Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uji5p2P2XAJ6o92th8GI2nikvZc.cer
File: uji5p2P2XAJ6o92th8GI2nikvZc.cer (raw, json)
Hash identifier: zTS8dyxJfIIhnZH/lF75ZW0L2WoHBgR6fQAqRScl0Jg=
Subject key identifier: BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B397314205004FB0C2DC2DFA9DCED1
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 28723
AS: 34414
AS: 39784
AS: 50154
AS: 62194
IP: 131.228.0.0/17
IP: 193.254.23.128/25
IP: 194.149.238.0/23
IP: 2a0d:a840::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:97:31:42:05:00:4f:b0:c2:dc:2d:fa:9d:ce:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ba38b9a763f65c027aa3ddad87c188da78a4bd97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:40:fd:14:bf:a9:26:10:d3:67:df:33:c3:b8:
4e:75:0e:67:71:91:68:18:05:7a:e2:8d:a9:6d:de:
b0:89:3b:33:04:1e:5f:ff:c2:8b:7a:6d:ac:a2:79:
6d:57:f7:7c:8b:a0:30:19:64:70:1e:51:d8:38:e3:
40:b7:20:c5:32:7d:24:9c:38:e0:f6:26:4f:25:31:
3a:5e:3e:ca:63:9e:90:a8:72:c6:47:c3:fc:14:b2:
e0:64:1b:0b:1a:93:0c:a7:b0:1b:8d:7d:cc:c4:16:
0d:53:ca:c6:13:6a:89:57:ca:c1:dc:1a:74:21:20:
7c:49:1a:cd:cb:b9:72:27:be:e0:f7:f1:27:f6:63:
c4:c5:ce:45:56:c1:59:73:e6:c5:3f:04:0f:08:c4:
dc:95:a3:09:75:2f:17:39:89:ad:9f:ae:91:3c:5f:
f4:18:e6:69:53:33:02:18:ff:a8:a2:be:eb:e7:73:
5d:3b:18:da:50:3d:3f:9d:b5:8f:63:5e:46:25:5a:
d4:33:37:99:62:b7:75:a5:5f:98:33:95:f1:69:71:
29:2d:4c:28:42:07:c2:d4:9f:32:d0:be:02:0d:99:
d3:4e:10:ad:76:3c:c3:7e:e2:ea:b7:64:1c:eb:28:
b4:81:c5:7b:51:5c:c8:b9:ce:67:ea:55:15:97:57:
ce:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:38:B9:A7:63:F6:5C:02:7A:A3:DD:AD:87:C1:88:DA:78:A4:BD:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/3d672d-4675-4671-81c1-60f7f87c77e6/1/uji5p2P2XAJ6o92th8GI2nikvZc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.228.0.0/17
193.254.23.128/25
194.149.238.0/23
IPv6:
2a0d:a840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28723
34414
39784
50154
62194
Signature Algorithm: sha256WithRSAEncryption
96:9f:4d:f7:92:c3:d7:cc:ea:e1:e3:a7:c3:fc:9f:64:0d:a2:
f4:9c:bc:a0:e6:7e:ce:6e:22:95:e6:18:b5:a9:9a:1a:aa:ae:
d0:fe:d7:f8:9d:81:51:95:83:f1:35:cc:ae:b1:47:f0:1c:98:
36:45:d2:63:01:75:3d:ee:ad:bd:6d:df:94:d2:72:a6:31:24:
12:88:22:d0:d1:b6:0f:85:0b:54:41:09:87:c8:c8:82:21:ca:
90:1c:2d:5a:8c:ad:62:3e:cd:9c:b5:aa:47:80:57:b7:83:a1:
94:62:f4:34:b5:67:1f:64:02:2b:c7:a3:46:10:98:f5:cd:f9:
5f:7c:6c:46:03:fe:a3:46:ab:7d:29:a9:6d:b7:30:06:ac:33:
ad:04:87:95:bd:da:8b:2e:ae:71:f5:e2:7d:d4:e2:c0:e1:e0:
28:f5:18:fb:1b:b1:87:26:6c:f9:e5:75:30:bd:20:1f:29:8b:
c6:a9:aa:81:63:36:3f:46:61:19:32:c5:98:2a:c3:40:2f:74:
1a:10:9b:e2:23:5e:84:2f:de:8c:9d:22:02:a0:a6:45:75:b0:
e1:12:bb:c5:50:83:87:e9:ef:75:6d:1f:92:fd:74:4e:29:a7:
ea:fc:69:6d:79:ca:76:8c:70:f5:f4:1d:7a:6b:f1:be:75:46:
9a:d4:47:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:25:27 2025 by rpki-client