Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer
File: CdGmNLu3rvrYfRIaX-VFZIc4yMU.cer (raw, json)
Hash identifier: tatrkb/joAylTXhfnwsHxOItYw7vWPcCQikiYDS6e8A=
Subject key identifier: 09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FFA146CDA721D04E0CC926B7222C1A8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8769
AS: 199781
IP: 185.40.184.0/22
IP: 185.118.118.0/24
IP: 185.121.28.0/22
IP: 185.254.132.0/22
IP: 2a06:9c40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:fa:14:6c:da:72:1d:04:e0:cc:92:6b:72:22:c1:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=09d1a634bbb7aefad87d121a5fe545648738c8c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:e7:19:14:0e:dc:a2:2c:bf:3d:e9:0a:81:
8c:d4:67:e5:44:8d:34:97:89:3e:de:0d:34:5e:ce:
45:bd:e4:bd:da:d7:d1:75:76:28:4b:60:28:3b:f9:
1c:f5:09:d7:02:27:62:15:48:ea:f3:84:00:9f:12:
de:f2:b1:67:2a:63:2b:b3:49:79:e4:83:08:84:00:
8c:d7:2a:e2:50:a2:30:4b:a3:ba:6b:e7:07:0d:51:
42:ee:54:3a:77:ee:f0:29:2b:ab:c8:6d:4c:b0:08:
d3:9a:fe:bf:e8:e8:32:55:e5:a1:c2:01:59:c4:33:
a8:b4:5d:4e:46:5d:b7:2e:6a:e0:05:c7:b1:1f:1f:
23:64:7e:02:01:98:71:6c:71:a4:f8:6a:49:18:0d:
21:0b:4c:9a:ec:04:a4:bc:8d:7f:5f:70:f5:f0:ed:
54:fd:b1:d9:34:4c:53:f6:db:a2:e9:bf:7f:6c:a3:
5b:b9:24:9f:2c:76:da:57:9b:6d:a5:2c:be:6e:41:
f1:e7:6a:1a:82:ec:5a:3f:71:f6:59:06:85:f5:83:
6d:f2:46:92:4d:fc:e6:09:db:15:04:4c:bb:88:fd:
76:a7:02:a2:33:5d:4f:7c:9b:18:e8:88:2b:c4:c4:
f7:5d:c3:34:89:a1:cd:f6:1a:7b:9d:45:45:3f:5e:
67:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:D1:A6:34:BB:B7:AE:FA:D8:7D:12:1A:5F:E5:45:64:87:38:C8:C5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/2640df-b5d1-4c00-b2f2-5e5b8b28059a/1/CdGmNLu3rvrYfRIaX-VFZIc4yMU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.40.184.0/22
185.118.118.0/24
185.121.28.0/22
185.254.132.0/22
IPv6:
2a06:9c40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8769
199781
Signature Algorithm: sha256WithRSAEncryption
92:ab:ea:86:51:0c:d4:fb:c7:a7:e8:93:20:32:05:cb:cd:3f:
1a:28:62:71:42:a1:e0:f8:21:38:18:7c:41:36:45:42:0a:8c:
b3:3a:3e:85:32:1d:52:74:d0:69:14:49:3c:fc:8e:41:cc:e6:
c1:4a:d0:3d:0c:b2:9c:20:f4:eb:cf:c1:14:8d:a5:a2:e0:45:
a6:d3:15:63:ab:fc:fb:0c:c4:46:0c:b4:7b:ba:37:d9:01:f5:
60:80:4d:f5:e0:24:1b:b2:dc:57:cd:38:93:d3:00:b2:57:0d:
ec:1e:57:34:de:3f:89:a9:bf:50:07:42:f5:15:f6:79:2d:a6:
81:12:4b:99:ac:b4:b3:bd:b6:2e:a8:da:2d:24:0c:9e:a9:d4:
2b:c9:c0:57:54:c1:20:36:0c:73:17:3a:e9:0b:07:f5:f9:36:
fa:5b:1a:78:08:fd:1d:95:7f:08:02:61:4a:7c:81:de:4d:29:
35:3d:88:6e:bd:37:84:ae:02:07:dd:d6:0a:f8:44:da:94:77:
b4:03:b8:92:29:26:81:c1:0c:45:2c:2b:b6:f3:66:96:13:70:
f4:f8:e2:c2:f9:ae:c9:24:ca:cc:94:f1:6e:43:93:dc:a3:4a:
0e:a9:f8:30:29:c6:f8:8a:22:26:fa:94:df:9a:ee:75:ba:0e:
a1:02:f3:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:25:05 2025 by rpki-client