Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
File: C047O4QkIliGMULtOhl5LZfLvHQ.cer (raw, json)
Hash identifier: s1WeM4Ka3wT4kTzgPKf/H+8tAn5V5SRZZF3pJu6RTHQ=
Subject key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F4612CF75FE7F91A863E5324D36E7
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215443
IP: 2a0d:d940::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:46:12:cf:75:fe:7f:91:a8:63:e5:32:4d:36:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:da:1a:36:74:40:23:be:7b:78:20:a0:f1:d7:
e7:63:53:96:ba:cb:9c:98:16:4a:6c:be:02:4e:0f:
79:af:25:b4:9c:13:0f:3b:40:95:4e:63:41:55:09:
5b:f2:ce:cc:1e:49:83:c0:e6:62:e9:73:30:c0:91:
ed:37:bd:65:b0:72:23:05:53:b5:89:c5:65:09:89:
15:c9:ba:eb:81:4a:5e:36:0f:fc:f6:aa:af:63:4c:
59:20:1e:38:c5:20:69:10:4b:47:53:61:ba:33:68:
59:9d:c6:22:df:9a:0d:0a:be:35:56:3d:96:08:dc:
88:15:83:db:42:d3:fa:b3:41:25:33:99:d1:e6:82:
f4:05:e3:7a:76:31:65:14:ae:39:f5:0b:78:68:25:
a3:fe:34:dd:55:ab:cd:a5:71:0a:26:32:df:71:47:
46:54:8a:61:8c:21:ab:57:e3:c7:59:46:ec:7b:96:
52:cf:5c:02:72:b8:5a:2c:c6:78:0b:e7:de:30:0d:
96:ad:42:1c:cf:9f:6b:96:88:7f:9b:67:f1:f4:bb:
cd:0a:d1:39:70:40:2d:af:4b:4f:13:5b:82:69:cb:
59:dd:bd:2d:d4:4b:d1:fd:23:3a:8e:ab:7f:6c:e8:
a9:9d:cc:ca:7a:7d:21:4b:e6:d9:10:87:dd:1e:27:
b3:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215443
Signature Algorithm: sha256WithRSAEncryption
46:e6:14:63:15:a5:53:62:57:e4:19:9a:07:78:48:3f:a2:01:
e5:ce:3d:3e:25:7a:e9:f2:34:b3:71:1f:75:c0:54:57:00:c0:
b7:ed:13:6e:1e:f2:09:f8:bf:b1:10:0d:01:c7:21:72:f7:12:
de:13:58:ac:e7:3a:f7:78:2c:d0:a8:94:d4:76:51:9c:62:bc:
b6:82:b2:7b:c6:cb:c0:db:5d:d9:57:f7:bd:82:02:ba:38:a7:
34:b9:e2:29:17:c1:f0:ec:0a:69:ea:81:09:17:ea:4d:1c:ce:
43:7e:f3:70:4e:1d:aa:5c:58:24:46:62:17:f7:f7:0d:75:66:
b3:a7:63:09:68:f4:a7:0f:3c:84:b6:d1:2b:0b:49:57:d5:52:
a8:2e:ad:21:f6:84:59:ec:44:47:60:a5:54:d7:54:f4:e1:47:
af:a0:7a:83:b0:85:70:48:ef:67:9d:8d:f9:92:18:3a:0d:e9:
f2:a8:52:c2:4e:6b:7b:20:dd:57:2c:33:37:c5:00:f8:9b:13:
11:29:8d:49:f3:95:f9:20:80:1d:ae:0d:af:63:f4:02:d6:6a:
ce:27:0d:d9:52:96:51:1f:df:ba:49:02:8c:5b:5e:ba:0a:e7:
5c:50:c5:3f:46:aa:d3:c6:a7:ae:e6:e6:74:aa:ac:56:c9:01:
a7:e3:67:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 10:56:14 2025 by rpki-client