Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer
File: j9Jq1vkbpEcoFLrkhKjfH2NMM0E.cer (raw, json)
Hash identifier: 5hE9wk5JM9l9fz5+W0jeMfbyhUI3+vHe2wRAXx1fshM=
Subject key identifier: 8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D6365E5795963DABDE38E4C8753E77
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 200019
IP: 176.123.0.0 -- 176.123.11.255
IP: 2001:678:6d4::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:36:5e:57:95:96:3d:ab:de:38:e4:c8:75:3e:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8fd26ad6f91ba4472814bae484a8df1f634c3341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:15:8f:d5:f7:58:d3:ea:80:27:46:ad:ad:86:
6b:77:c3:a3:2e:72:b1:65:2d:17:10:b6:18:cb:ac:
e1:81:05:e9:01:51:3c:c1:66:73:e1:be:50:b4:8a:
bb:7e:c5:5e:30:e1:a8:8c:44:d0:c6:32:ff:bf:99:
bd:1e:45:a2:92:f6:96:d8:da:6e:46:0d:8b:d9:d7:
7c:90:c5:b7:f3:f7:d9:df:27:d4:05:36:ac:75:b1:
d7:9a:8f:af:02:55:a0:a9:e3:ee:76:59:e2:f3:eb:
37:0e:a6:d3:ef:7a:f7:77:4c:c3:88:96:2a:55:7a:
f4:c6:38:80:cf:06:69:4c:a4:1f:cd:bd:57:52:a1:
97:04:ec:8a:28:31:6b:3e:5c:07:24:c5:ca:35:af:
6d:3b:bd:a3:02:dc:b0:b0:73:36:ab:2d:6a:ed:1f:
3b:34:9a:ab:23:c7:fd:42:24:40:3b:53:51:ab:8f:
83:2c:38:b7:4c:ac:d9:f6:1a:a6:86:ea:ad:bc:c1:
8b:06:63:d4:5c:31:71:d8:50:52:a2:a8:79:76:d6:
04:55:15:5c:11:00:37:89:ab:64:d2:57:d5:73:44:
23:2c:a5:56:fc:6e:69:28:34:f8:ab:28:19:3f:ae:
a7:4a:5c:f7:73:b9:4b:54:cf:2f:de:8e:1b:23:7a:
b2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D2:6A:D6:F9:1B:A4:47:28:14:BA:E4:84:A8:DF:1F:63:4C:33:41
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/cdad8f-b919-45d1-af18-63742d19a012/1/j9Jq1vkbpEcoFLrkhKjfH2NMM0E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.123.0.0-176.123.11.255
IPv6:
2001:678:6d4::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
200019
Signature Algorithm: sha256WithRSAEncryption
5f:28:c6:24:7d:e7:52:cf:85:4b:b8:da:b3:71:87:04:a2:81:
bc:30:66:ea:19:35:28:5a:7d:b3:7a:34:13:00:a8:50:70:2d:
90:8b:97:b6:e1:1d:a7:c6:20:66:a3:c4:f9:52:fd:58:06:4a:
fb:48:6c:b6:34:47:aa:78:9b:47:cd:53:70:f5:40:e3:68:44:
69:52:7a:09:e7:74:24:e0:27:e9:f5:f7:52:41:9c:50:9c:7f:
39:e3:8f:a9:e8:66:dc:50:2e:15:5c:2e:8c:db:87:3a:43:a7:
96:94:4b:a1:d6:b9:8b:ef:24:c2:b3:ce:98:cf:d2:65:6b:d7:
28:dd:3e:e0:43:4f:d7:9b:95:ab:43:4d:9b:d0:3e:a9:eb:e2:
fc:ba:b6:52:75:69:17:46:c0:9f:12:07:55:bb:f0:dd:34:98:
e4:75:dc:9f:79:4d:bd:76:c6:e2:7f:dc:85:21:de:73:cf:9d:
7f:92:36:3d:78:4d:bd:49:3a:c9:29:9b:63:e3:07:82:f5:3e:
ba:95:6c:0c:90:77:04:a9:94:10:6e:d1:4c:fd:af:e3:59:36:
ce:49:c6:31:4a:f7:e3:b4:65:d3:db:9e:77:46:3f:94:8f:3d:
f8:4d:a9:9c:6f:f6:1e:02:6e:18:a6:ef:87:db:19:a5:dc:f1:
76:5f:3e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 17:49:34 2025 by rpki-client