Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uxmjOYHjSyrlBYbjBIxmOixrhYY.cer
File: uxmjOYHjSyrlBYbjBIxmOixrhYY.cer (raw, json)
Hash identifier: dQka4gnb9WIJpdjZ8wJsW6O9iyTLIAbHhaTmoNuA8kQ=
Subject key identifier: BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942368F3338792C392DE19FE32DD5D024B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:47:48 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201847
IP: 45.157.228.0/22
IP: 185.62.48.0/22
IP: 2a04:efc0::/29
IP: 2a0f:4d80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:68:f3:33:87:92:c3:92:de:19:fe:32:dd:5d:02:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:47:48 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bb19a33981e34b2ae50586e3048c663a2c6b8586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e9:d8:33:5c:89:a6:2d:6d:a4:65:61:b8:5d:
f5:35:57:ac:6c:e3:fa:b6:30:53:64:33:cb:b6:d5:
d1:4f:33:ac:44:6e:af:a6:ef:8c:e4:2f:b4:88:27:
f7:14:8b:1b:67:dc:21:39:81:9e:94:fa:5b:7e:96:
ca:bc:b9:6a:32:ab:61:e9:eb:ac:bb:bb:f4:e1:e6:
36:e6:ce:1c:8b:ad:a0:ab:01:74:72:10:14:c6:7a:
38:a6:c8:b2:33:96:03:98:e6:2b:9e:13:b5:56:94:
6e:7e:4f:b4:fb:da:78:12:1e:ab:86:a4:a8:2d:45:
68:e5:d2:1f:f4:7b:42:30:72:7e:8e:46:89:52:66:
40:b4:0b:88:8e:e0:cf:e6:43:a4:13:bd:c8:e3:1e:
fb:37:ff:24:88:0a:c8:a8:3b:47:fe:8b:10:3e:16:
eb:69:f0:a0:b5:4f:13:7a:9d:50:f3:7d:23:21:52:
c0:9a:76:5d:a3:39:9a:df:e0:6e:51:2a:7a:6a:d9:
0c:47:dd:39:ed:24:ed:bd:bb:c2:1c:11:7c:e5:9f:
f3:de:1e:bc:80:06:5f:5e:df:ec:ee:a8:ca:e5:01:
68:da:99:e0:b7:f7:9f:72:a3:ed:f1:bd:14:3d:35:
e6:81:22:8b:b6:c2:f3:64:6d:b5:1d:6e:27:30:60:
3d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:19:A3:39:81:E3:4B:2A:E5:05:86:E3:04:8C:66:3A:2C:6B:85:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/748120-b4f5-44b0-ac9e-6060c48da837/1/uxmjOYHjSyrlBYbjBIxmOixrhYY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.228.0/22
185.62.48.0/22
IPv6:
2a04:efc0::/29
2a0f:4d80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201847
Signature Algorithm: sha256WithRSAEncryption
36:f1:85:39:0b:8b:66:0e:fb:b7:28:3e:d3:ef:e4:1b:b6:67:
b9:c9:87:73:bf:47:72:e2:f3:f6:4c:1f:4e:ab:ed:13:cc:42:
88:ec:cb:e4:cc:dd:cd:e0:1a:4c:54:1e:97:21:a4:f1:d8:24:
0a:be:e8:fd:6c:81:f0:81:e3:0f:10:cd:cf:b3:b3:d6:7b:bd:
14:52:99:30:88:19:09:c6:52:9d:bd:1e:6a:aa:74:e4:c0:23:
26:38:60:b6:2e:42:7b:d0:52:87:c0:99:9c:4c:43:d1:fc:d0:
10:e3:c3:13:0d:c5:39:85:b8:4c:bf:33:c1:8c:bf:8d:c5:66:
39:db:07:77:3f:34:0a:ae:1e:99:d8:ad:4f:2f:f7:5e:19:92:
84:23:5e:2e:dc:ed:47:2f:03:00:7d:87:c2:17:8d:69:c8:71:
72:05:7d:4a:43:07:fc:c4:72:81:f2:3a:b8:c3:2d:ea:06:f3:
96:22:0a:00:6f:2b:26:0b:8c:14:df:29:39:39:0e:31:c6:4d:
3c:34:74:95:26:ff:26:1b:2e:82:07:aa:de:c7:0e:a5:18:9e:
45:4d:43:a0:c7:ec:dc:03:d9:81:7d:92:fd:7a:da:40:59:92:
1f:2a:cb:77:a3:43:57:83:18:36:46:4f:8f:fa:5c:2c:86:87:
a9:19:cf:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:41:03 2025 by rpki-client