Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/y5-GErfxR1ABa4SMQvYN82rYMtk.cer
File: y5-GErfxR1ABa4SMQvYN82rYMtk.cer (raw, json)
Hash identifier: 3DDh1XHlxmtmbdZtnp8rKt8fkArdpPlywSt0Em84SdI=
Subject key identifier: CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C4D0E90A9354CE6433E185C88EFC5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 205870
IP: 185.145.28.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:4d:0e:90:a9:35:4c:e6:43:3e:18:5c:88:ef:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=cb9f8612b7f14750016b848c42f60df36ad832d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:92:16:88:40:15:00:78:7b:80:52:11:fd:
d9:f6:57:4b:75:ae:aa:31:5e:2e:ed:fe:73:0c:c5:
9f:05:e9:13:74:cf:87:e3:44:73:fa:85:d6:ad:7e:
0c:a2:51:6d:58:49:8b:b3:3d:7f:90:5c:bc:0a:89:
d0:ba:c0:80:b0:a1:8b:24:c8:8c:20:4c:5b:e7:9c:
63:8b:92:0b:f9:bf:ed:13:cf:fc:18:3a:6e:dc:b3:
70:9a:e6:e8:f2:55:e3:c1:63:78:a2:6a:f5:6b:d0:
bf:90:65:a0:a9:4a:69:47:dc:6d:40:e5:8f:3d:f5:
19:88:3c:d3:bc:87:d1:13:2b:cb:a3:75:2b:cb:74:
64:94:a5:65:0c:49:cb:ba:6a:62:5c:88:99:b8:cf:
20:1a:1c:b1:3b:a2:59:3d:4b:39:6c:71:b3:9c:63:
2c:09:fc:fa:ef:8a:8e:93:f0:8b:4e:b7:92:6f:39:
57:62:f2:9e:4f:00:2d:c6:07:3a:57:5c:b3:ca:c6:
48:9a:f8:1b:80:eb:35:a6:4a:57:09:bb:a9:4c:32:
81:aa:78:df:f7:4c:10:3b:03:96:15:8c:8b:4f:fd:
16:32:ca:b3:84:9b:56:fa:16:50:72:2e:e3:bf:4d:
b6:2c:49:e8:00:ac:7f:e8:00:09:65:21:ed:22:1b:
64:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:9F:86:12:B7:F1:47:50:01:6B:84:8C:42:F6:0D:F3:6A:D8:32:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/b84500-ffdb-42d2-9465-a2eade83955d/1/y5-GErfxR1ABa4SMQvYN82rYMtk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.28.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
205870
Signature Algorithm: sha256WithRSAEncryption
64:5a:0f:08:64:de:db:7f:23:f8:a3:08:21:6e:e6:e3:ff:bf:
38:f2:ed:1f:1f:66:e5:13:ed:bd:b9:12:ab:19:b5:06:fd:6a:
ca:90:07:65:49:63:b5:f1:e4:14:21:5e:07:6c:7a:1f:2f:1a:
fe:09:d8:31:5b:de:d2:b9:40:e8:9d:f9:4c:49:de:7a:be:0f:
68:c7:5f:a2:9d:85:b4:99:18:6d:10:e0:26:42:2e:a9:e2:c4:
e6:da:bf:89:1f:af:ad:38:16:c9:e2:22:16:72:bf:79:df:4c:
c6:a3:db:48:b6:b6:32:c1:d7:91:8d:d1:c3:b3:ca:fe:a6:31:
03:fb:7a:0f:09:aa:ca:0b:fe:5e:8b:7c:35:53:1c:de:4b:bd:
f6:9f:75:13:e9:8e:0d:54:2c:ef:9c:07:de:6b:93:16:5b:46:
ff:c1:34:ef:9c:3b:0b:1e:78:ba:71:78:1b:78:4e:49:e2:57:
40:ea:fe:85:f0:21:1a:6e:f7:45:62:33:12:6d:32:c3:d7:1a:
31:63:0a:dc:d6:1b:ef:a5:10:2a:85:b0:96:dc:83:f8:44:0c:
e4:5e:10:d8:65:d2:02:5e:e8:5a:2b:6a:04:92:78:05:80:2e:
4e:c8:a7:62:e4:60:56:53:1a:79:6e:8a:63:f6:7d:b9:ad:d1:
f0:ab:ed:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:29:16 2025 by rpki-client