
Certificate
$ rpki-client -vvf rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer
File: DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.cer (raw, json)
Hash identifier: F5Z5NghRytrvU/c91h1uPbUO11nNc7lDncIaIA9mNFw=
Subject key identifier: DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18
Authority key identifier: 51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
Certificate issuer: /CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Certificate serial: 09FA723FAC8B64D28CAFCDFC25D0C6D5AA4E0F36
Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Sat 12 Apr 2025 14:01:35 +0000
Certificate not after: Sat 11 Apr 2026 14:06:35 +0000
Subordinate resources: IP: 2a0b:4e07:6000::/40
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:fa:72:3f:ac:8b:64:d2:8c:af:cd:fc:25:d0:c6:d5:aa:4e:0f:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF
Validity
Not Before: Apr 12 14:01:35 2025 GMT
Not After : Apr 11 14:06:35 2026 GMT
Subject: CN=DDC25AD2F1A489247713EE39B1C03EA2FDDA4118
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c8:54:23:8a:f0:06:02:ca:07:11:6d:e8:e5:
75:7f:ce:da:ea:1f:3c:e6:34:f8:04:3c:ee:54:ae:
47:fe:72:07:fd:c2:ce:2c:c5:c2:f9:91:79:f9:8b:
36:d6:f7:02:d8:50:11:0a:fd:aa:69:b0:a0:1d:82:
a7:81:d4:6d:88:c7:bc:82:56:bd:87:92:1c:24:fd:
a5:f5:9e:93:50:ff:16:35:66:6d:dd:9a:da:a9:63:
bc:04:3c:a5:93:47:c9:1f:54:2f:08:25:60:ea:00:
cf:60:ae:f9:93:94:6e:e3:55:04:9d:a2:f3:1f:70:
95:5f:ab:4b:20:c7:52:b5:20:9a:bf:5f:b9:8a:d5:
25:fb:b8:75:1c:0c:55:e9:19:a6:13:10:27:77:e7:
2e:5f:11:50:f7:a0:4f:83:af:26:44:97:5f:2f:77:
73:d3:8e:b6:ec:27:90:a7:eb:c0:d2:1e:6b:c8:c8:
7a:ae:62:bd:d2:1d:64:7f:6e:fc:26:5d:4e:87:cd:
7b:29:cd:8a:19:7d:90:21:62:fa:1e:34:0c:ad:eb:
80:19:a3:c6:9d:1b:54:b1:83:61:ed:70:e6:8f:95:
d7:10:da:d6:c5:20:d1:35:ff:69:32:43:fa:3a:02:
d1:a6:70:2e:c0:07:44:56:76:c5:36:22:08:20:5d:
e3:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
DD:C2:5A:D2:F1:A4:89:24:77:13:EE:39:B1:C0:3E:A2:FD:DA:41:18
X509v3 Authority Key Identifier:
keyid:51:24:C3:1F:CF:A4:E8:2C:4D:0F:6E:09:A3:0A:04:A5:5C:97:78:BF
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/81a44566458e4578b67eed3053f820f5/1/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.crl
Authority Information Access:
CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/5124C31FCFA4E82C4D0F6E09A30A04A55C9778BF.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/bead2dcf-ead5-4954-ad84-6580cd2a9c50/3/DDC25AD2F1A489247713EE39B1C03EA2FDDA4118.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0b:4e07:6000::/40
Signature Algorithm: sha256WithRSAEncryption
94:ec:d3:d9:98:54:a6:23:c1:af:f1:54:e1:8e:25:d8:46:70:
e4:b0:2d:b4:37:16:45:4c:0b:ba:5c:9d:61:35:70:cf:92:16:
1d:6a:b7:d9:e4:80:71:5c:6a:9a:8f:06:41:f9:f9:6d:0a:7d:
97:65:06:d8:d5:d5:ae:f3:5d:35:7a:53:2e:bb:41:21:b9:51:
da:d7:f7:d8:2c:d2:34:eb:96:bd:66:eb:88:01:81:64:0d:f6:
96:e8:d7:36:ce:ca:7f:89:07:53:44:ee:ee:40:ef:f0:3c:aa:
78:89:ce:00:98:1b:39:8e:d8:46:69:ad:a9:1b:ab:c1:bf:7d:
ef:7c:75:18:2a:9d:82:61:12:e5:f3:64:19:98:d5:5d:b5:d1:
a7:41:1c:9b:db:c5:f7:c2:43:29:d4:66:ce:db:8d:de:5b:08:
22:a6:7a:e2:02:27:3b:a5:aa:1f:63:0d:f0:0d:c2:d4:d9:0e:
e9:69:e7:0b:f1:3b:a1:27:18:cc:20:06:62:c6:61:01:08:95:
7a:17:3f:c6:dc:47:a9:39:ba:52:ac:f0:b8:ee:c7:51:3b:42:
22:ef:5e:99:08:7c:d8:6e:ed:e2:e5:ca:f9:f4:87:96:38:5a:
89:e4:aa:db:c8:54:86:b4:f7:de:ea:99:00:b5:6f:c1:25:08:
65:85:60:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 20:26:09 2025 by rpki-client on console.sobornost.net