Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer
File: 1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.cer (raw, json)
Hash identifier: gOc829iLll5HApDNDfoZXycbKUGVqLt4iRZ7+e7Fqlw=
Subject key identifier: FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194D094713F776610E0BBEE0C5BDB4DB10C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Tue 04 Feb 2025 10:49:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12727
AS: 42487
AS: 208719
IP: 31.24.240.0/21
IP: 46.235.176.0/21
IP: 85.95.192.0/19
IP: 130.185.184.0/21
IP: 185.39.140.0/22
IP: 185.55.244.0/22
IP: 185.127.240.0/22
IP: 188.64.240.0/21
IP: 213.166.192.0/19
IP: 2a03:9960::/32
IP: 2a03:d600::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:d0:94:71:3f:77:66:10:e0:bb:ee:0c:5b:db:4d:b1:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 4 10:49:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb486a0ba9b9b09f4de47962e2c2ae41fc557686
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:04:71:78:dc:25:0b:30:21:5e:9f:d3:8e:3c:
8f:c2:ac:df:a8:a4:40:16:30:1b:35:d9:b5:ac:21:
8f:b9:8f:34:dc:58:9e:da:15:3f:92:b2:63:0a:00:
bd:67:69:d5:fc:82:45:58:02:52:eb:ff:8f:99:d8:
7d:be:af:0c:f4:79:b5:be:dc:1a:e5:7f:7c:32:bf:
8e:5c:58:c3:2b:5c:96:ff:18:da:5c:0b:86:1d:a5:
75:ae:9b:86:c5:5d:df:9e:18:0e:17:ac:2b:99:f3:
48:20:75:0a:25:a7:7e:19:d9:94:61:ef:97:61:13:
27:c1:eb:99:1f:08:ad:41:2c:51:11:df:ce:7f:77:
6b:66:30:b9:b1:cb:9a:ac:71:6a:bd:78:cf:a2:bc:
22:e6:23:76:05:9c:4b:5c:93:af:04:49:d7:7b:53:
86:d0:b0:c6:c2:ad:30:45:75:bf:c5:38:10:ab:de:
9e:e9:e9:51:57:fe:d5:2c:e9:d9:42:ed:8c:3d:2b:
95:8c:7e:79:24:10:52:03:6a:ef:1f:cd:45:20:dc:
1a:5c:8d:f0:57:27:1b:5b:1a:07:8c:a4:13:5f:19:
fc:dd:41:10:23:cb:42:77:7e:b2:7b:3f:67:9c:56:
9c:01:74:3d:43:6f:0b:b4:8c:d3:93:32:6d:1f:84:
9d:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:48:6A:0B:A9:B9:B0:9F:4D:E4:79:62:E2:C2:AE:41:FC:55:76:86
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/6ac4da-f56a-4c1b-b5bd-faac90802908/1/1-0hqC6m5sJ9N5Hli4sKuQfxVdoY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.24.240.0/21
46.235.176.0/21
85.95.192.0/19
130.185.184.0/21
185.39.140.0/22
185.55.244.0/22
185.127.240.0/22
188.64.240.0/21
213.166.192.0/19
IPv6:
2a03:9960::/32
2a03:d600::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12727
42487
208719
Signature Algorithm: sha256WithRSAEncryption
70:98:fe:a8:a9:b4:35:30:7d:f5:9d:79:c2:88:5d:a3:1a:43:
92:0b:15:30:32:b7:5a:6e:f2:9c:0a:9a:bc:34:97:e6:81:48:
0e:cd:1f:8b:ce:c6:13:30:03:b8:80:35:00:29:13:58:2e:67:
f3:df:07:40:85:23:be:35:18:a5:88:30:f4:93:23:0a:51:c0:
5c:c5:97:c0:b7:fe:30:80:bc:2b:5e:b2:8a:1f:5a:31:fa:15:
85:96:2e:46:f1:7b:bf:d2:fa:88:9e:58:10:39:7c:11:cc:6a:
15:f5:61:65:f6:3b:5d:ac:be:95:67:1a:29:2e:de:e0:0b:c6:
ce:a2:5e:3f:52:a4:0d:fc:37:70:c8:c8:86:e8:93:e7:2a:f3:
eb:a4:eb:f2:69:0b:27:f0:4b:ce:e5:2a:94:a5:4a:43:11:c1:
74:44:72:de:9f:cd:f0:27:68:a5:bc:24:a6:d0:bd:db:8d:cd:
c2:d8:fe:ab:7a:85:99:b3:67:85:38:96:4e:6f:39:18:1e:0b:
00:7a:d0:3c:2e:57:d4:9b:6c:a4:fa:5d:d9:35:42:1f:29:ac:
d6:d3:6a:d4:db:4a:44:24:90:f3:22:3b:1d:c9:3d:11:d3:89:
05:16:32:37:94:07:c9:79:94:87:a2:5a:02:bc:fe:05:45:69:
9c:c8:bb:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:34:05 2025 by rpki-client