Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/BwSD09YvGcCDV0bctyHIgyw7eSY.cer
File: BwSD09YvGcCDV0bctyHIgyw7eSY.cer (raw, json)
Hash identifier: Iy1TksbnrLYNvryGQnPiReoLa4FjClHPPp9BypB05O4=
Subject key identifier: 07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421445905E0DC0660F56831BABB8CB057
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:34 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60619
IP: 45.85.204.0/22
IP: 45.90.48.0/22
IP: 45.131.12.0/22
IP: 45.134.92.0/22
IP: 185.249.144.0/22
IP: 2a0c:6280::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:59:05:e0:dc:06:60:f5:68:31:ba:bb:8c:b0:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:34 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=070483d3d62f19c0835746dcb721c8832c3b7926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:49:2a:d7:08:72:15:6c:0a:08:31:86:3a:2e:
48:44:9c:5e:46:80:8b:32:31:57:8e:b7:0c:21:67:
5f:c1:75:92:f1:ac:e9:4e:70:d7:cd:54:91:73:4a:
9f:c7:45:4a:ec:6d:c4:1d:1d:d6:6a:ad:bc:f5:cb:
83:f7:34:30:2b:9d:b6:d6:49:0c:8e:9c:f0:ef:e0:
59:5b:4a:20:ea:9a:49:4c:77:06:c3:0b:ee:68:ba:
74:7a:1f:a9:bf:a3:b8:97:89:dd:00:02:15:5f:42:
47:b8:9f:f2:e4:ce:13:3e:9b:02:bd:96:28:80:f1:
8f:20:2f:2a:77:d2:60:d4:b4:25:a1:33:f9:9a:ea:
f3:c6:f3:6c:a3:e4:b9:b1:f3:19:87:85:29:e2:f2:
e2:58:32:c8:4e:a9:c8:c2:87:4d:88:a6:a3:59:0e:
65:2c:45:ae:a4:9f:b9:a9:0d:3b:db:5e:f9:1f:72:
ad:51:64:7a:4a:01:bd:5a:3e:bf:f9:d7:58:8b:3a:
2e:80:d6:ac:f1:2a:86:b9:b0:3f:ed:15:94:a7:10:
b8:78:c0:0d:25:3a:61:d9:c5:d2:52:3c:3e:cf:5a:
82:ce:57:59:9a:df:5d:29:f9:c5:db:63:0d:4c:6c:
f5:91:78:e5:7f:d4:5e:2c:18:8c:97:ae:cf:c4:84:
31:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:04:83:D3:D6:2F:19:C0:83:57:46:DC:B7:21:C8:83:2C:3B:79:26
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/6451c1-2bcd-4463-a700-d442c4f9e9bd/1/BwSD09YvGcCDV0bctyHIgyw7eSY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.204.0/22
45.90.48.0/22
45.131.12.0/22
45.134.92.0/22
185.249.144.0/22
IPv6:
2a0c:6280::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60619
Signature Algorithm: sha256WithRSAEncryption
08:91:ea:83:af:4f:9f:67:95:db:88:42:77:98:08:5d:47:2b:
78:e3:2f:12:88:25:f8:5f:a3:0a:01:39:2c:8e:37:ac:1d:5c:
4f:3f:12:7a:ad:47:46:b0:b6:64:00:be:00:57:03:d2:77:fb:
55:0d:48:6c:21:e9:56:23:f6:0c:d4:43:fe:07:67:32:ad:aa:
43:b7:3a:65:54:80:7c:e3:6d:dd:fe:06:74:b2:fc:21:e0:0c:
bd:45:20:7c:44:ba:e6:4c:5b:57:64:ac:43:be:f6:5d:90:8f:
4c:51:04:28:a0:4d:9a:b8:6d:54:88:02:20:bb:8a:f2:27:3f:
c4:06:72:c1:d5:79:af:32:a3:f1:61:77:91:31:f3:8a:3f:a7:
81:e4:6b:31:bd:5d:25:94:18:50:7c:28:02:ab:74:23:4c:3a:
27:4f:bf:8b:96:42:97:fb:fc:7f:4f:4b:57:51:89:ce:98:24:
b2:2a:d3:bf:7c:6e:a7:a3:1a:4f:c7:13:78:b7:65:63:58:2c:
ab:49:62:bd:09:c4:70:73:f8:c5:0c:65:b8:3f:41:00:1f:74:
fe:49:29:86:30:97:61:49:18:5e:6b:f1:1a:ee:fc:b2:7e:07:
0f:f7:fa:41:f3:8a:66:f3:00:fc:87:e8:65:f4:8c:06:86:d2:
8b:43:44:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:56:43 2025 by rpki-client