Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ySi2NBei54heM4gakkqsnUCqymA.cer
File: ySi2NBei54heM4gakkqsnUCqymA.cer (raw, json)
Hash identifier: V7FEU5XBUOYipTbDr+mCyU5n61Ydt4Lq3NyKhxFGGyM=
Subject key identifier: C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3E7EFC33B68E95DA2217B9912BC73
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25039
IP: 145.225.0.0/16
IP: 2a12:2f40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:e7:ef:c3:3b:68:e9:5d:a2:21:7b:99:12:bc:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c928b63417a2e7885e33881a924aac9d40aaca60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:6b:71:38:b8:69:11:cc:39:67:76:68:e5:f6:
f6:d8:84:dd:ba:92:fd:67:a7:46:be:ff:b5:cb:06:
32:ac:5a:bc:6c:c3:05:30:e2:32:77:1b:60:6d:c2:
46:d4:3d:fd:ad:bc:5b:e8:28:da:f2:b8:ef:66:89:
ce:16:cf:d7:24:64:26:37:f8:d5:73:25:52:2b:00:
18:79:c4:94:0f:43:81:11:55:ca:e0:3a:fc:2f:60:
80:2b:0f:9c:d0:8f:b8:0f:29:77:6f:16:77:83:a0:
e3:13:80:fa:51:72:93:5e:0c:29:9d:06:6e:20:0b:
ff:98:40:9f:53:14:b0:3c:c6:e6:85:4c:5e:42:39:
6a:ee:9b:df:73:f2:0d:d8:4f:70:5e:fa:14:8b:cb:
ec:8f:e1:09:cd:0e:29:4f:8b:47:fe:8a:60:cb:1e:
bd:f9:48:6e:1c:6e:51:a6:9f:ce:b8:6a:87:5a:fd:
36:a0:79:d8:8e:f4:c2:fb:e8:96:37:80:fc:34:3a:
26:a5:62:d6:35:8c:14:51:7d:21:c4:21:bc:f3:16:
fc:f4:80:01:8d:a3:8e:db:61:fc:67:7a:74:a2:bc:
b1:04:e8:19:63:2b:1a:91:99:8e:e7:2e:0e:9b:de:
83:26:ca:c4:3a:3b:57:9b:15:d1:86:df:17:67:6a:
a6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:28:B6:34:17:A2:E7:88:5E:33:88:1A:92:4A:AC:9D:40:AA:CA:60
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9d7e6a-0eae-434f-9a35-8c97161e062f/1/ySi2NBei54heM4gakkqsnUCqymA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.225.0.0/16
IPv6:
2a12:2f40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25039
Signature Algorithm: sha256WithRSAEncryption
0b:e5:d0:77:15:c0:e7:e4:52:21:60:4f:12:ae:77:82:df:95:
2d:93:f0:26:63:9a:71:ab:5e:83:a7:7e:b1:f7:0f:ed:50:1f:
7f:2e:b1:fa:d7:56:73:a7:68:19:cf:eb:1a:ce:a7:2d:55:b9:
07:d2:92:b8:f9:2c:82:7d:f0:2f:8a:48:2e:db:a3:1b:53:c7:
13:b0:32:53:36:65:52:3c:0a:aa:d7:87:68:0c:c8:19:00:1c:
41:0d:c0:f2:33:77:3c:a7:b5:35:9a:88:55:86:bb:81:c6:65:
f8:0b:84:c9:e9:52:5d:b9:0f:41:e9:04:56:cd:91:6c:76:36:
5a:ff:54:7e:f9:57:2d:b7:e1:57:c4:ed:58:92:47:13:d1:0a:
72:33:69:60:2c:52:7d:bb:ef:76:d4:58:0b:73:ea:34:fd:4a:
35:e6:92:fe:74:75:b7:02:91:60:d6:8c:61:2c:ba:b9:4a:32:
b7:75:05:ee:36:8f:8d:cd:8d:ce:af:6d:f8:4d:49:22:b5:b6:
3c:62:ae:43:62:9e:5e:62:cf:e0:04:01:3f:b1:d0:b7:d3:f2:
c0:99:28:80:98:ff:37:32:44:15:c5:16:d2:8f:3b:c2:9a:58:
8a:06:6b:a7:07:77:b8:ac:28:75:95:47:fe:b0:aa:12:af:e0:
5f:d6:58:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:42:16 2025 by rpki-client