Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bJK0Bom5KBVuyjR34k_0_DIK_-Y.cer
File: bJK0Bom5KBVuyjR34k_0_DIK_-Y.cer (raw, json)
Hash identifier: 5KIDOHDLrdXv5pLk4kn6Ks6Mc5SOreI7XMISFvMI10w=
Subject key identifier: 6C:92:B4:06:89:B9:28:15:6E:CA:34:77:E2:4F:F4:FC:32:0A:FF:E6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: A45F555743
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/00bfe0-c745-47b7-b41b-cad78db5a9fd/1/bJK0Bom5KBVuyjR34k_0_DIK_-Y.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/00bfe0-c745-47b7-b41b-cad78db5a9fd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Sat 01 Jan 2022 10:04:16 +0000
Certificate not after: Sat 01 Jul 2023 00:00:00 +0000
Subordinate resources: IP: 193.163.72.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 705974064963 (0xa45f555743)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:04:16 2022 GMT
Not After : Jul 1 00:00:00 2023 GMT
Subject: CN=6c92b40689b928156eca3477e24ff4fc320affe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e6:45:88:53:37:25:89:2f:3c:82:1a:ce:f0:
a8:52:3f:72:01:40:3b:85:ba:8a:09:bb:d3:c8:65:
af:8c:e9:8d:22:aa:c4:56:e7:f7:57:8d:34:3d:f5:
eb:35:c7:9d:f5:e8:e8:5c:b4:b6:38:f6:3c:52:5c:
41:c3:7f:0c:e4:f0:6c:ea:47:04:69:0a:9a:70:29:
73:ea:40:35:0e:6b:cf:33:7d:ad:3b:6b:12:f5:2f:
b0:b5:e3:ae:47:d4:0f:87:53:fb:63:a4:d6:08:90:
3e:52:a5:1a:f9:56:a3:75:f6:46:94:b7:2b:c5:f1:
49:3c:37:32:14:b1:45:8d:bd:cb:75:94:90:2e:aa:
a4:ce:2a:b3:14:5d:2f:c4:a6:44:d3:51:ae:e3:6b:
fb:5c:8a:d5:08:b3:5f:c0:46:0b:74:c6:ae:b2:c4:
a2:e4:f9:02:77:dc:5f:2f:4e:a3:ca:07:ca:b8:c4:
c9:04:12:bc:b2:ea:b4:d6:fc:a5:74:1e:75:fc:c6:
8d:75:cb:7f:e8:4c:ec:d1:1a:ed:c4:c6:e7:8a:12:
bb:7a:38:31:df:8a:02:eb:7f:c3:e6:34:f2:18:f0:
39:34:28:2e:06:c4:57:5f:19:45:b0:c7:0a:5d:09:
eb:db:d6:e9:ce:fd:2a:90:9f:bc:bb:0b:5d:95:2d:
e6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:92:B4:06:89:B9:28:15:6E:CA:34:77:E2:4F:F4:FC:32:0A:FF:E6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/00bfe0-c745-47b7-b41b-cad78db5a9fd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/00bfe0-c745-47b7-b41b-cad78db5a9fd/1/bJK0Bom5KBVuyjR34k_0_DIK_-Y.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.163.72.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:33:79:d8:28:0b:b0:a8:ea:9c:94:1b:a4:43:07:93:d5:c3:
1e:aa:59:a4:54:2c:1f:b6:d0:a6:54:66:d0:d3:9f:df:44:42:
7f:5f:24:54:b6:0d:97:92:e8:60:87:1c:37:68:3c:3f:79:28:
fb:9d:06:0d:f6:e8:2d:62:a6:39:b5:5d:f4:28:30:8d:40:63:
c8:f9:b4:74:28:8d:be:67:2e:ad:88:25:74:65:85:4c:ed:c6:
0a:6b:c6:21:9b:be:0b:48:73:47:21:64:3d:b2:c6:8a:57:b4:
b1:f5:4c:bc:72:76:9c:6c:a0:44:f0:b9:67:fe:4a:96:ce:0a:
36:7e:2c:cb:fa:52:b3:53:15:f5:07:53:5f:f3:f8:88:dd:e4:
3c:1b:08:0a:c7:3c:c3:38:07:93:db:ed:a1:ac:51:85:a5:11:
d0:e3:07:87:90:a9:a2:a3:84:72:9e:de:af:96:64:15:e3:bd:
64:33:39:c6:7b:75:cf:ed:97:38:8a:65:42:e8:67:01:a3:a6:
af:ce:81:f8:44:84:28:a3:c3:96:a5:73:53:c1:dc:da:0b:01:
e3:34:50:ed:c7:84:00:c0:b7:0a:30:08:25:c1:25:3b:68:cd:
cd:52:4d:88:44:07:9b:1c:04:7d:d0:89:15:e9:28:ed:c8:53:
40:fb:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:56:36 2025 by rpki-client