Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/csoaXP9S6-LyK2adzCyQJ86guBw.cer
File: csoaXP9S6-LyK2adzCyQJ86guBw.cer (raw, json)
Hash identifier: FOuErAgxI9mqa43rwQjxQINligCprHp1OkT7zdJ5WU0=
Subject key identifier: 72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB64E6DCC3108E7E91ACCF7CDCC0EE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 35120
IP: 45.8.8.0/22
IP: 2a0e:3600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:64:e6:dc:c3:10:8e:7e:91:ac:cf:7c:dc:c0:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72ca1a5cff52ebe2f22b669dcc2c9027cea0b81c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:40:dd:39:c3:46:da:2b:11:9a:46:f0:dd:c3:
5d:a9:74:2a:8b:1c:6a:22:b5:f2:6b:89:d5:54:8b:
0c:14:63:98:5f:e2:71:97:a3:f4:b6:55:95:a5:91:
46:4b:37:8d:a4:ce:c4:f8:24:1d:12:ad:d4:4c:b5:
10:23:03:c6:2b:f2:54:c6:1f:cf:3a:0a:2c:b6:0b:
ef:f0:8d:a8:dc:50:67:ba:fd:e3:17:f4:2b:3d:5a:
19:c5:a7:19:3c:9e:37:7e:bb:be:39:34:8d:83:af:
38:56:43:ef:e1:02:6e:dd:2f:db:3f:dc:50:c3:00:
1e:74:06:68:bf:63:0f:0e:43:1b:54:5f:85:10:21:
7e:6d:db:17:78:28:47:a9:8e:b2:6f:f2:c3:3c:43:
2c:55:51:1d:02:fb:20:24:da:75:05:1c:ef:d9:98:
73:9e:9c:99:6d:06:93:16:b2:5b:d4:9f:7c:32:20:
d3:2e:f1:af:e1:79:c5:80:fc:2c:ba:10:52:7a:67:
16:03:17:63:df:d7:1a:c6:54:67:52:09:62:a9:46:
2e:0a:0d:37:42:e8:ae:dc:24:92:eb:c9:ca:d9:50:
da:d0:fe:72:f7:30:4f:c0:d1:f2:3d:35:a2:32:ba:
19:2a:60:47:c6:67:fd:e8:3a:31:9b:40:b5:0a:87:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:CA:1A:5C:FF:52:EB:E2:F2:2B:66:9D:CC:2C:90:27:CE:A0:B8:1C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/12ac0e-5474-45d5-8def-6a414f184706/1/csoaXP9S6-LyK2adzCyQJ86guBw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.8.0/22
IPv6:
2a0e:3600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
35120
Signature Algorithm: sha256WithRSAEncryption
8a:4e:85:9a:ea:94:20:4e:3c:96:06:0e:c1:00:3c:dc:9a:a0:
ff:d0:6d:0d:78:dc:12:a4:7c:b1:3a:fc:90:ec:2b:bc:42:6c:
f3:86:2f:36:62:de:e3:ac:a3:35:d9:23:fc:1a:21:7e:f6:85:
4c:be:12:26:c6:07:6e:73:4f:3e:d3:01:78:75:9a:28:1f:72:
84:31:68:f4:dc:a1:d6:f9:72:a3:d4:e7:e3:c2:46:b8:34:94:
51:3c:6f:8a:04:59:9b:61:3e:27:7e:5f:d8:22:d0:9b:00:a2:
ff:a1:b9:b8:b6:2c:e9:93:4c:2a:9d:8c:e5:a9:51:b4:1d:52:
e8:67:9e:c4:b5:5a:2f:52:1f:c2:ec:93:fe:a2:ed:1e:79:cd:
5c:8f:ea:07:d0:14:ed:c4:ca:6f:ec:eb:38:33:78:19:24:38:
41:f3:d3:d6:ee:8c:f6:fa:0e:2c:aa:43:4b:4e:58:76:75:5f:
67:96:5b:52:1f:d3:db:38:d4:35:d1:2d:ad:bb:44:31:9d:93:
48:8f:a0:d2:98:d3:8c:4e:ef:6c:b4:c7:5d:58:33:48:9f:fb:
aa:88:3d:0d:aa:a8:df:7d:56:48:00:09:62:05:e8:1b:81:78:
e6:33:2d:6c:6a:84:b9:e5:ff:57:28:46:7c:84:cb:d4:ea:cd:
27:fe:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 10 09:49:24 2025 by rpki-client