Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer
File: u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.cer (raw, json)
Hash identifier: yStIY2ABHRcI1r9PmyC0TYAzMX8z3SBsxEU9Ui5WCGk=
Subject key identifier: BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369A733A15259C52CFF51492E69F6EC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210036
IP: 193.36.104.0/22
IP: 2a0d:d740::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:a7:33:a1:52:59:c5:2c:ff:51:49:2e:69:f6:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bbe6fe14b8755d9ff7466fa97c4a55f735183249
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:50:7a:f2:fd:0d:ea:37:be:80:81:b0:39:46:
6e:92:15:3c:45:aa:fb:0d:36:e5:10:80:84:73:76:
92:51:56:07:a4:66:63:5f:91:a1:57:49:da:2c:4f:
31:ad:fb:e4:e8:7d:fd:14:dc:74:69:5b:38:33:81:
45:a4:24:18:3f:75:fd:85:1e:c0:d6:fc:4f:df:70:
f4:f2:18:18:33:f8:7e:e1:9b:63:3b:a9:ac:0b:60:
4c:67:d4:00:81:ef:c6:7c:f2:4c:3d:34:cc:f3:77:
29:8e:03:f3:fb:b0:47:7c:4f:18:e4:da:aa:db:78:
ec:ef:da:35:80:7b:fa:d1:85:08:13:48:e1:d7:81:
c5:f4:99:36:ba:62:50:fa:80:30:2c:3a:49:7c:c6:
7f:77:c8:b9:32:30:99:6b:78:98:03:0c:22:17:ec:
d3:5f:fd:6b:0b:67:d0:d1:e2:74:22:e3:72:3f:06:
0a:72:f4:0d:f8:04:96:3c:26:b9:14:fb:4a:87:57:
dc:5e:db:21:2f:99:d5:5e:4d:6f:19:64:23:25:7f:
4c:2c:6e:f6:50:59:83:a3:0e:0a:9b:67:f3:81:8a:
f2:e9:25:ee:3f:ea:bc:fa:75:60:6e:8b:c0:74:e7:
44:cf:bb:a8:b1:2c:d0:66:48:b8:4d:71:ae:bf:0a:
d5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E6:FE:14:B8:75:5D:9F:F7:46:6F:A9:7C:4A:55:F7:35:18:32:49
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/75d4fd-90f5-4baa-a35c-87a6333d6e64/1/u-b-FLh1XZ_3Rm-pfEpV9zUYMkk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.36.104.0/22
IPv6:
2a0d:d740::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210036
Signature Algorithm: sha256WithRSAEncryption
3e:f1:7d:42:79:13:c6:01:81:fd:3b:39:28:0f:db:6d:a8:22:
e4:0a:76:22:bf:2b:1d:15:aa:57:40:6a:1f:cb:37:23:3a:ed:
19:34:4e:74:35:ee:3d:69:86:98:49:67:87:9a:ff:da:2a:22:
74:d3:2b:d3:d4:94:49:70:55:21:c8:fe:4b:a6:86:b7:4c:b0:
d9:4a:e4:ed:85:a9:b4:1d:74:a7:ca:0d:fd:49:be:be:86:8c:
2d:a1:83:23:e9:2d:3b:c8:cf:b2:1a:8b:e8:e7:c7:56:b9:ea:
4b:fd:e3:1a:df:f0:e3:a8:4d:1b:a9:88:28:6e:da:ff:b5:ff:
f9:75:fa:85:e2:1b:4a:53:96:73:a4:6c:89:c5:cb:8c:b3:bd:
58:a8:bd:36:71:8d:25:09:45:82:ed:ba:af:e8:6c:2d:de:47:
c3:8c:4c:a1:98:19:f4:d8:46:08:01:a3:5e:13:5b:35:36:33:
f7:11:52:c0:d7:38:dd:17:11:d7:f9:66:7a:b1:1c:c2:09:e2:
8f:5c:df:85:11:a2:bc:88:5d:8f:16:96:84:fa:28:ad:fd:a4:
1d:8f:ee:35:94:5c:48:4d:e6:7c:23:79:68:73:34:a4:17:13:
64:33:29:57:ad:31:df:60:63:71:e8:9e:e6:12:e2:65:cc:b6:
a2:bb:41:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:19:48 2025 by rpki-client