Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A4r4Z5VBejWE1hY3UgmnLv7iRis.cer
File: A4r4Z5VBejWE1hY3UgmnLv7iRis.cer (raw, json)
Hash identifier: gdLG8Jlzl4D9hRjGZlDg1fKhfjTSTYNCKsA53GE9Bcg=
Subject key identifier: 03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942826624394D27061FADFAF892E7DAF39
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:53:11 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51113
IP: 91.142.128.0/24
IP: 2001:67c:1c4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:62:43:94:d2:70:61:fa:df:af:89:2e:7d:af:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:53:11 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=038af86795417a3584d616375209a72efee2462b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:75:a2:e8:82:de:ac:d7:7a:df:6d:3a:8e:d7:
66:cb:5d:bd:77:26:31:95:16:88:45:2f:07:ac:19:
8b:c8:07:d3:cc:b0:91:6f:98:54:c2:24:2d:a7:03:
b2:42:67:2b:5a:de:86:a4:94:e8:ab:07:e9:03:63:
8b:55:b5:72:aa:bf:27:00:0a:4c:a5:ac:06:01:1b:
6d:92:79:0f:f6:52:20:5a:51:05:fc:0c:f4:8f:c3:
3f:01:30:6a:65:6a:d5:e8:c2:3d:b0:ca:2d:87:e8:
30:ef:6a:fe:e7:00:69:e6:fa:85:f3:90:3d:f7:21:
d2:bc:05:7f:d2:c7:92:e6:3d:71:20:d4:54:1b:74:
8e:bb:c1:11:da:d0:d0:d9:58:37:a7:97:04:7c:8b:
9a:fc:59:c3:fb:19:73:72:e3:98:1d:84:f2:d6:93:
d3:0f:dc:eb:89:b7:e7:1c:fa:34:47:9b:87:b4:f4:
b0:d7:18:71:01:53:55:d1:e7:e9:b2:e9:1d:eb:cf:
18:64:10:49:72:b9:68:26:cf:84:aa:50:95:10:c1:
28:12:e6:0d:ef:01:e6:fd:c0:8f:7d:20:b8:3c:ed:
39:36:cd:46:ea:4e:6c:f4:bc:66:e2:19:43:de:d4:
1a:5b:74:87:85:d7:46:4a:f9:e0:cb:ef:57:79:b9:
9f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:8A:F8:67:95:41:7A:35:84:D6:16:37:52:09:A7:2E:FE:E2:46:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/57e419-42f4-4d8c-b6b4-431f27a62ed8/1/A4r4Z5VBejWE1hY3UgmnLv7iRis.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.142.128.0/24
IPv6:
2001:67c:1c4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51113
Signature Algorithm: sha256WithRSAEncryption
6e:30:ad:c8:9d:5c:4b:03:08:3f:c4:0c:d7:44:4b:f1:a2:e9:
e0:e8:fb:64:d8:da:0c:06:09:93:db:bd:99:5c:2e:a6:2b:a3:
d7:eb:bc:a6:ea:88:34:11:3a:3b:f2:42:f7:25:50:2a:8d:a9:
81:5c:1b:5e:ca:d7:1f:c4:15:f1:44:cc:68:3c:61:55:1f:1d:
d6:10:96:cf:df:3a:9d:a9:60:61:00:ec:5a:fe:ae:8d:7c:23:
3b:40:6d:3a:9e:be:70:2e:de:52:21:ed:69:2b:24:1f:a7:c9:
1d:fc:3a:cf:21:a2:a4:7e:ae:c6:fc:1d:63:ec:f3:b4:6f:6b:
9a:3a:f4:ed:2c:24:43:cc:2e:d7:33:68:3e:f5:c5:5f:21:9f:
db:28:df:ee:21:1d:3c:35:b8:89:b5:72:1f:65:89:39:2f:75:
97:7b:e4:51:2d:7d:c6:89:6a:e6:da:1a:07:a9:f8:fa:0e:71:
c7:27:ca:dd:99:bc:a4:6b:28:ee:fb:ee:d2:07:55:44:99:3a:
6b:c0:f2:4f:8a:29:bd:9f:e0:40:0d:a9:c2:6d:2e:e6:2f:65:
03:cd:39:9d:b7:fb:c1:81:c8:a8:90:9d:7c:98:c4:9a:77:e0:
b1:0b:0d:ce:57:8b:7e:d6:d7:e2:95:fb:89:b1:47:73:57:24:
99:57:62:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 16:09:33 2025 by rpki-client