Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y28gQNlMmVsEYdxRFKTAhzUemfI.cer
File: y28gQNlMmVsEYdxRFKTAhzUemfI.cer (raw, json)
Hash identifier: BX6HfjzgxPj6g3kKEdjkFUHlynQIKgq+nqfWBoaKUb4=
Subject key identifier: CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144443761B5C9C0E5498331782D054F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:29 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201237
IP: 185.81.20.0/22
IP: 2a05:8480::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:44:37:61:b5:c9:c0:e5:49:83:31:78:2d:05:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:29 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb6f2040d94c995b0461dc5114a4c087351e99f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:c4:e1:0c:06:57:17:19:c5:c8:c1:ab:33:e7:
37:5d:df:de:0f:52:9f:3a:2b:68:3a:0b:26:ee:74:
37:36:c0:ea:de:a9:e3:e5:af:a6:05:d8:c4:96:a5:
de:bc:93:bb:4d:3d:b5:7a:f7:1a:33:91:c1:df:4b:
6b:a0:67:48:c8:55:83:03:6e:c8:b5:df:03:9e:14:
41:09:a0:66:ec:75:cc:43:c9:09:59:64:63:54:0f:
4c:09:e0:b4:f2:c7:3d:3e:13:2b:41:c3:78:cd:2b:
ac:04:4d:23:9e:4f:71:a3:d5:5c:e3:69:79:42:3b:
99:39:2b:3b:78:94:65:12:d1:56:56:03:12:63:77:
aa:33:f8:b3:5f:48:f3:6a:44:69:3f:dd:2c:96:d1:
96:dd:2a:b3:2a:78:5f:40:3c:f2:b9:3b:84:f8:a7:
ed:30:e2:d4:18:7e:a6:03:53:16:8a:dc:2f:ca:4a:
84:4d:52:12:6d:13:4f:de:ed:80:b3:80:3e:ef:b9:
6c:ce:8d:fe:b7:b3:e7:6a:7e:52:41:85:a4:c0:7e:
ee:f1:cf:23:6f:42:70:6a:4a:d0:eb:91:b8:99:63:
a5:de:e5:c4:de:5d:2e:06:39:9b:60:c5:f9:fd:78:
1c:8f:c1:3b:ae:a4:94:6f:81:f1:36:6b:a9:ca:33:
2f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:6F:20:40:D9:4C:99:5B:04:61:DC:51:14:A4:C0:87:35:1E:99:F2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/514aa5-c51d-48b1-ae06-19808bf44471/1/y28gQNlMmVsEYdxRFKTAhzUemfI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.81.20.0/22
IPv6:
2a05:8480::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201237
Signature Algorithm: sha256WithRSAEncryption
6c:35:f3:db:e7:6f:b3:01:37:0d:44:9b:fc:52:37:aa:58:51:
95:dc:fd:8a:5c:3e:03:a5:fe:1f:a1:29:61:ec:4b:b1:72:0d:
09:a1:4e:14:ac:28:9c:37:84:a8:44:b1:d3:64:9f:42:9a:f5:
f7:0e:35:c1:8a:a0:e4:50:e8:f1:a4:5c:42:aa:c2:8e:eb:0e:
78:c7:41:20:2e:4e:18:7f:c4:0a:c2:46:b0:08:df:ca:4a:85:
a6:15:a1:8a:a3:a4:16:dc:3e:b7:91:75:f1:f5:a9:75:40:f4:
bc:be:8c:77:0a:54:b8:2d:60:f4:0b:59:72:90:e6:5b:02:7f:
33:89:73:ac:0e:b0:e0:a3:a7:9e:76:0a:f6:18:0e:e4:c1:66:
a7:42:6f:33:31:04:7f:ff:09:9a:e3:ed:e7:e9:fb:72:e8:d1:
3f:3b:7f:f8:7c:54:0c:3f:40:a8:18:41:2c:7e:d2:26:59:b8:
52:e0:84:49:0c:b9:5c:5c:3c:86:fa:5b:0b:5f:3b:de:af:b7:
bc:32:2b:1b:f9:a4:41:30:c9:5f:5b:d9:2b:a6:b6:a6:8f:4b:
f0:91:bd:09:fd:ac:7a:55:46:50:ec:c6:eb:63:c5:1b:bc:6e:
3e:d8:32:7c:8a:94:45:6a:08:ff:2f:21:4a:fe:f1:d2:89:3b:
3c:7d:8c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:54 2025 by rpki-client