Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer
File: uT1JCNnEOoX4W-GTNKJvXVE1C8s.cer (raw, json)
Hash identifier: RoFNhvoo8NIuOonP6Tx93OMxSLbggfxKpG7phufgS6E=
Subject key identifier: B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194739D441B5DE860A81BA58E1564B275A2
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Jan 2025 09:34:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 45.89.223.0/24
IP: 2a14:1d40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:73:9d:44:1b:5d:e8:60:a8:1b:a5:8e:15:64:b2:75:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 17 09:34:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b93d4908d9c43a85f85be19334a26f5d51350bcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:69:6f:0f:73:51:23:48:f5:a2:7e:3c:c4:64:
b1:c2:10:c3:05:4d:2a:61:28:9a:11:c6:66:5f:d7:
81:31:a6:6a:a2:52:03:a2:42:76:04:d1:54:51:c6:
4f:61:a2:e3:e9:48:d3:84:d8:ff:c2:50:07:1c:cd:
da:d6:a3:3f:a8:c0:7a:e3:6f:48:2f:2f:20:e8:6a:
b0:69:91:e7:78:ac:f0:fd:ca:8a:4d:f3:44:2e:4b:
13:d9:36:34:4e:41:ea:18:65:d3:53:a3:c2:8c:2d:
02:d1:64:d1:67:6f:83:9b:3f:a0:9a:ed:23:30:0e:
53:98:97:82:fc:b9:61:97:cb:1c:98:51:a3:cc:9b:
28:af:8b:f8:a2:30:ca:e5:60:87:60:54:25:8a:93:
24:12:fd:6f:37:7a:61:e7:dd:2a:78:9a:27:cf:2f:
80:6e:f5:f5:d5:b5:26:77:a9:a1:80:00:29:b9:14:
25:91:04:02:5e:a4:6c:3e:a2:cc:41:65:86:01:12:
95:26:5e:fc:62:c8:3f:27:8f:c2:45:0b:1f:53:a8:
c1:66:fa:04:e2:ff:9e:5b:b6:62:e2:3e:ca:59:96:
23:18:f4:d8:5e:b7:82:6f:8d:3a:7e:42:96:a1:a5:
8f:e5:56:3f:95:37:59:a1:6d:b1:3b:bd:16:62:82:
56:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:3D:49:08:D9:C4:3A:85:F8:5B:E1:93:34:A2:6F:5D:51:35:0B:CB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1d7b0c-2251-4dd3-8690-52874611cd21/1/uT1JCNnEOoX4W-GTNKJvXVE1C8s.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.89.223.0/24
IPv6:
2a14:1d40::/29
Signature Algorithm: sha256WithRSAEncryption
26:f3:e7:99:32:f9:53:a9:1e:94:4c:4e:99:8f:f6:8e:78:59:
bb:6d:3c:fc:e2:04:a9:38:b5:73:42:71:d2:1f:cb:69:0f:67:
a3:b6:db:18:df:0a:55:96:ec:38:80:01:73:4b:a7:1f:68:a1:
be:ba:96:e8:f9:dd:39:b2:4d:f8:31:00:f6:1d:bd:97:76:e9:
43:be:bd:d5:4e:38:e4:e1:cd:7f:9f:d2:0e:8c:ff:aa:f5:64:
b3:b5:fd:22:d9:2f:c0:28:5b:13:9e:92:6f:f8:5b:7f:cb:53:
be:de:04:2b:3c:d7:81:61:cd:91:aa:9f:c1:3c:1b:21:64:31:
da:14:12:b6:50:16:e4:fe:34:e3:79:5d:2b:eb:78:ce:10:8d:
c3:16:5a:ab:58:cf:4d:03:9e:13:30:18:57:73:74:a1:4c:81:
9f:f0:ed:ff:d1:7e:a7:9b:7c:a7:48:01:8b:4b:9c:19:1e:4e:
06:fd:87:1c:4d:17:73:66:f4:41:16:d2:f5:71:e5:27:10:a5:
a4:53:ec:8a:a0:36:4b:44:76:f5:33:22:b9:f6:17:83:8b:92:
05:62:50:ba:76:19:10:0d:db:e4:49:92:08:33:5b:3a:86:65:
13:07:6e:f3:e9:c0:71:00:f7:fe:51:c2:b9:b6:63:92:74:d1:
75:33:47:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:59:20 2025 by rpki-client