
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/W-4FGpOQHswBdEB5qkrC-wd7n8E.cer
File: W-4FGpOQHswBdEB5qkrC-wd7n8E.cer (raw, json)
Hash identifier: fnemBZecJwxjmcKvaBLQ4I8gFsIHNKH5KBD+ignQQtw=
Subject key identifier: 5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427488A03CD5DE7D7E8B88C8B35ADF3A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:52 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39450
IP: 31.15.16.0/22
IP: 45.128.224.0/22
IP: 91.213.39.0/24
IP: 91.228.64.0/22
IP: 92.246.88.0/22
IP: 194.4.164.0/22
IP: 195.20.137.0/24
IP: 2a0d:8540::/29
IP: 2a0e:4240::/29
IP: 2a11:500::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8a:03:cd:5d:e7:d7:e8:b8:8c:8b:35:ad:f3:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:52 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5bee051a93901ecc01744079aa4ac2fb077b9fc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:2c:6d:62:31:53:a1:6d:d4:f2:f8:20:20:d8:
e0:f4:92:f8:e7:93:44:40:42:42:a4:0f:5b:48:fa:
40:d7:f2:a4:61:ae:36:f3:a0:e7:97:91:ba:a0:a7:
5c:4b:11:ca:8f:63:c8:db:01:12:56:fb:29:82:e3:
0f:e2:90:fd:f2:f6:a5:c2:60:e5:37:88:5c:01:0c:
c1:a7:c4:c3:6c:9b:fc:65:3b:f3:1f:20:f0:2a:40:
7d:0f:df:95:8b:3e:5b:d6:8a:78:f4:75:ca:97:bd:
6c:2e:ff:cb:5a:55:63:32:81:dd:05:45:f8:fa:38:
90:fe:c2:4c:43:a0:26:54:43:79:e1:8c:3a:e1:c3:
15:3d:bb:4c:4e:6c:71:91:4d:5c:56:82:5c:10:cf:
66:00:ae:1f:65:7d:54:0e:fd:1f:6d:ec:d2:2e:52:
46:e5:86:0e:ea:a3:27:2e:80:fc:b9:65:76:a9:92:
66:72:95:93:e5:83:24:d9:2d:81:b8:f2:1a:90:5a:
64:65:f3:b1:45:48:8f:d4:28:ec:06:a7:a2:0b:da:
f5:c3:07:4e:df:47:ff:09:b9:77:c2:a2:4b:b6:12:
71:eb:69:7e:1a:2d:71:ae:c7:13:f1:8c:08:d7:47:
f8:50:46:c1:4f:65:98:a5:9f:85:ea:65:57:ce:69:
81:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:EE:05:1A:93:90:1E:CC:01:74:40:79:AA:4A:C2:FB:07:7B:9F:C1
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8eff42-5b55-4e6f-8222-a52a8795d956/1/W-4FGpOQHswBdEB5qkrC-wd7n8E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.15.16.0/22
45.128.224.0/22
91.213.39.0/24
91.228.64.0/22
92.246.88.0/22
194.4.164.0/22
195.20.137.0/24
IPv6:
2a0d:8540::/29
2a0e:4240::/29
2a11:500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39450
Signature Algorithm: sha256WithRSAEncryption
9c:a8:89:34:6a:3e:bc:4d:cb:83:e3:86:a8:ce:19:51:5c:b6:
df:71:1d:79:b1:06:2e:65:9a:09:1f:81:39:ea:68:74:0e:df:
47:eb:0f:2d:e8:0c:35:ee:f7:dd:94:99:b2:7f:47:98:13:51:
97:1b:8d:0a:89:69:23:00:aa:f1:3b:5f:f0:d0:86:f9:0d:23:
68:9a:d2:30:d4:f8:61:ad:d3:01:66:36:09:81:55:e0:cc:e3:
a7:91:45:d6:fe:ba:0e:88:8a:7b:b5:64:13:1e:9b:22:a2:b1:
a1:8f:69:a4:19:da:41:74:d2:f0:ce:f3:bf:4e:16:a9:97:c4:
c3:5d:bd:37:85:3a:ba:4b:31:87:b4:68:c0:76:83:a3:4b:bb:
5e:38:c4:b9:40:0f:b4:ce:e4:b0:0a:5c:30:18:70:19:41:17:
7e:92:d7:8f:82:d0:4e:46:67:90:76:25:dc:5a:b6:b5:bb:a0:
97:5a:a0:a0:bf:68:bc:dd:2b:b4:51:86:81:b4:06:21:6b:60:
27:55:40:ce:72:90:ce:85:f4:d4:35:39:32:41:e2:ce:f3:36:
eb:8d:3f:04:de:e4:d6:c9:be:33:73:2d:ed:76:8f:b0:03:7e:
8c:b1:0d:92:d4:e9:ac:09:91:02:91:97:3c:40:69:60:30:64:
39:d7:b2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:29:01 2025 by rpki-client