Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2RTaVuGpNGSdoClkrBLro0xcuE8.cer
File: 2RTaVuGpNGSdoClkrBLro0xcuE8.cer (raw, json)
Hash identifier: LQnAEXa4qTL2+VR95H4aPa5UZn41U9VkYmfi4eVHGZs=
Subject key identifier: D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194744FCE7CBDAD11627552FA82D1633EFA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Fri 17 Jan 2025 12:49:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212586
AS: 214019
IP: 79.174.0.0/22
IP: 185.97.215.0/24
IP: 185.231.234.0/24
IP: 2001:678:e58::/48
IP: 2a13:e3c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:74:4f:ce:7c:bd:ad:11:62:75:52:fa:82:d1:63:3e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 17 12:49:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d914da56e1a934649da02964ac12eba34c5cb84f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:e6:bd:36:d3:ce:1e:5e:77:36:1f:ce:aa:24:
57:6b:b9:07:fc:db:01:a9:c8:80:63:c9:e4:26:8a:
ff:25:c9:7c:22:f4:ec:28:fc:a9:e9:85:85:a2:02:
f1:f4:91:48:1c:64:07:6d:9a:2d:5d:e9:23:40:f6:
96:eb:38:da:04:ec:62:b3:9a:aa:52:33:13:85:ae:
8e:07:96:22:55:23:11:7d:8e:30:72:92:6d:5d:b0:
b6:69:78:b2:26:9b:57:cd:87:61:f3:7f:b1:34:3b:
1b:c0:22:14:a2:3b:e5:b0:7c:7e:15:81:7b:48:7f:
9c:3d:71:4b:8b:78:18:d6:5f:1b:d7:f8:bf:83:de:
8f:98:48:5d:38:96:a4:62:74:1d:0b:7a:32:61:39:
e5:36:29:04:fa:c5:f5:f7:02:01:c0:d6:93:e6:39:
0f:de:ba:cd:40:4c:74:b4:e3:2a:0c:4e:b6:6a:ba:
c4:3c:dd:01:bd:35:e4:63:09:57:fb:3c:22:5b:1a:
93:3c:fa:5d:4d:31:8e:92:1c:be:8b:30:49:30:5f:
9e:32:65:96:ca:6a:d0:36:71:7a:45:4a:6b:b5:3e:
3a:42:74:a8:b0:18:e0:7f:42:a9:67:de:b1:61:d1:
31:5d:32:7d:31:1d:cb:b1:6a:eb:62:6e:3c:93:a7:
2b:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:14:DA:56:E1:A9:34:64:9D:A0:29:64:AC:12:EB:A3:4C:5C:B8:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/7a11b5-a405-41cb-81cb-f6bccf1e531f/1/2RTaVuGpNGSdoClkrBLro0xcuE8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.174.0.0/22
185.97.215.0/24
185.231.234.0/24
IPv6:
2001:678:e58::/48
2a13:e3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212586
214019
Signature Algorithm: sha256WithRSAEncryption
a2:a8:06:5d:21:64:13:13:60:a7:8c:60:6b:ba:f0:04:7f:e7:
01:6e:72:82:ff:8d:95:43:47:08:a7:a2:1f:ed:d2:7c:e8:ae:
0c:03:10:e8:aa:b9:64:84:ac:26:4a:1f:07:21:24:0a:ce:45:
50:9c:b4:7e:1d:60:3d:a4:3d:12:7e:81:bb:ea:11:90:2c:44:
14:40:fd:b9:9d:f5:51:3b:ed:93:a1:4f:de:58:c1:6c:78:c4:
37:d9:cb:ac:b7:52:f5:34:da:d2:85:41:b3:aa:9f:6d:c0:68:
99:32:9f:70:59:d3:91:17:ea:d0:85:7b:66:62:27:35:1c:5b:
8d:3f:5c:13:99:5a:41:fa:ec:f7:13:07:73:20:c9:a9:9d:36:
4a:dc:d8:58:88:75:ed:be:69:ec:3e:a5:65:78:e0:d6:90:00:
cc:eb:1f:ed:8f:a1:f6:55:36:2c:31:33:28:24:1b:68:51:04:
86:b5:1c:37:9c:d0:66:76:70:c6:7e:b6:ac:d5:4d:09:42:d0:
6f:21:58:2b:26:77:f6:30:05:cd:7d:8d:b4:62:02:ee:0b:5b:
cb:80:eb:c2:09:b4:30:c5:69:a7:43:ea:69:9a:fb:b9:77:23:
1c:5e:b0:e6:70:bb:78:74:15:50:5d:47:05:e0:03:62:f6:59:
93:45:99:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:46:27 2025 by rpki-client