Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.cer
File: paeSbrbcRhv-Z9_I0wKJk5Dr9JI.cer (raw, json)
Hash identifier: JJ5Gk9nLV/HODSk/Pt5DCzqGigag+srqdmZPcciTjWA=
Subject key identifier: A5:A7:92:6E:B6:DC:46:1B:FE:67:DF:C8:D3:02:89:93:90:EB:F4:92
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018571D70459C5737FEC663857928BC6B905
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 02 Jan 2023 09:36:34 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: IP: 83.138.51.0/24
IP: 2a11:1a80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:71:d7:04:59:c5:73:7f:ec:66:38:57:92:8b:c6:b9:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:36:34 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=a5a7926eb6dc461bfe67dfc8d302899390ebf492
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:a2:7f:9b:47:45:7b:15:66:1e:0d:15:fb:32:
e3:ea:f7:2e:dd:eb:fe:c8:7e:48:30:8c:6f:3a:97:
c3:22:c4:f2:50:1d:1f:15:14:95:e6:10:b9:05:12:
68:2a:5a:69:f8:03:cd:ec:9c:91:79:85:6c:5e:d1:
4e:c1:0f:a5:b7:13:d4:5a:38:3c:e8:70:cb:19:48:
f8:b1:f0:3d:48:0a:a0:20:86:72:03:21:8f:d2:f3:
0b:67:9d:fa:0b:58:e1:b8:d5:23:5d:64:06:d2:b7:
2f:5e:b7:c5:22:99:14:03:9e:49:ed:41:28:15:53:
08:86:5e:e5:c8:77:64:2e:54:5d:a1:6d:41:44:96:
93:34:6a:57:d6:2e:6c:5d:ed:6e:6d:6f:54:b8:c7:
95:01:a9:ba:3b:70:bc:a7:4f:70:cd:c0:f4:e4:95:
43:ec:78:b1:d2:c3:a3:d4:9c:45:e1:cd:c0:c6:0d:
0d:5d:5d:77:26:3b:c0:1d:05:c0:15:81:63:df:49:
c0:c5:b2:95:c8:aa:36:19:ac:1a:48:70:01:63:48:
f6:be:5c:2e:b4:a8:17:79:ac:76:9c:b0:0c:69:6c:
ff:29:47:28:ca:81:c0:cd:ec:ea:80:f0:a5:09:44:
bb:a8:fa:eb:46:e5:53:10:3c:b6:5a:06:53:41:8b:
86:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:A7:92:6E:B6:DC:46:1B:FE:67:DF:C8:D3:02:89:93:90:EB:F4:92
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/bc9950-6ab5-4c3e-8313-ede4159283d1/1/paeSbrbcRhv-Z9_I0wKJk5Dr9JI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.138.51.0/24
IPv6:
2a11:1a80::/29
Signature Algorithm: sha256WithRSAEncryption
78:b2:dc:ad:43:92:70:4f:95:8d:d7:17:d5:d9:9e:5c:1d:18:
42:f3:fc:61:26:a2:e4:32:d8:91:07:be:76:53:35:4b:3b:c2:
58:b6:35:d7:a2:df:37:da:af:29:2a:a5:4b:42:6e:4d:06:e6:
0e:56:84:18:db:43:6a:38:7d:fc:b7:e7:f4:2e:f8:19:7e:0a:
17:b4:dc:94:54:21:86:19:a4:02:c0:40:44:60:1f:10:7d:6f:
db:cd:e0:58:f7:f2:5e:b1:bf:47:9e:91:a0:af:da:af:37:47:
1d:31:e0:68:4c:19:42:2a:b9:1e:da:b4:da:1f:11:7b:4e:71:
06:96:b8:a9:d2:9b:48:ba:7b:dd:b2:73:7d:e8:84:92:50:ea:
0f:fb:77:7a:a3:13:cf:92:3d:33:cb:da:4d:61:3a:af:66:27:
32:cd:aa:ef:c5:cc:7f:18:01:99:a8:51:59:fe:8e:f8:5e:f9:
fb:25:2f:08:4b:17:6c:6a:f7:ff:21:c2:24:06:b5:72:a5:69:
14:23:af:00:68:6a:aa:70:7e:e6:43:06:fb:46:a8:c1:52:9d:
c1:df:db:cf:d5:ef:6b:54:42:9f:c9:43:3b:a7:0d:9f:8f:fc:
17:9d:fd:ce:1c:27:f3:df:91:51:8c:64:c1:21:66:2e:d9:e2:
74:5f:c4:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 20 02:47:54 2025 by rpki-client