Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer
File: Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.cer (raw, json)
Hash identifier: pb+n29BZzbJchsop/PtGd8NdfYn/GeTL+wH7RmfpxTM=
Subject key identifier: 59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D656A305CA7D39AEFE3BA31EFCB392
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:25 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 39312
AS: 201334
AS: 201381 -- 201385
AS: 201387 -- 201388
AS: 201482
AS: 201485 -- 201486
AS: 201490
IP: 77.81.122.0/24
IP: 81.26.156.0/24
IP: 81.26.158.0/23
IP: 84.47.132.0/23
IP: 84.47.146.0/24
IP: 84.47.154.0/23
IP: 84.47.166.0/23
IP: 84.47.179.0 -- 84.47.180.255
IP: 84.47.184.0/23
IP: 84.47.189.0/24
IP: 85.91.105.0/24
IP: 85.91.107.0 -- 85.91.111.255
IP: 85.91.116.0/23
IP: 85.91.123.0 -- 85.91.127.255
IP: 185.89.240.0/22
IP: 188.241.244.0/23
IP: 195.90.110.0/23
IP: 213.208.171.0/24
IP: 2a05:da80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:56:a3:05:ca:7d:39:ae:fe:3b:a3:1e:fc:b3:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:25 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=59dd542781851c0bce5a3ea5cc387650ffc8277e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d7:73:17:f8:55:d4:53:70:02:45:44:7e:02:
0b:27:52:03:24:40:c5:02:68:4c:88:36:4f:ae:88:
0d:c5:37:81:16:7d:76:30:b3:91:df:e8:5c:d2:f7:
ef:f2:a7:83:84:ef:be:1c:f9:73:74:dd:02:d5:b8:
6b:b1:14:64:3d:99:30:0d:0c:9e:5a:d4:04:3a:88:
a0:13:7b:9c:ce:47:5c:b8:75:ad:35:03:66:75:5a:
2f:c1:ad:60:93:76:97:bf:a5:53:2e:37:04:8b:cd:
51:7c:b8:00:56:13:20:dd:7b:84:89:7b:88:42:57:
bd:9e:e8:26:c5:d5:69:1a:e9:18:b6:6e:5c:68:89:
27:7f:ef:4d:20:63:7f:92:58:18:c8:52:40:02:44:
9d:1e:9c:87:06:0c:91:85:cc:48:17:b3:31:c5:15:
89:50:3f:d6:b0:57:1a:17:ea:bb:a3:fd:d5:c2:3a:
ec:7c:f1:ea:ad:ac:99:82:97:f7:b8:37:5e:e1:db:
5e:2f:66:fb:a5:6f:97:0b:bc:67:38:15:8a:89:53:
0d:4c:ee:cb:99:b8:ce:61:09:78:62:3a:9c:45:7c:
ed:5e:d2:42:bf:66:24:2b:7f:38:09:be:69:b6:4b:
34:6f:59:dc:4d:d6:f7:c4:40:70:c3:4a:ba:ab:7b:
23:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:DD:54:27:81:85:1C:0B:CE:5A:3E:A5:CC:38:76:50:FF:C8:27:7E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/79c4ba-38e2-4f5a-959f-47e0937989a8/1/Wd1UJ4GFHAvOWj6lzDh2UP_IJ34.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.81.122.0/24
81.26.156.0/24
81.26.158.0/23
84.47.132.0/23
84.47.146.0/24
84.47.154.0/23
84.47.166.0/23
84.47.179.0-84.47.180.255
84.47.184.0/23
84.47.189.0/24
85.91.105.0/24
85.91.107.0-85.91.111.255
85.91.116.0/23
85.91.123.0-85.91.127.255
185.89.240.0/22
188.241.244.0/23
195.90.110.0/23
213.208.171.0/24
IPv6:
2a05:da80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
39312
201334
201381-201385
201387-201388
201482
201485-201486
201490
Signature Algorithm: sha256WithRSAEncryption
28:d6:3d:aa:e3:c9:03:a2:9a:e7:c9:d6:45:8b:10:51:c2:09:
50:64:c4:11:21:cc:15:de:f0:fd:13:ba:12:73:b4:ce:b9:55:
4c:bc:e0:6f:29:e0:b4:90:6c:6c:7f:1d:69:ba:54:21:e1:7a:
e1:63:5a:41:6e:0f:f5:bd:8d:1a:3c:4c:bc:cf:81:e2:89:a7:
8c:20:b2:75:c2:cc:cf:0d:a1:62:56:0f:82:48:0a:14:8d:15:
15:8f:e1:29:62:66:1d:ff:c9:45:5d:53:68:19:13:d7:e4:dc:
89:72:07:10:0a:57:a6:16:55:a7:10:86:97:5f:2c:d3:d1:56:
d8:ac:81:84:2d:60:06:97:02:2f:bb:ec:6c:72:cc:48:9b:2c:
4a:aa:8f:fa:74:47:30:d6:1b:2c:78:b2:98:64:90:de:ae:8d:
3f:65:e4:74:21:90:92:ed:75:59:9f:66:a2:21:78:68:ae:2e:
48:b6:9d:61:90:d0:cd:8b:23:07:0d:a0:ad:b3:06:76:3d:0f:
50:03:4f:ac:c4:66:76:1b:33:18:b6:05:0d:e7:11:a1:86:5f:
e2:81:58:64:58:ca:e8:ec:db:c7:f9:da:ee:6a:4e:7d:c6:f9:
df:71:e4:a1:32:5b:19:ac:31:68:cf:be:1d:d5:67:e1:13:a3:
e0:9a:64:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 12:41:04 2025 by rpki-client