Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bDe4Qv1F-xmc7ju9eWSpi4TJoHg.cer
File: bDe4Qv1F-xmc7ju9eWSpi4TJoHg.cer (raw, json)
Hash identifier: 0XQLvNoIZ8XFeTWKvqgO95vb4TPWT+JQzNym/GmM7TE=
Subject key identifier: 6C:37:B8:42:FD:45:FB:19:9C:EE:3B:BD:79:64:A9:8B:84:C9:A0:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 9C37101962
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/09/801ecb-a78a-4305-af72-8e5f0f02efcd/1/bDe4Qv1F-xmc7ju9eWSpi4TJoHg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/09/801ecb-a78a-4305-af72-8e5f0f02efcd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 03:01:18 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: AS: 210197
IP: 193.38.32.0/22
IP: 2a0d:6540::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 670938700130 (0x9c37101962)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:01:18 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c37b842fd45fb199cee3bbd7964a98b84c9a078
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:58:30:78:d1:56:de:dc:1f:21:0d:7f:75:92:
d9:b6:88:33:48:42:aa:88:4f:7c:ee:ff:34:af:d8:
fa:63:c1:57:5b:3b:79:7f:14:ae:07:88:de:50:14:
e7:a0:e0:94:21:41:89:50:dd:01:88:ff:07:2a:28:
00:c8:30:5e:9c:87:95:59:ee:5a:87:22:6a:9f:85:
a3:36:fc:78:26:75:7f:2c:d3:04:97:1d:d3:8f:25:
8f:a8:71:a7:ee:77:23:4c:6c:71:8d:d5:d9:97:36:
8d:23:19:b0:17:5f:1a:37:b9:61:0f:d6:e6:96:c3:
20:3c:65:89:3c:4a:6a:ad:3a:a0:3e:b5:d2:49:3c:
f0:53:43:2a:ba:99:fc:eb:f0:c2:65:33:34:f6:83:
59:83:7e:0d:75:f3:21:b8:da:e0:87:db:20:3c:20:
4a:9b:71:a0:07:b2:af:bb:35:94:50:ca:21:cc:4d:
61:dc:57:a7:18:34:b5:57:c8:9a:0e:ca:0c:97:f3:
05:33:7f:0d:9b:1d:d4:df:02:0a:fa:f7:9f:ad:9f:
d3:10:2f:d0:ba:43:01:87:ce:ec:4c:a3:ef:d4:f3:
87:1f:53:62:82:05:10:c4:a7:45:12:96:c1:25:29:
91:3e:15:43:08:4b:15:29:95:55:78:0d:5b:90:b9:
3b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:37:B8:42:FD:45:FB:19:9C:EE:3B:BD:79:64:A9:8B:84:C9:A0:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/801ecb-a78a-4305-af72-8e5f0f02efcd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/801ecb-a78a-4305-af72-8e5f0f02efcd/1/bDe4Qv1F-xmc7ju9eWSpi4TJoHg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.38.32.0/22
IPv6:
2a0d:6540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210197
Signature Algorithm: sha256WithRSAEncryption
56:8a:24:c3:57:03:d3:f7:6f:17:ed:75:21:ed:0c:e1:61:46:
e2:09:0b:77:24:c4:05:15:f6:0a:bd:8d:68:c1:a1:48:96:73:
e3:9b:96:55:d2:15:e4:f6:2a:8b:df:98:2f:c8:67:57:97:0f:
df:a5:bd:3c:e3:97:d8:b9:67:2a:10:1f:ba:83:45:96:7a:b9:
0e:d4:56:ae:8d:b1:08:d8:e0:61:e8:da:1f:4c:6e:32:ab:21:
55:73:e7:c6:0c:e2:cc:8f:35:a1:e9:8a:ce:b3:6f:f6:ca:c0:
23:a0:82:1b:23:80:54:44:9e:4f:de:1b:44:68:52:f0:ae:16:
99:9c:ac:b7:3a:ce:ef:09:e5:c4:3e:8a:a8:ae:73:2f:21:a2:
ca:6a:2f:ee:d6:93:4b:0c:e8:0b:dd:6e:ca:65:a2:b2:18:2b:
3c:9d:2c:09:e4:b8:7b:7f:fa:59:d7:bc:9f:37:a3:e4:96:66:
71:ef:d4:68:da:a3:ed:50:5d:cc:45:53:d7:27:40:d9:62:7b:
f9:dc:3d:a3:0f:39:e6:c3:2f:49:e4:58:b8:7a:c1:13:86:a2:
5c:54:c4:34:f8:c1:5e:a2:2b:28:60:cd:e1:a3:1c:81:1a:7e:
35:4a:5e:fe:0a:b6:10:56:54:50:55:6c:a3:84:a8:22:bc:da:
96:a9:82:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:43:20 2025 by rpki-client