Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1P9RiRrUTBZt7roTFZZsmh2DkJc.cer
File: 1P9RiRrUTBZt7roTFZZsmh2DkJc.cer (raw, json)
Hash identifier: U+N96pSdvJm/aKCVOJvwPY8nwmvyxismfL9naSLxOzI=
Subject key identifier: D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521F12173D09B4A45028458C24253ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 28959
IP: 194.126.209.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:f1:21:73:d0:9b:4a:45:02:84:58:c2:42:53:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d4ff51891ad44c166deeba1315966c9a1d839097
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:7a:31:4a:1b:49:a2:29:d5:f0:35:bd:03:22:
22:5a:29:90:5f:d4:c5:a9:42:53:22:2a:ac:e3:1c:
83:0f:47:4e:98:0f:f2:07:25:13:5b:74:e6:1e:1f:
ee:cc:d4:84:f4:8a:48:c1:2d:6e:93:97:8d:c9:d5:
0f:a9:c9:6e:12:2e:c5:ca:f6:53:8a:9a:ef:28:a0:
d8:ae:03:b5:24:e1:7c:97:31:03:20:6f:80:45:97:
1f:60:47:37:2a:37:a8:e2:dc:14:0f:3f:01:35:79:
95:32:0d:98:7a:b0:4b:40:9b:c5:80:67:ac:a5:9d:
79:5e:61:e4:52:3e:66:b1:f0:c0:9b:f6:f4:72:47:
bf:9b:c7:14:72:9b:da:59:97:ee:ad:20:a3:a3:49:
86:3a:77:26:97:02:db:4b:b7:43:23:22:cc:85:b9:
f1:1e:cc:2c:e6:ae:47:0c:45:ce:28:7a:2c:4d:a3:
3c:4f:73:b7:cd:47:0b:5b:fa:2a:b0:64:dc:c0:a0:
e6:9a:45:16:5b:2a:0d:e8:2f:29:0a:b1:aa:5e:b9:
a9:79:d4:d5:db:ea:f8:23:d4:9f:ad:56:b8:66:91:
ca:84:0d:ae:ba:a6:76:49:61:6b:14:02:28:84:33:
a6:09:3e:01:b5:f4:91:f3:71:a8:67:3c:5e:24:10:
0d:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:FF:51:89:1A:D4:4C:16:6D:EE:BA:13:15:96:6C:9A:1D:83:90:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/1995e0-f450-4958-8a2d-ca80badd79bf/1/1P9RiRrUTBZt7roTFZZsmh2DkJc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.209.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28959
Signature Algorithm: sha256WithRSAEncryption
74:53:6c:73:f7:9a:5f:ac:c8:cb:f8:47:a4:61:b5:dd:1c:a9:
52:65:6c:ac:13:36:7b:4e:74:cd:eb:24:ae:42:1e:01:c2:55:
6b:b0:b9:86:cd:32:c8:c5:1e:97:12:4b:b9:fc:b1:0e:43:e6:
52:8b:e6:79:87:58:a0:a2:d1:fd:2a:a6:5f:f5:02:b9:c5:3f:
0f:91:e6:e6:23:38:bd:a6:ec:ad:66:33:20:5b:57:8a:a0:8a:
67:59:85:a2:52:1d:ec:7e:19:7b:34:39:01:83:a8:8d:ba:04:
c8:51:52:3f:24:14:a7:43:ba:64:0e:45:5e:12:6f:3d:66:29:
9a:c9:7b:35:9b:24:cc:4f:52:10:27:3f:60:7d:d3:92:03:61:
35:d0:87:7b:45:7f:a5:a3:80:e3:81:ec:19:32:2e:a5:37:ca:
17:2a:36:1b:88:9b:7b:4a:94:ba:83:5a:2a:0f:a6:5a:e9:62:
4d:d4:86:7c:ad:4b:61:9f:90:58:6b:72:b4:6a:70:97:a0:2a:
98:35:8e:ef:fc:32:14:cb:c8:98:90:6e:22:be:c9:20:ad:96:
7d:8b:0c:14:aa:26:40:41:b0:6c:39:82:10:ff:73:cb:e9:5f:
bb:83:dc:5f:c6:b0:6b:77:83:f0:c8:bf:11:0e:49:e6:6d:d0:
35:27:7b:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 01:24:48 2025 by rpki-client