Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer
File: 9c9zs-Rfdy-uG5FWkLMXNEw_RCs.cer (raw, json)
Hash identifier: 3hqGxX2G/eCjxzNI1oVpBYK9wy34HiFSNhyIwfBta2U=
Subject key identifier: F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942826F6DE567BCA76C4B3FD8B7D7C6683
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:53:49 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213166
IP: 37.44.214.0/24
IP: 86.105.182.0/24
IP: 91.194.110.0/24
IP: 92.243.84.0/24
IP: 176.223.109.0/24
IP: 185.197.160.0/22
IP: 193.42.108.0/22
IP: 2a0f:ea80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:26:f6:de:56:7b:ca:76:c4:b3:fd:8b:7d:7c:66:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:53:49 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f5cf73b3e45f772fae1b915690b317344c3f442b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:31:3f:eb:62:27:98:cb:95:64:50:51:60:ac:
64:7e:dc:31:97:6b:2a:ab:d5:b3:5e:5c:8e:94:e5:
53:fd:f5:b6:7e:95:78:9e:1e:ea:1d:0e:cd:79:bd:
7a:10:ba:55:e8:d0:f6:7b:50:9b:62:bc:0d:62:97:
46:11:ee:8e:44:f8:dc:7c:bd:74:cd:b1:bf:d8:cc:
a1:36:79:90:4f:89:bb:95:7e:9d:c7:f6:dc:4b:b7:
7b:08:43:b6:18:8d:5f:b3:e2:e7:e6:27:27:b4:77:
1e:e6:ae:59:3b:bc:61:a6:1c:9a:0c:d6:2b:a2:a5:
43:b8:a2:5a:77:87:69:ed:fd:c6:c2:d1:55:cd:bd:
74:3f:42:c8:75:d0:9b:3f:80:3c:c0:78:c9:e2:55:
9b:e1:17:79:82:65:7a:18:5e:b2:ab:80:4b:6c:d9:
2c:a1:ff:f4:af:54:c9:21:3a:f5:41:76:0c:78:68:
82:1f:00:90:44:9e:10:4f:41:fc:e0:17:a2:8f:fb:
9d:00:b7:24:df:0d:47:04:e4:d0:a0:29:68:0f:c6:
31:f3:ad:8f:41:79:16:37:9d:00:f0:9d:04:b5:48:
a3:2e:a3:65:6a:a8:2c:85:a8:59:28:a4:84:9b:24:
55:2c:de:1c:25:43:dd:a8:d7:90:cc:2d:41:31:e2:
38:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:CF:73:B3:E4:5F:77:2F:AE:1B:91:56:90:B3:17:34:4C:3F:44:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/3be865-5c79-47c0-aa4d-1c654e02d75d/1/9c9zs-Rfdy-uG5FWkLMXNEw_RCs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.44.214.0/24
86.105.182.0/24
91.194.110.0/24
92.243.84.0/24
176.223.109.0/24
185.197.160.0/22
193.42.108.0/22
IPv6:
2a0f:ea80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213166
Signature Algorithm: sha256WithRSAEncryption
1c:1c:6d:4f:01:d0:d0:86:67:eb:2f:6d:a8:13:43:6f:40:11:
92:f2:1d:7b:3b:71:4e:58:ac:0f:a1:d2:94:9f:0d:32:2a:33:
25:72:8b:6b:df:2b:f5:7c:43:ae:20:0a:8a:a1:4d:64:e0:f9:
2d:3c:90:3f:1e:ae:ba:cc:f0:71:8a:52:a7:fe:10:7b:fb:3c:
f5:dc:99:bc:0e:d2:44:32:a4:8d:da:2f:74:b0:3a:61:7c:32:
df:55:fd:19:f0:fb:e9:61:c4:30:37:8f:fb:7a:14:65:09:3d:
4c:1b:25:f1:78:f5:3c:8f:b3:06:f1:99:90:e1:2c:c1:35:d6:
70:7d:60:d5:06:9c:4e:54:4f:b8:18:b1:55:9f:d2:ef:d6:3f:
41:7c:2a:4f:1a:9f:cc:de:ae:07:f0:bc:fc:a9:ff:75:bd:0f:
95:fa:34:ba:fc:00:6c:f1:6f:77:74:91:bf:af:0d:63:37:c9:
f4:cf:2b:9a:fd:84:7f:a4:17:0e:64:4a:e9:de:4a:4d:fd:e4:
52:39:bb:7e:78:d7:53:d0:0f:98:5e:ae:ab:33:58:13:49:c2:
81:3c:0a:3c:49:65:1c:ab:38:70:0e:e0:ce:64:57:25:b9:3b:
74:d5:61:0c:74:41:2c:5f:f7:98:2f:f8:9f:02:c7:30:68:00:
0a:ea:a2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 14:30:53 2025 by rpki-client