Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
File: 4oqGzL9We9migv3fdfC39VQiItI.cer (raw, json)
Hash identifier: /F60iziW8wi0tO+qT9SxhG4o/zdGhSgBGnm9/ppdK3A=
Subject key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019428256FDEA78879ACE7E07449CFF40367
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:52:09 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 38949
IP: 80.94.48.0/20
IP: 2a02:c80::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:25:6f:de:a7:88:79:ac:e7:e0:74:49:cf:f4:03:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:52:09 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:c7:f3:85:a7:6f:54:40:95:4d:2d:89:5a:7f:
02:d6:11:e5:43:52:3c:ff:e8:09:55:f8:0a:56:10:
54:46:e2:b6:83:dd:01:18:be:5c:e0:8d:7e:4b:de:
26:06:de:bb:e0:84:14:dd:ed:c2:df:70:e2:32:af:
9c:f3:c9:0b:fa:db:2c:b3:11:80:42:f9:8e:c1:88:
97:90:30:93:88:7f:c4:3e:e2:1e:ab:65:32:ff:94:
fa:22:47:af:7b:e5:d2:cc:8b:a9:05:b3:18:1a:ea:
bf:a0:f4:80:65:94:96:9b:0f:45:4a:bf:2e:fe:32:
96:37:7e:dd:e9:65:85:aa:c9:72:8e:98:71:cc:5a:
00:c6:59:ee:96:9e:c4:c1:ff:d0:44:bb:d8:ca:ac:
b1:76:b1:99:3d:7a:c3:04:51:c5:fb:a2:ac:b0:27:
04:a9:57:c6:3b:ff:ea:3c:96:e2:ef:fb:97:58:da:
56:e8:cc:7f:c3:e3:f3:91:90:de:20:91:d6:eb:cd:
59:a1:36:ef:f8:74:8d:5f:e7:96:cb:22:de:26:b5:
23:6d:b4:51:55:ba:61:9b:21:eb:2f:a9:cf:a5:e6:
39:6a:25:9c:a0:ec:10:65:d7:1e:78:b6:1a:bc:8c:
cc:51:3b:1d:1e:8a:54:27:6a:1f:a6:70:0b:1f:73:
99:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.94.48.0/20
IPv6:
2a02:c80::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
38949
Signature Algorithm: sha256WithRSAEncryption
24:65:b6:a3:47:b0:43:f7:83:ef:cc:fd:83:9b:ee:f9:37:2a:
d5:88:4e:15:c1:e9:69:ae:fb:7a:2d:2b:b8:5f:74:1a:72:dd:
66:68:9e:a1:d5:68:47:91:c0:17:21:e6:b6:1b:4c:a0:03:76:
2f:6a:9e:08:fc:15:de:bb:8c:f1:6e:99:13:af:41:c3:35:36:
c0:62:33:27:ff:f6:8e:f0:3d:5d:e5:a4:22:d1:3f:20:a0:82:
21:b2:1d:0f:9f:59:54:ac:e6:dc:98:4a:e4:98:95:75:41:03:
42:dd:fc:b6:3b:5c:34:58:45:a7:01:97:1a:47:5a:08:c0:c9:
31:21:15:bb:2f:ea:0f:be:94:18:85:3d:ff:97:3a:cf:7a:64:
66:35:b8:e2:af:01:06:1b:58:68:0b:7a:ee:22:a8:ad:c0:35:
26:22:35:ef:4f:11:e6:48:1a:8d:7c:8d:0d:91:a0:bc:fa:ff:
c6:50:7d:29:88:43:ca:e7:8d:2b:91:02:7f:20:97:30:cd:44:
ed:ed:10:e4:81:6a:75:c9:71:4b:9b:90:78:7a:7c:2c:17:d0:
b3:25:1a:b1:10:1c:90:1f:28:03:33:7d:24:9d:ce:07:bb:0f:
ea:ae:58:32:8a:47:bd:37:55:a1:f7:ad:6b:c8:70:56:48:d6:
20:4b:52:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 05:13:15 2025 by rpki-client