Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/h4QtoWniuKIEucTx9fPCIHZkDWo.cer
File: h4QtoWniuKIEucTx9fPCIHZkDWo.cer (raw, json)
Hash identifier: zWp5Wpx54MD+cdugL8NeaalS++bJCvXEgxGDUYQCBKg=
Subject key identifier: 87:84:2D:A1:69:E2:B8:A2:04:B9:C4:F1:F5:F3:C2:20:76:64:0D:6A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01918ECDAA0BBD54846B41CA7CEA8BFE8341
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2d/a0919d-a019-419e-acc2-4c84abefc09c/1/h4QtoWniuKIEucTx9fPCIHZkDWo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2d/a0919d-a019-419e-acc2-4c84abefc09c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 26 Aug 2024 13:08:48 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 209445
IP: 139.28.180.0/22
IP: 2a09:a40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:8e:cd:aa:0b:bd:54:84:6b:41:ca:7c:ea:8b:fe:83:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Aug 26 13:08:48 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=87842da169e2b8a204b9c4f1f5f3c22076640d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:07:7d:03:4b:45:5c:54:ca:e1:5b:3f:e1:d9:
ef:ec:53:27:4e:92:7b:2c:59:88:ff:77:36:3c:9f:
64:65:13:c0:e6:9f:a7:15:96:2d:51:d1:69:27:9d:
a8:cb:24:13:2e:ce:f0:92:6b:59:04:fe:33:4f:56:
85:61:d1:2c:b6:8d:57:75:6b:8e:8d:0b:c9:e3:0a:
01:06:bd:8e:bd:49:5c:dc:38:7f:38:4a:7d:55:19:
43:4c:14:6e:1f:ff:2b:93:90:75:64:76:9d:3d:00:
14:ce:df:5f:2c:ec:08:e0:e1:2d:bc:49:dc:c1:55:
a7:85:9e:71:cf:1d:f9:26:68:f3:70:ae:3a:4b:9f:
03:25:38:8b:dc:f8:30:c7:49:25:83:cd:c2:82:2b:
96:62:5f:96:c5:00:9c:b5:59:af:6e:cb:fc:62:77:
17:5d:d1:25:30:5e:32:56:6b:de:02:4c:b9:f5:ef:
c9:d4:98:f1:18:60:be:74:27:53:c3:88:a0:53:d5:
3e:ac:27:c9:95:62:a4:20:a3:5c:68:ea:af:f3:12:
1b:a0:d9:0c:37:eb:eb:13:80:50:e5:66:7e:00:14:
a1:13:49:77:29:bf:70:b5:5b:bd:a6:44:81:01:74:
fe:05:d7:8c:1e:a7:b7:eb:f9:59:fd:e2:5f:d7:ca:
0e:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:84:2D:A1:69:E2:B8:A2:04:B9:C4:F1:F5:F3:C2:20:76:64:0D:6A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a0919d-a019-419e-acc2-4c84abefc09c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/a0919d-a019-419e-acc2-4c84abefc09c/1/h4QtoWniuKIEucTx9fPCIHZkDWo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.28.180.0/22
IPv6:
2a09:a40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209445
Signature Algorithm: sha256WithRSAEncryption
a8:0c:97:b8:cc:ed:c3:51:e2:bd:71:f2:85:97:85:c6:75:4f:
36:65:70:ef:6e:10:88:82:1e:3e:d9:86:8e:1c:f8:94:50:b9:
8d:68:f7:3a:d6:e9:81:c7:f9:77:e9:b6:5a:07:92:8e:25:70:
89:9b:2b:44:5c:29:5c:d1:81:97:73:e8:ed:24:e3:72:00:31:
53:ec:af:0e:41:e6:ed:cb:f6:29:70:c2:d8:f5:9a:c6:ab:b7:
2d:df:f0:30:f4:60:df:71:35:41:b0:bd:3a:af:6d:06:e6:d7:
77:fd:4b:7d:ed:89:2b:05:99:88:4a:4a:63:ff:f7:c8:5a:5b:
0d:fc:b2:e1:26:b8:2c:bd:01:53:6d:bc:92:02:bf:c7:76:23:
99:78:6d:12:14:c4:7e:d6:d2:6c:67:f4:88:37:80:11:f9:f1:
78:b4:9b:a2:88:59:49:da:c5:75:88:a0:4e:68:5b:32:b6:da:
ef:b4:b2:6a:dc:f9:c9:a3:85:61:a8:9d:c6:85:95:d1:f6:d1:
d8:7a:bc:10:db:5b:c3:f6:b1:96:b7:9b:af:c3:d0:42:20:5d:
3a:59:6d:b8:a3:30:9f:46:9b:c1:1e:35:46:06:c7:56:4c:d6:
dc:f4:64:83:cd:b9:09:90:8d:29:8d:c3:38:d5:31:fd:18:fc:
50:51:65:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:40:16 2025 by rpki-client