Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/A_P-YHUIK-jliDKbQ9dhv257AdA.cer
File: A_P-YHUIK-jliDKbQ9dhv257AdA.cer (raw, json)
Hash identifier: 2X1k+NP3rj61sk3hEByYQhKwKxtyZnWhWNjDZG81dwg=
Subject key identifier: 03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FDE20E3C5FD555873F94342C54E62
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:21 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209823
IP: 195.24.245.0/24
IP: 2a12:5540::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:de:20:e3:c5:fd:55:58:73:f9:43:42:c5:4e:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:21 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=03f3fe6075082be8e588329b43d761bf6e7b01d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0c:80:27:29:3e:b8:b1:bd:c7:d8:9d:1b:cf:
ef:c6:fb:0f:10:21:83:49:67:db:01:ea:8d:b9:5e:
27:bc:30:f0:17:54:27:80:0f:6e:03:26:0f:36:c3:
07:3d:1f:f1:65:af:97:d3:e1:67:09:2e:24:e3:a9:
ac:e1:07:10:d5:b3:05:f3:77:4e:51:e8:b3:22:aa:
f4:9b:61:e1:eb:80:a1:86:51:18:c1:78:aa:f3:71:
95:a8:b5:b4:88:f2:09:77:d8:1d:21:2f:e5:21:d0:
a5:18:86:37:58:ae:63:c9:f3:36:5d:eb:43:4c:06:
93:ff:fe:b3:88:0f:cb:2d:b8:e9:a8:d1:e0:6a:17:
26:8c:8e:a0:b9:e7:f5:70:09:db:70:51:49:98:db:
1e:61:3e:e2:3f:32:9c:3f:a0:7f:f2:f2:75:5b:37:
d5:60:be:21:ce:c8:8b:d1:2d:34:19:64:c6:2b:1c:
63:aa:36:3f:5b:29:6e:5a:5c:77:d7:e6:64:e4:03:
69:b2:46:fc:a7:27:65:e2:33:d9:3c:39:d1:3b:5a:
6a:e0:ea:dd:ee:8b:85:d5:1c:98:1c:f3:aa:c5:da:
c3:8b:9d:cc:28:fc:80:93:36:5e:cc:bb:1d:f3:b9:
22:85:22:8c:58:73:54:e8:43:f1:ef:50:50:bd:f9:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:F3:FE:60:75:08:2B:E8:E5:88:32:9B:43:D7:61:BF:6E:7B:01:D0
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/8bf7ea-883a-4c43-946c-82dafe104bc5/1/A_P-YHUIK-jliDKbQ9dhv257AdA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.24.245.0/24
IPv6:
2a12:5540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209823
Signature Algorithm: sha256WithRSAEncryption
95:f4:3d:6a:77:ac:76:30:ca:1e:8c:14:93:f0:bd:8e:70:90:
51:bd:5e:82:7b:b4:9f:38:cd:00:0c:e1:2e:91:5f:57:e8:b6:
12:f8:ad:91:eb:a4:e5:55:27:15:80:b5:d9:b0:b8:37:a0:24:
2f:6f:50:9f:e8:81:bd:1c:54:90:2f:14:90:09:fb:10:8c:11:
ce:6f:0c:90:46:85:ef:cd:03:54:f4:96:45:40:ae:be:36:7f:
ab:3d:c0:83:05:9a:6c:89:6f:2a:4c:66:07:b8:0d:b7:bf:ce:
d9:99:e5:9f:48:48:e9:d0:7c:eb:51:c3:f9:28:43:82:07:38:
5c:4f:45:cf:fb:40:83:a4:99:0a:d4:9e:8d:6b:c5:1e:34:9f:
eb:6f:50:20:a1:c1:98:d7:c2:55:3e:7b:87:f8:d4:ce:6e:75:
7a:5c:a8:29:a0:f7:69:db:28:6d:4d:7e:41:bf:a4:8e:3c:74:
20:5d:4d:21:e8:83:d2:23:af:c6:d7:0b:d9:0a:29:f0:1f:58:
13:63:75:9a:44:2d:5c:76:09:a4:8a:7f:a9:98:e9:1f:5b:39:
d5:cc:c9:ad:4c:40:98:66:20:e0:5d:d8:55:b9:00:d7:24:1e:
5b:f8:4a:d1:47:47:69:3c:26:20:ac:ed:f8:68:fc:1e:45:2b:
ae:74:0c:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:26:17 2025 by rpki-client