Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer
File: 3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.cer (raw, json)
Hash identifier: TEzDtoPPNZctjxzO+Np25GnV90OtnHQuoc7xeOXtaCY=
Subject key identifier: 3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
Authority key identifier: 79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
Certificate issuer: /CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Certificate serial: 2AB1A0DFB9FA543BE964FAC0F7650E8399CD5474
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Manifest: rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.mft
caRepository: rsync://rpki.sn-p.io/repo/sn-p-io/0/
Notify URL: https://rpki.sn-p.io/rrdp/notification.xml
Certificate not before: Thu 30 Jan 2025 19:09:08 +0000
Certificate not after: Thu 29 Jan 2026 19:14:08 +0000
Subordinate resources: IP: 27.0.235.0/24
IP: 89.187.68.0/23
IP: 2a06:1282::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:b1:a0:df:b9:fa:54:3b:e9:64:fa:c0:f7:65:0e:83:99:cd:54:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=799438f1b1762aeef8a35cf4e6cbae97699bd020
Validity
Not Before: Jan 30 19:09:08 2025 GMT
Not After : Jan 29 19:14:08 2026 GMT
Subject: CN=3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:25:1a:29:f7:e3:66:1e:d2:e3:4e:a1:33:9a:
2b:3e:10:28:9b:06:5d:bc:dd:3f:bc:44:71:8e:66:
dc:b4:70:b4:11:cb:55:10:7a:17:3b:55:27:5b:4e:
14:a5:fb:15:74:18:97:12:70:c4:34:37:dc:d5:01:
ca:f2:61:40:ba:0f:e9:5b:d7:08:d0:b6:50:06:4f:
9c:f5:ff:b1:6e:45:c6:a8:e9:70:38:92:24:9d:59:
dd:30:fa:c9:66:dc:ec:d4:c6:60:30:4b:d3:42:c1:
b7:2d:f9:4b:69:ce:77:c3:8d:18:27:7c:98:da:a9:
18:a1:bf:0d:7b:73:a0:5e:86:18:d9:a4:ad:86:75:
2a:e2:2f:84:02:e2:32:f9:3d:4d:5a:26:7a:9c:1c:
f9:48:28:4a:3b:bd:cb:3f:73:c9:69:52:45:c3:da:
a9:24:9d:17:53:f3:5c:c2:c7:01:bf:9e:81:d2:10:
6a:27:d9:c7:71:86:7b:5a:40:4a:7a:91:bc:9a:88:
72:e7:4b:c1:e8:13:54:a8:d1:c3:bd:bc:83:0c:21:
34:1c:28:58:70:ca:cb:51:f3:51:08:4f:c9:bb:d1:
a9:f9:44:ad:86:6a:4d:e9:b8:3d:1e:64:23:4b:6d:
43:f8:18:72:30:2e:82:c5:4e:28:1a:34:19:3d:15:
a3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
3B:3E:1B:DC:ED:8C:B8:95:97:FE:92:EA:F7:5B:E2:DF:98:AF:84:A7
X509v3 Authority Key Identifier:
keyid:79:94:38:F1:B1:76:2A:EE:F8:A3:5C:F4:E6:CB:AE:97:69:9B:D0:20
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/
RPKI Manifest - URI:rsync://rpki.sn-p.io/repo/sn-p-io/0/3B3E1BDCED8CB89597FE92EAF75BE2DF98AF84A7.mft
RPKI Notify - URI:https://rpki.sn-p.io/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.0.235.0/24
89.187.68.0/23
IPv6:
2a06:1282::/32
Signature Algorithm: sha256WithRSAEncryption
73:84:f8:27:63:f6:f8:1c:b6:2b:40:de:52:d7:9a:56:16:6a:
74:d1:2d:a3:2a:ad:60:0d:6a:7d:d0:26:47:6e:93:98:46:a3:
55:dc:b7:1d:73:d6:34:25:5d:e8:73:03:f3:7a:ce:9d:cf:3b:
48:aa:33:cc:b0:64:dc:37:53:87:e3:fa:0a:aa:42:de:3d:fb:
b5:b4:ad:a2:22:b7:51:b8:47:44:4d:c8:96:dd:52:1f:52:a8:
4f:84:71:04:40:14:32:7c:84:84:1c:c0:7e:b4:e1:c7:94:93:
4c:12:55:97:ab:27:74:c8:dc:c8:e8:49:7f:dc:8c:c0:f6:1e:
29:08:cf:dd:bd:11:e6:ab:0a:08:e9:d9:01:9a:02:d3:59:f1:
76:5b:fa:f2:22:9f:25:2a:e1:03:f6:d1:66:e3:fe:1e:0f:c4:
72:69:e4:3c:dc:d8:50:47:31:86:e0:1b:9b:ee:ce:88:8f:e6:
00:e8:60:27:12:7c:91:88:b5:c7:4f:ca:2f:40:06:ad:92:a8:
c5:9a:19:d4:eb:e7:8a:37:65:b9:56:79:90:08:df:bc:a4:33:
27:2c:cd:68:76:9e:73:94:d6:a3:53:24:e1:a0:09:39:e4:f4:
ae:22:82:36:08:bc:71:1f:1f:42:59:45:d6:fe:16:27:34:fb:
84:46:c8:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 01:10:36 2025 by rpki-client