Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nE4a0UpgILwHB4bpRkQS7EkY9-s.cer
File: nE4a0UpgILwHB4bpRkQS7EkY9-s.cer (raw, json)
Hash identifier: AlRpyRVyk9viElZtUBe3R72dc9WTmM/VNZZQjPQ7esQ=
Subject key identifier: 9C:4E:1A:D1:4A:60:20:BC:07:07:86:E9:46:44:12:EC:49:18:F7:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01866E3526F73FE6065E2613DEBC2702143A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/9C4E1AD14A6020BC070786E9464412EC4918F7EB.mft
caRepository: rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/
Notify URL: https://magellan.ipxo.com/rrdp/notification.xml
Certificate not before: Mon 20 Feb 2023 09:43:42 +0000
Certificate not after: Mon 01 Jul 2024 00:00:00 +0000
Subordinate resources: AS: 206074
AS: 206092
AS: 206150
AS: 206164
AS: 210277
AS: 213060
AS: 213074
AS: 213085
IP: 193.84.111.0/24
IP: 2a13:9500::/29
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:6e:35:26:f7:3f:e6:06:5e:26:13:de:bc:27:02:14:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 20 09:43:42 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=9c4e1ad14a6020bc070786e9464412ec4918f7eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:2b:78:78:de:7f:e7:86:33:4e:38:15:91:b6:
0d:e4:9f:8d:ab:30:b7:2a:56:87:24:0a:3c:05:96:
e8:85:51:7b:45:6c:2b:b9:6e:ee:b8:65:7f:d3:dc:
ba:96:28:b9:e4:d3:72:7e:d9:88:07:cf:02:96:b6:
5c:e8:92:38:43:4e:6b:c3:e4:db:4f:d3:cd:8f:72:
4d:7f:fb:f4:f6:53:7d:5f:f7:10:83:00:85:81:61:
94:71:c3:e9:7a:92:11:f6:c1:f6:2c:d7:71:8d:41:
72:03:13:28:88:9f:f1:13:58:08:35:28:1f:24:2b:
b2:8e:12:fb:b4:13:55:66:fa:59:5f:e6:d2:0d:8d:
a0:90:1e:91:5c:a8:d7:91:d1:b4:64:18:94:ab:98:
8c:b5:8f:7a:05:1e:e2:20:99:1e:9b:a0:e7:cf:04:
06:f1:09:22:24:05:48:34:6c:23:dd:d2:c5:ed:20:
be:f0:68:24:b4:61:21:13:16:24:9d:a0:97:7b:bb:
bd:cb:45:33:c4:0d:03:b1:3c:5f:50:80:b7:49:58:
71:87:12:84:cb:77:ac:33:44:aa:d6:46:eb:ce:29:
2b:20:09:3d:1c:ff:d9:3a:cc:d7:28:c7:ee:3b:38:
3d:2b:34:88:75:c9:c7:40:a9:30:ff:73:1f:b1:6c:
12:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:4E:1A:D1:4A:60:20:BC:07:07:86:E9:46:44:12:EC:49:18:F7:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0
RPKI Manifest - URI:rsync://r.magellan.ipxo.com/repo/7bbaa5d0-a50c-4178-8573-8045048b7bc3-0/0/9C4E1AD14A6020BC070786E9464412EC4918F7EB.mft
RPKI Notify - URI:https://magellan.ipxo.com/rrdp/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.84.111.0/24
IPv6:
2a13:9500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
206074
206092
206150
206164
210277
213060
213074
213085
Signature Algorithm: sha256WithRSAEncryption
8c:e2:51:ff:24:a4:47:9e:ea:42:2a:87:c6:9e:bf:7b:c1:64:
00:dd:12:07:04:6c:fa:a3:a7:57:c5:7f:30:69:45:60:a4:df:
33:29:c0:98:6a:90:bf:44:b0:c0:d5:70:89:e9:8f:ba:64:91:
1d:48:7f:f7:c0:28:16:15:5a:67:7e:b1:03:fd:a9:5e:dc:c7:
30:f6:1e:ad:2f:b9:3b:81:25:a3:9d:4f:37:06:a1:6d:5c:b6:
47:59:fb:3c:d5:58:d6:f3:2c:ff:d7:5a:b1:25:d2:df:7e:41:
86:53:fa:82:f1:1f:36:84:7f:1e:6f:18:a4:ea:d7:b1:fe:d5:
d9:42:10:c2:44:0e:a0:b0:63:03:a0:bb:54:57:ea:a9:57:6a:
35:55:29:44:89:36:0c:fe:9f:14:f7:79:ca:7f:f8:d9:14:e7:
09:74:40:93:f8:ae:85:a4:f3:d8:0b:80:dc:75:b6:f4:f3:3f:
b5:19:1f:a7:6b:b1:85:1f:b0:77:e0:a7:60:96:75:61:b9:c1:
a1:46:77:8a:60:08:22:f4:23:11:3e:9d:0e:8c:cf:9f:bb:c5:
21:92:32:00:6a:5d:70:26:15:c3:38:4c:74:b7:3c:7c:a2:09:
cb:0d:96:c6:9f:28:79:c4:e8:28:ad:9a:e3:2a:57:1c:1a:30:
bd:8b:98:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 9 08:41:52 2025 by rpki-client