Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
File: VI91elbRdoDW1mkLGdnzkGGYADM.cer (raw, json)
Hash identifier: jETj8eeOsv+hN+yZxqDdqju5hr/TMAFWJVTl+VMv+vo=
Subject key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D6C0C682A5BFC6E1192C7363E8FA7C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:47:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207557
IP: 91.234.196.0/23
IP: 194.9.188.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d6:c0:c6:82:a5:bf:c6:e1:19:2c:73:63:e8:fa:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:47:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=548f757a56d17680d6d6690b19d9f39061980033
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:db:fe:aa:c5:f0:2c:03:ed:ac:04:5c:23:
7c:49:27:70:54:cc:02:92:8b:cf:8d:cf:c5:7a:03:
40:bb:26:6f:e3:bc:b8:7e:13:aa:d9:56:6a:a4:aa:
21:9e:9e:ee:f4:26:9d:dd:48:58:2e:39:50:27:b8:
b6:01:fd:1e:ed:f8:94:02:fd:70:2c:9b:06:80:a0:
0a:5a:e1:88:82:7c:cb:d4:8e:78:82:51:2b:32:f1:
c9:1f:fe:19:ec:3d:8a:91:a3:e9:47:dc:55:27:bd:
34:6f:75:85:2a:63:25:1a:94:97:69:36:01:68:5a:
76:8e:9a:94:75:61:9f:f7:bd:3a:ee:61:60:70:38:
4f:50:a5:d1:c5:7a:61:e8:e5:48:70:55:f3:cf:2d:
11:21:e2:1c:f6:bf:87:ba:32:0f:ee:4e:30:52:b9:
c0:e8:a3:d9:74:b6:c9:00:00:b5:38:34:90:cf:55:
35:9f:be:8b:d7:f7:2d:e0:a5:fc:34:ab:8c:db:69:
a4:c8:be:f6:c7:68:d0:26:3c:8c:0b:37:b6:6f:a1:
5b:6c:b5:27:0d:2a:a4:c9:b7:34:b0:bb:0b:59:10:
e2:d2:42:ef:7f:23:86:0a:12:b5:6d:e6:dd:87:fb:
a6:f1:dd:7d:cc:28:53:36:00:1b:f0:42:f3:ff:fa:
a5:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.234.196.0/23
194.9.188.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207557
Signature Algorithm: sha256WithRSAEncryption
99:15:cd:29:f4:6f:db:1c:bc:6d:19:52:d0:e2:8f:10:1e:0d:
7d:94:94:93:a2:c3:e8:c9:23:c9:84:54:dc:7b:bd:b4:b7:d1:
99:60:ef:2f:34:e5:32:77:4a:af:7d:f8:a6:d4:13:e4:49:d5:
27:01:e0:df:67:a7:6f:10:1e:0d:15:1d:07:dc:81:bd:b4:61:
35:3c:cf:04:d2:d9:a1:01:0c:2f:37:ea:99:bd:cd:82:27:30:
26:d3:ba:b2:0a:40:d7:fb:ea:49:ee:30:e9:25:97:cb:99:66:
39:db:eb:e3:3d:ba:29:5c:56:5f:ff:03:1a:b9:87:b5:f6:66:
35:56:ce:dc:50:e8:ed:af:57:b0:76:7f:6a:03:ba:5b:4a:d5:
30:57:f2:76:c4:10:78:28:b6:e7:93:a2:0c:5f:7a:12:87:b5:
58:fa:90:33:48:d4:78:b3:47:40:06:37:9b:6f:81:9a:5e:89:
44:a3:0e:5b:1a:9b:02:7b:cb:e4:2f:b7:7c:0f:0f:59:c3:26:
fb:21:6d:57:ae:b3:d2:41:bd:9e:b4:2c:d8:8d:ca:01:02:74:
e1:d2:3b:6a:78:d6:1e:cb:05:8b:1d:62:6f:b9:28:de:8d:df:
04:4d:42:4a:f1:82:b9:78:d3:17:c0:6d:6b:1a:6a:74:28:ce:
41:d0:a2:0f
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Wed Apr 9 02:27:21 2025 by rpki-client