Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1IVR4mFps7PhJPaWTicC6VdoJT4.cer
File: 1IVR4mFps7PhJPaWTicC6VdoJT4.cer (raw, json)
Hash identifier: F0deLLM7f05EoiDHqUEgsxwN/LvcZqbt3mYXuUudNGI=
Subject key identifier: D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942522225262E50DE785E9FEDFC00BEF7D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 9031
AS: 203640
IP: 77.109.64.0/18
IP: 79.132.224.0/19
IP: 85.234.192.0/19
IP: 109.236.128.0/20
IP: 185.29.108.0/22
IP: 185.95.72.0/22
IP: 212.71.0.0/19
IP: 212.233.32.0/19
IP: 213.211.128.0/18
IP: 213.219.128.0/18
IP: 2a02:578::/32
IP: 2a04:4400::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:22:52:62:e5:0d:e7:85:e9:fe:df:c0:0b:ef:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d48551e26169b3b3e124f6964e2702e95768253e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:32:2e:44:83:72:9b:96:46:3b:0a:6a:ba:20:
90:cf:73:13:14:ed:ab:de:0c:0e:81:be:b6:2f:1b:
f6:2d:43:45:99:45:df:d2:32:f6:1d:47:59:56:65:
2e:7b:39:bc:6f:1f:58:07:f9:a9:48:03:8d:a5:6f:
dd:ed:30:4f:e2:c7:69:27:18:ad:3d:de:81:2f:d6:
41:cb:3a:71:6e:da:1e:12:83:b5:f9:1f:80:47:8d:
6d:ae:32:3a:0f:06:0f:56:8d:25:ea:09:8c:30:ee:
1b:a3:02:63:0c:c9:82:c0:42:27:4a:4b:4e:2f:23:
f4:f8:50:c0:55:7c:b5:97:a1:24:ed:56:42:cb:5a:
db:ae:f3:67:aa:ec:f6:98:0d:fc:a3:5d:33:fc:6f:
0b:5d:03:7f:84:15:ad:f0:3d:94:5e:17:e3:d8:45:
b0:9f:95:41:a2:81:81:6d:d7:79:3f:a9:66:53:23:
61:e3:9e:af:57:0c:79:48:c9:d6:e1:92:88:80:37:
38:18:5b:88:20:96:f4:1c:c9:fa:80:9e:a8:ea:9c:
fb:6c:fb:05:ee:6a:0c:a4:36:d6:57:86:68:3a:ff:
22:47:d3:67:dc:0b:53:b9:75:0c:73:dd:f2:38:79:
12:3a:4d:43:99:ea:4e:71:8b:0b:e6:61:b5:99:29:
49:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:85:51:E2:61:69:B3:B3:E1:24:F6:96:4E:27:02:E9:57:68:25:3E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ead277-84c9-4b8e-879e-5f73267102a6/1/1IVR4mFps7PhJPaWTicC6VdoJT4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.109.64.0/18
79.132.224.0/19
85.234.192.0/19
109.236.128.0/20
185.29.108.0/22
185.95.72.0/22
212.71.0.0/19
212.233.32.0/19
213.211.128.0/18
213.219.128.0/18
IPv6:
2a02:578::/32
2a04:4400::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
9031
203640
Signature Algorithm: sha256WithRSAEncryption
ae:c8:33:96:90:6a:0f:7a:19:7f:af:e8:01:b4:89:ac:cd:62:
ed:fe:13:95:1f:ac:b4:a6:fe:37:0e:49:2c:73:ce:4e:44:56:
17:6e:11:da:6e:0a:9a:7d:5f:55:05:36:c2:b4:69:2d:c9:aa:
29:0d:a3:84:db:e4:53:09:3d:60:1c:41:fd:9d:22:23:6d:4f:
d5:a5:bc:7a:8a:56:ad:39:2e:95:92:39:2a:98:95:bf:0a:92:
ed:3c:22:56:78:ea:e6:b4:e3:a4:37:70:40:bf:33:b3:00:08:
01:06:33:e6:56:49:ad:94:b9:11:24:a2:aa:b9:40:a2:ee:82:
10:34:31:40:5e:1f:50:34:4c:6b:ff:86:2e:ba:3b:e4:c5:06:
66:91:18:2b:50:de:64:c2:e6:52:f9:03:4e:5c:5d:be:ad:39:
57:38:b2:cc:5f:92:f1:fe:e7:86:c4:fc:98:1a:36:7f:d6:0c:
5f:54:10:10:fa:65:5d:90:9a:2e:17:83:90:3e:da:02:29:ee:
39:b5:7a:3a:91:19:9a:53:70:c6:0b:00:e5:88:6b:e6:ef:bd:
bb:d4:1b:f9:e3:bd:cf:10:02:35:9e:c4:ab:a6:ee:21:7d:8f:
55:09:fb:65:d8:8e:21:14:10:12:07:40:6d:80:29:99:eb:23:
b8:2c:bd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 07:18:54 2025 by rpki-client