Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer
File: JVh2QS0g-7bKuCNIF4KsR3A7RAQ.cer (raw, json)
Hash identifier: szRnr1faq5xsG2M5LOUAtMY0ix8BaArS6KmyajKi1ms=
Subject key identifier: 25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E08455ABF8810B6C97E3F2D696799
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212514
IP: 2a01:ffc0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:08:45:5a:bf:88:10:b6:c9:7e:3f:2d:69:67:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=255876412d20fbb6cab823481782ac47703b4404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c7:52:51:4f:8c:1f:06:13:9c:42:85:bf:23:
52:56:cb:db:f0:d5:f6:b4:08:f1:58:67:9f:f6:08:
08:e5:84:17:45:1c:3e:dd:6c:e7:8b:2d:02:3a:02:
83:69:37:8c:8d:0d:b9:3f:4a:9c:69:58:a8:57:3e:
6e:53:68:f7:e2:e9:bd:f7:a5:98:99:49:a9:31:a6:
49:9d:cf:34:7d:03:4a:93:4b:d5:58:a1:d4:a1:2e:
76:56:2e:d0:cd:ac:7c:c5:f1:cf:64:77:da:b2:6c:
e1:58:c8:50:8f:6c:39:36:29:63:84:28:f5:8f:8d:
d0:48:6e:12:d3:fb:53:4a:28:ec:8f:7b:0f:f5:14:
b4:57:5a:28:00:cc:a2:3c:2f:60:f0:e7:61:c7:29:
fb:bf:fb:66:a8:b0:9e:b4:5e:4f:b0:4a:20:99:a7:
42:d9:93:8d:1a:01:42:30:92:e5:ec:af:92:3b:65:
af:a9:94:f5:53:7a:00:ad:74:41:bc:dd:a9:36:a1:
c6:1a:02:43:c1:77:73:8d:9d:c6:b5:a7:6c:89:32:
64:d4:56:96:7b:43:9e:25:52:f7:af:e2:4d:f1:03:
6a:00:b9:57:9c:3f:f1:9d:57:e8:3c:f5:ff:9b:0c:
c2:62:b2:fc:be:77:a3:d5:a0:f8:a8:d3:e1:31:50:
1d:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:58:76:41:2D:20:FB:B6:CA:B8:23:48:17:82:AC:47:70:3B:44:04
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/dd062a-1319-4019-a551-876c7fca4b34/1/JVh2QS0g-7bKuCNIF4KsR3A7RAQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:ffc0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212514
Signature Algorithm: sha256WithRSAEncryption
67:1c:83:1a:13:e7:08:6e:8b:03:ce:ff:e7:81:2f:2e:80:58:
dd:d8:5e:f9:50:c3:03:24:00:e4:71:40:a9:e6:0f:79:0b:88:
cf:e4:f4:7c:0f:0c:50:0c:c1:31:9a:a7:26:7f:b1:05:9a:7b:
9e:bf:4c:49:18:21:db:f4:6d:0d:97:df:94:ce:46:cf:41:fd:
3b:fd:57:d0:f1:4d:6b:87:2c:0d:3d:44:a5:e1:05:a4:ab:bc:
03:f1:e5:38:27:25:7b:2c:af:40:29:1c:ed:93:e0:00:8b:6d:
11:80:8e:47:3c:a5:89:2f:a8:6b:15:be:62:d6:93:a7:2c:5c:
6f:db:b5:67:e6:f9:1a:df:30:20:bb:48:e2:70:61:9c:06:64:
e1:2c:12:e2:61:ed:9c:b7:98:ac:eb:79:18:89:e9:e7:4b:7a:
cd:dd:e3:4f:e2:65:b9:8d:ef:5b:ac:99:de:0b:5d:31:51:84:
a6:09:52:39:68:27:3e:30:93:02:b5:04:c7:e2:e2:c5:dd:27:
98:b7:27:31:d2:7c:d2:58:9f:15:2c:21:61:2d:5d:33:cb:bd:
f2:68:73:21:8a:e2:7a:26:11:1c:da:f3:f0:9e:5e:2f:ba:b0:
0c:20:8c:77:05:81:a9:20:82:b0:8f:b5:4f:8c:ec:c7:cf:78:
d0:df:c0:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 10:12:23 2025 by rpki-client