Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer
File: YDsxvG5_QvYwOHDwI0tA3vcfoD0.cer (raw, json)
Hash identifier: rjrpC4hIc9l3TjpIFQqmP2e8W0nrCkyjehMMyMvWaW4=
Subject key identifier: 60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3A1C562DA8B160B210413A4583137
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:59 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 215123
IP: 2a14:37c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:a1:c5:62:da:8b:16:0b:21:04:13:a4:58:31:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:59 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=603b31bc6e7f42f6303870f0234b40def71fa03d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:3d:31:38:eb:87:11:d7:e3:0e:43:26:da:
d8:b6:a4:35:58:2a:51:29:51:6f:ad:4d:76:97:ad:
8f:76:32:0b:15:2c:71:86:1a:ad:2a:0f:f3:a5:f9:
ce:a1:36:57:db:60:d1:8e:c5:58:cb:68:92:25:3d:
f4:37:6f:5d:69:c0:4d:50:6d:29:cd:a5:06:d7:b8:
41:0b:84:31:bf:69:61:c9:87:47:29:23:42:a4:7d:
02:1a:be:22:e3:5e:7b:2c:ed:b6:25:c5:c4:45:1a:
c3:99:a5:99:4e:d6:77:91:5d:ec:37:24:17:f0:08:
11:34:14:1e:6a:63:3a:54:aa:b3:dd:74:a8:39:07:
a9:b6:29:bb:f3:c4:d1:61:74:3b:61:90:42:f2:62:
98:cb:a4:63:29:77:0a:1a:c3:3b:69:35:cd:6e:05:
d1:2a:8a:a4:d2:9e:60:62:33:c4:07:95:71:ce:ae:
f0:75:ef:43:67:51:a9:f1:b0:92:44:82:02:83:b4:
38:fc:84:ef:9d:bc:01:4c:38:df:3f:eb:aa:b2:ed:
71:8b:a6:a4:ba:78:77:78:aa:9b:e6:c2:e9:bd:e9:
1f:4d:b3:f9:76:c1:6a:09:d7:e4:e9:ea:e3:87:4b:
f4:39:63:37:ca:cf:d2:56:70:12:4d:3f:f6:7c:a6:
93:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:3B:31:BC:6E:7F:42:F6:30:38:70:F0:23:4B:40:DE:F7:1F:A0:3D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/0f2266-b4f1-48fc-b293-67932656e594/1/YDsxvG5_QvYwOHDwI0tA3vcfoD0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:37c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
215123
Signature Algorithm: sha256WithRSAEncryption
4c:c0:3b:c7:78:e8:de:ca:ef:d1:f1:94:ab:91:40:70:ed:49:
0f:98:68:21:6b:28:1e:a0:9a:ba:de:ab:84:1f:ad:b2:9e:f0:
67:52:07:03:c3:9c:41:4d:4f:92:5e:46:c4:65:c5:ed:9c:1d:
f1:e9:eb:4c:93:a2:42:2a:7b:f3:d7:41:2b:99:8b:26:37:4f:
18:29:64:bf:94:71:89:1c:e3:6a:ff:5e:48:ea:5b:82:66:f3:
08:7f:74:ad:3c:1e:b6:ec:9a:9d:5d:cc:2e:9f:51:bd:bb:38:
97:9b:d9:91:b0:27:b1:08:96:fe:63:11:3b:ae:7c:b4:3e:99:
f8:72:62:c3:83:c3:70:20:4c:56:49:af:2e:e3:3d:d2:16:b2:
af:85:e7:be:6b:73:4e:7a:80:b5:f6:e8:ce:01:04:61:2c:2e:
6c:ce:a1:79:52:5d:b1:a3:ac:4f:a6:dc:19:88:b4:38:27:fa:
11:67:6e:e3:7b:7f:df:21:85:a0:7f:a1:82:09:d6:2c:ae:28:
63:9a:2b:40:e4:76:5f:92:9a:67:20:17:b1:20:a7:d3:a6:06:
8e:07:40:2e:08:86:e9:8e:58:96:6d:e3:f0:87:10:f8:6e:e3:
fc:d6:fa:53:07:14:01:86:d7:ac:54:e7:73:d5:49:08:20:b1:
b0:fe:38:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 15:02:17 2025 by rpki-client