:b9:f0:e3:e5:67:79:25:7a:2d:db:db:c1:d0:
bc:b1:45:ac:50:7d:99:60:a0:fa:4d:5a:71:35:6b:
8b:d8:42:97:b5:ff:55:16:14:b7:ee:59:5f:56:06:
c9:58:6e:3a:c4:4f:91:70:90:1a:9a:4a:cc:0b:59:
b7:b6:9e:9e:e3:67:3c:10:2e:3e:cd:9b:41:92:62:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:34:42:18:A4:88:0B:50:0C:03:33:21:E7:6B:D7:8B:4F:3C:16:58
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/d282be-7ca5-400f-be84-cfab10d30693/1/tTRCGKSIC1AMAzMh52vXi088Flg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.109.30.0/24
192.109.37.0-192.109.38.255
192.109.47.0/24
IPv6:
2a0f:6c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
34615
61320
Signature Algorithm: sha256WithRSAEncryption
a0:e3:06:c7:51:2e:72:df:d6:be:10:ca:39:d9:d9:24:83:c8:
5a:22:bd:4a:98:65:ba:46:98:e3:dc:bb:d5:19:44:89:1a:8e:
fe:38:1f:d6:14:8e:fa:38:d9:ea:b3:1d:81:2b:9c:0e:bf:95:
db:f2:b4:d5:56:d4:97:f1:e9:c5:e9:92:cc:36:74:df:cf:40:
35:98:49:32:4e:fc:65:34:79:22:09:5c:f2:95:e7:b8:fa:d3:
95:d7:9a:57:b7:18:54:26:6d:c0:1b:28:9a:e3:3d:19:65:73:
ec:37:2e:dd:f0:58:c6:04:d8:37:7c:73:b9:2f:37:5b:a7:52:
18:b4:8d:ba:5a:60:0d:05:bd:91:c7:8c:0e:77:fc:d0:7c:e6:
31:26:67:70:c1:50:af:c4:48:1d:54:72:a9:70:37:4d:72:3a:
68:7c:2a:43:3a:8d:02:8a:86:57:83:0a:18:31:3e:f0:81:f8:
3f:04:41:16:7f:09:24:34:d9:da:78:e6:97:fd:5e:d9:69:ba:
87:1c:0a:a7:15:93:72:46:ab:6f:27:b6:96:1f:e0:88:08:37:
39:d0:41:ee:c2:b5:79:7c:ea:c7:d9:6f:b9:f0:28:b8:93:11:
e7:7b:31:ee:f7:bb:0e:d1:f7:7f:84:eb:82:84:6a:a6:d6:88:
fb:62:01:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:38:03 2025 by rpki-client