Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/u03_X665REU6fISwl-V8ccBPEfw.cer
File: u03_X665REU6fISwl-V8ccBPEfw.cer (raw, json)
Hash identifier: jsF0CQ9/EE8VfVfEkydcXT5PR3Fyq83IlSNJ7hLkSpU=
Subject key identifier: BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B397CE451F8C9971857080C541A3FE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25053
IP: 194.48.84.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:97:ce:45:1f:8c:99:71:85:70:80:c5:41:a3:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb4dff5faeb944453a7c84b097e57c71c04f11fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:8f:cc:36:b1:f4:51:fb:0f:be:da:dc:ba:5d:
b2:93:96:06:17:b0:c3:be:77:20:3e:ac:da:60:42:
37:9a:f3:9b:61:cc:1d:0f:14:b9:be:f4:4a:19:a0:
b4:a9:9c:01:81:bf:5d:b2:e3:16:f8:ca:66:fb:ed:
73:e0:e4:3c:bb:12:4f:db:fe:bd:83:39:2c:8c:f4:
14:65:f3:de:f4:0f:61:80:27:33:2b:48:08:bc:24:
a2:c2:d8:17:7b:f3:f6:41:57:a5:a3:8d:c1:98:b9:
3b:57:a0:4e:65:f7:30:f4:fa:9e:26:6b:fd:b1:3a:
d5:f3:23:d3:68:da:c0:f8:e6:71:76:6f:4d:4a:1d:
25:40:9d:6d:24:eb:4a:bc:cd:7c:aa:0e:25:8b:c0:
73:a6:d5:d3:20:f9:00:73:50:7c:dd:88:71:36:fd:
7c:a7:b2:fc:be:6b:f0:84:b4:05:8f:e8:8c:59:cd:
05:45:51:93:76:00:27:94:61:9d:31:cb:30:ca:4c:
32:06:8c:fd:bf:93:18:6f:8a:bb:cd:08:97:32:83:
21:32:42:24:82:2a:d5:0a:b5:1a:c5:41:ba:65:81:
e2:b8:af:d4:83:aa:e6:19:57:4b:d0:ff:aa:44:e6:
c4:42:59:4a:3e:ed:81:3a:eb:31:60:33:66:a1:e5:
b9:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:4D:FF:5F:AE:B9:44:45:3A:7C:84:B0:97:E5:7C:71:C0:4F:11:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/d13526-c1ac-45e4-bebc-66f4167f83b2/1/u03_X665REU6fISwl-V8ccBPEfw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.48.84.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25053
Signature Algorithm: sha256WithRSAEncryption
72:ce:24:bd:72:20:30:c8:64:98:d7:29:a5:97:85:c8:27:bd:
3e:79:98:a1:2f:8f:0f:53:55:7a:99:af:d1:f0:42:e4:8e:ef:
56:fe:4f:0e:ad:39:93:6d:04:38:a2:fd:56:26:ff:83:6f:08:
ea:4c:97:f6:aa:c6:04:93:cd:c8:0b:d5:bf:2b:32:30:3a:98:
16:05:cd:bf:ed:21:37:76:09:12:31:be:16:2f:3c:dc:1c:1a:
6c:42:ea:3e:79:1c:09:a2:b0:0f:55:be:2b:60:4f:18:d9:f7:
7f:69:e6:50:80:01:93:f8:ee:c4:3d:c1:e0:71:67:fa:ff:3a:
09:85:4a:1f:4f:08:c1:33:e7:bb:71:81:ba:cf:0f:d4:e5:09:
24:63:21:04:12:06:b7:89:bb:b0:89:d5:d2:1a:77:c8:3a:b8:
3d:4f:d9:e6:e7:e7:e0:47:49:f4:3a:c4:fa:88:77:b2:14:54:
a1:34:de:af:c3:af:a6:59:be:ba:f8:c9:2a:66:5e:57:06:27:
c7:59:22:b1:5a:c0:1f:38:e0:98:74:5d:af:95:a1:30:42:40:
1a:13:d7:de:60:c3:c4:9b:9c:df:5c:a1:53:f1:8f:9a:01:27:
57:d3:c7:4b:70:6e:ad:ac:ac:91:06:2a:1c:06:b3:4c:30:a0:
08:47:82:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:04 2025 by rpki-client