Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer
File: AGQrYHuUoUP_QcVUyRO9WmUfjAU.cer (raw, json)
Hash identifier: U4xrw289EFl20EOstrDeSu+IH+LN/tKweCJB0STBV+A=
Subject key identifier: 00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B367727161F0885D9E3A732D9FAF79
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:44 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 202025
AS: 204602
IP: 5.8.252.0/22
IP: 37.98.204.0/22
IP: 93.119.16.0/22
IP: 185.66.44.0/22
IP: 185.72.112.0/22
IP: 185.125.28.0/22
IP: 188.240.192.0/22
IP: 195.189.208.0/23
IP: 2a04:7540::/29
IP: 2a05:340::/29
IP: 2a05:3900::/29
IP: 2a0c:ee80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:67:72:71:61:f0:88:5d:9e:3a:73:2d:9f:af:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:44 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=00642b607b94a143ff41c554c913bd5a651f8c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:38:06:f2:e1:f3:5d:16:c1:84:49:84:5a:21:
f0:04:39:74:bd:7a:2a:6a:03:f2:f3:3f:65:6c:d8:
21:4e:9a:97:0d:bc:3a:14:6d:29:c7:7e:74:6f:33:
15:a4:0e:d7:a2:77:8f:bb:9f:41:ed:22:c5:23:4e:
5c:67:85:3f:93:57:37:d9:bc:0b:91:1a:68:be:5a:
24:17:95:90:97:74:9e:72:14:4c:f5:e1:a5:09:d3:
12:0e:57:3b:46:51:53:aa:0b:13:fc:08:c7:9f:b3:
a5:7f:08:c8:d2:02:31:a9:45:29:09:5b:55:49:4d:
24:f5:5f:a7:37:bf:0d:8b:a2:f3:72:01:2e:2a:ad:
35:a0:6f:94:d4:d0:57:ef:1f:46:5d:a0:b9:25:ad:
f4:03:c2:84:94:01:1f:40:88:25:04:b6:8a:50:f3:
0e:4c:44:d2:29:ff:72:40:c3:f9:5b:a1:14:1f:dd:
a8:b9:ee:22:33:df:b7:88:58:d7:1d:40:49:0b:ab:
11:04:05:92:f7:73:71:37:8a:65:d1:a5:82:fe:db:
a7:aa:6b:8f:9c:c7:0b:6e:5d:c1:06:4d:78:ce:08:
35:51:b1:e2:f1:45:40:c1:4d:a4:14:06:3e:32:45:
80:3f:85:81:0d:bf:6d:0f:1a:87:b7:d1:16:69:ca:
c2:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:64:2B:60:7B:94:A1:43:FF:41:C5:54:C9:13:BD:5A:65:1F:8C:05
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/ac9aba-9735-4b9d-8eae-19bc7bdccbc1/1/AGQrYHuUoUP_QcVUyRO9WmUfjAU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.252.0/22
37.98.204.0/22
93.119.16.0/22
185.66.44.0/22
185.72.112.0/22
185.125.28.0/22
188.240.192.0/22
195.189.208.0/23
IPv6:
2a04:7540::/29
2a05:340::/29
2a05:3900::/29
2a0c:ee80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202025
204602
Signature Algorithm: sha256WithRSAEncryption
5e:0e:26:8e:34:be:1c:0b:46:55:65:ec:38:a5:cb:18:41:07:
d7:76:e2:6d:d4:9c:0e:32:00:8e:8b:fe:57:78:58:dc:c6:10:
72:9b:5f:9a:08:f1:52:d7:a4:47:6d:36:85:8a:75:db:e0:0d:
f6:af:4d:03:3d:d6:37:29:01:ad:de:d7:aa:d9:18:5a:90:21:
07:bd:4c:f7:df:ad:1f:bc:94:41:a2:2e:39:63:e3:6c:82:ed:
1d:5a:c9:b1:1f:14:d9:3c:10:c2:51:f7:8c:db:54:5d:90:bc:
62:c9:5b:61:65:39:26:35:e2:b0:12:7a:f3:aa:e1:c4:c8:37:
c9:75:fe:8d:7a:78:a6:ce:d8:40:85:0c:5d:a6:c4:4a:fc:e3:
2c:10:25:4f:8d:ef:61:4c:cb:65:58:ae:f8:16:fc:33:d2:e8:
c7:06:8f:53:87:0c:30:c1:d8:4a:b8:2e:00:6d:19:d3:ad:a8:
67:e3:5b:5e:98:5b:97:94:ec:05:71:62:8b:88:8a:7f:e9:4b:
57:70:4f:1e:c6:cf:59:4f:fe:9b:e2:80:03:f6:20:c7:fc:18:
77:31:b5:20:b9:b4:7a:c8:1d:ac:c7:fb:7b:64:b0:2b:3a:f0:
55:31:2e:5a:93:44:48:ec:2f:1c:40:01:d4:1c:3b:bc:d2:1c:
6a:8e:12:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 21:48:08 2025 by rpki-client