Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/_EQpfpJxxu3wZJFfYYCuEmkN2os.cer
File: _EQpfpJxxu3wZJFfYYCuEmkN2os.cer (raw, json)
Hash identifier: /ZAbQtydJZoXPbPFJVFBCU8rWGgMOu6Y34M+65rdGRk=
Subject key identifier: FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D651286D48F259A59BF2AED299689B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:23 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 5504
IP: 82.114.32.0/19
IP: 194.30.128.0/19
IP: 213.169.128.0/19
IP: 2a01:6700::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:51:28:6d:48:f2:59:a5:9b:f2:ae:d2:99:68:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fc44297e9271c6edf064915f6180ae12690dda8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fe:b3:5e:6f:21:95:24:9c:54:20:2e:ec:b1:
a5:37:87:fe:c7:d8:d7:a1:bf:f2:18:9a:b5:d3:81:
30:5b:7f:69:b1:35:8e:61:69:f7:35:e3:f8:36:d2:
bb:49:c5:48:e1:3b:14:7f:11:02:15:42:9b:98:12:
6a:79:ff:1b:d9:52:d1:b8:73:7f:99:58:fc:2f:db:
a7:15:da:0b:16:06:55:0e:75:f3:bd:9d:30:c6:ff:
a0:98:1a:a7:f1:bf:71:d9:5a:25:dd:bb:99:c8:13:
2c:4c:ce:61:48:34:e6:dc:a5:62:4a:f9:af:0d:27:
56:1a:4b:e6:61:a4:df:ec:a3:92:cf:8a:79:8b:7f:
22:a1:2f:45:9d:5b:b8:b7:2b:b9:b6:d2:9d:0e:02:
dc:81:d7:ac:6b:d8:45:c6:d7:09:d4:4e:87:a5:47:
e9:5d:18:8d:fa:8a:c2:55:d4:f1:99:c9:d4:d7:0b:
51:41:d2:b5:76:1a:ba:7d:59:14:26:11:c3:48:df:
12:1c:91:bb:13:6f:10:d9:5b:44:da:cf:bf:43:bc:
0a:d2:11:1f:63:53:eb:f5:ee:6a:db:54:54:0b:1b:
b5:0f:08:2d:7d:58:89:03:a0:85:15:e7:9c:c1:36:
a5:50:a6:f4:dd:a9:bf:43:67:02:2e:7a:8e:ca:15:
55:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:44:29:7E:92:71:C6:ED:F0:64:91:5F:61:80:AE:12:69:0D:DA:8B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/7cb179-ad2c-4824-a1e5-ae07f32e4102/1/_EQpfpJxxu3wZJFfYYCuEmkN2os.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.114.32.0/19
194.30.128.0/19
213.169.128.0/19
IPv6:
2a01:6700::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
5504
Signature Algorithm: sha256WithRSAEncryption
84:3e:42:3d:63:67:02:37:79:7d:84:3e:42:52:73:8d:1f:63:
4a:09:76:7c:73:db:ed:ff:98:fa:f0:3a:50:84:ac:96:8d:03:
48:63:f7:e7:a8:65:85:1f:fc:9a:1b:c7:4c:c8:58:c3:dd:71:
9b:d3:9d:d2:58:ab:9c:66:04:dd:e4:15:73:08:f3:98:df:24:
f7:99:3b:ca:c2:3e:9f:62:d2:be:da:61:b8:6d:86:1a:fd:69:
7e:0d:6e:da:d9:e7:20:31:a8:24:9b:41:38:e0:f6:e6:11:9b:
d7:c3:a8:d2:01:23:1f:53:d9:2e:d0:89:44:81:90:08:ad:76:
21:69:80:1b:6d:75:80:6b:8b:5b:d5:99:4e:95:89:ca:c3:b6:
dd:8c:13:f7:5f:4f:dc:e0:12:90:0b:6e:36:4d:75:67:f0:7e:
2a:48:c3:10:95:ef:e8:80:e4:68:a1:ee:b7:4d:2a:b7:c2:92:
b7:5b:ca:71:3d:d2:1a:69:87:a2:b2:ae:be:d7:70:36:4f:ff:
5c:4b:21:1a:cd:32:a4:59:0e:8f:63:e9:ca:bb:5f:db:77:de:
2d:49:47:58:8e:50:9c:10:19:6e:e3:21:69:05:95:b7:98:b1:
4a:e9:b8:87:3a:30:fd:eb:5b:a1:d8:b2:5f:10:46:05:5e:a5:
bb:1a:48:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 07:23:44 2025 by rpki-client