Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630.cer
File: 5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630.cer (raw, json)
Hash identifier: CsBOhJKQx/u8gxcOLTVH/lsB4f3IyNS4TmnimKTzri8=
Subject key identifier: 5A:EF:4E:0C:A7:8D:CC:A0:F6:D0:DB:99:1B:78:25:11:44:F2:A6:30
Authority key identifier: 26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F
Certificate issuer: /CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
Certificate serial: 5E6B4243F105045E2D37A4E9A317DA9A253BA762
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer
Manifest: rsync://rpki.co/repo/HYSP/11/5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630.mft
caRepository: rsync://rpki.co/repo/HYSP/11
Notify URL: https://rpki.co/rrdp/notification.xml
Certificate not before: Sat 08 Apr 2023 03:19:57 +0000
Certificate not after: Sat 06 Apr 2024 03:24:57 +0000
Subordinate resources: IP: 104.37.42.0/23
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:6b:42:43:f1:05:04:5e:2d:37:a4:e9:a3:17:da:9a:25:3b:a7:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055
Validity
Not Before: Apr 8 03:19:57 2023 GMT
Not After : Apr 6 03:24:57 2024 GMT
Subject: CN=5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:9e:8e:c2:c0:7d:f8:91:f6:f0:e9:f5:85:6a:
4a:a8:20:34:3b:94:66:00:ae:82:e1:d1:a7:d2:b6:
1e:b0:ca:61:af:e1:49:1a:41:61:e6:5b:c4:7b:92:
4b:3c:e0:4f:3e:22:4c:d9:e0:c9:9f:ff:55:d9:80:
0f:67:c9:3b:3f:79:01:04:5c:29:fb:01:19:3f:ed:
92:92:8b:9f:d9:3e:4b:53:be:da:4c:b4:4d:c6:70:
89:42:ab:a6:1e:75:a9:a7:da:c9:4e:34:ac:eb:39:
f2:55:54:15:82:c7:60:1b:cb:05:02:cd:47:71:56:
85:6d:e8:94:f2:d1:f6:e4:94:81:8b:a0:ba:0d:11:
52:e9:3c:8e:d7:dd:9b:18:5b:64:e3:a9:76:b0:54:
c1:29:9a:aa:c4:cc:40:7b:15:7b:64:ea:72:28:18:
d2:11:a4:25:65:38:a4:60:d9:37:8b:54:8d:99:62:
e3:4f:f2:a5:8d:76:86:e2:c8:dd:8f:2c:01:ce:5b:
1f:af:e6:b2:38:33:d0:2b:8d:1a:c4:f9:00:f1:d3:
3c:5f:4b:2d:dd:ad:33:4c:68:c8:a5:38:c1:f2:ed:
6b:7e:64:6e:26:02:52:80:20:e7:a2:de:03:17:7e:
ca:37:c5:82:38:cc:55:9b:32:2e:4d:d1:6a:44:43:
e9:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
5A:EF:4E:0C:A7:8D:CC:A0:F6:D0:DB:99:1B:78:25:11:44:F2:A6:30
X509v3 Authority Key Identifier:
keyid:26:71:81:B0:A5:DD:38:D6:0B:CC:22:88:13:42:C6:4F:FC:8C:BC:1F
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8143bf6201823bd454752be6/0/267181B0A5DD38D60BCC22881342C64FFC8CBC1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254bbfb5b32b4ca4428ec67b2dee44c2881037eb055.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.co/repo/HYSP/11
RPKI Manifest - URI:rsync://rpki.co/repo/HYSP/11/5AEF4E0CA78DCCA0F6D0DB991B78251144F2A630.mft
RPKI Notify - URI:https://rpki.co/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
104.37.42.0/23
Signature Algorithm: sha256WithRSAEncryption
a8:cb:6c:04:f1:ae:22:df:4b:fc:82:91:c4:7b:89:a6:2e:fd:
f8:89:b9:58:f2:6a:f7:79:35:29:b4:a2:0c:5d:40:13:40:d4:
34:77:7f:aa:db:f7:10:4b:79:1d:c3:bd:9c:1b:0e:11:37:e2:
32:e1:4b:98:78:56:51:79:81:71:b3:34:e8:7e:b9:90:a6:e6:
ef:27:11:b8:e6:90:4e:fe:e9:cd:a1:02:4e:65:72:fb:bb:15:
36:63:8c:b5:48:76:db:b0:ed:04:96:cc:5b:1d:4d:e9:bb:bb:
33:cf:b4:cc:6f:86:28:98:2a:d8:8c:58:b4:ad:99:26:16:5c:
bc:1d:4c:95:02:3d:d2:e8:c2:f8:ca:1e:da:0b:48:2f:4c:2c:
49:1a:1a:0c:d2:e2:e9:4e:05:8c:d7:c8:86:8e:ca:18:9c:5f:
73:94:cc:82:c0:16:3e:5a:1b:dc:7a:18:dd:11:7a:02:43:32:
f1:71:8a:35:a8:26:75:59:38:d2:d0:d5:b2:d2:7b:7c:ba:0f:
3b:b4:60:dc:d2:f7:67:aa:5e:b8:c6:25:0c:f7:13:c5:7a:52:
63:f2:35:53:4d:30:2e:25:80:6c:a4:c4:6c:02:65:5d:80:f0:
c5:0c:91:11:f9:c5:12:6d:bb:a3:da:c9:1e:5b:7e:cf:cf:17:
66:43:7a:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:46:40 2024 by rpki-client on console-ams.rpki-client.org