Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer
File: DXkBxDCuOfywW-tbNCZ_UiTwT2E.cer (raw, json)
Hash identifier: Z36dTAlrrRsborE49RQSB7H7M5kIwgOGejUVwBXJH7g=
Subject key identifier: 0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143CB4B2FAFDFD3796205141491A4B0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15422
AS: 207398
IP: 185.16.83.0/24
IP: 193.104.231.0/24
IP: 195.24.246.0/23
IP: 2a10:3500::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:cb:4b:2f:af:df:d3:79:62:05:14:14:91:a4:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=0d7901c430ae39fcb05beb5b34267f5224f04f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:20:b0:90:d9:df:d8:c2:30:67:57:82:99:
4b:8c:24:91:3c:96:34:79:4e:7f:88:7b:5e:6b:f9:
89:bc:dd:09:c8:b0:c0:15:92:ff:34:b0:77:36:8e:
a8:34:70:2b:20:8b:b3:14:7b:32:71:ab:6e:17:0f:
8a:eb:43:15:1c:cb:a3:9e:30:bf:d0:d3:b5:11:85:
56:37:e2:49:ff:c0:9e:5e:c7:2c:9b:56:65:15:29:
b9:ef:ec:46:65:d4:14:d8:85:bd:ab:5a:e8:38:b6:
d0:3e:b2:b8:eb:07:a0:f8:78:3f:7d:ee:60:d3:c0:
08:80:c2:54:f8:4a:44:91:32:59:a9:26:d9:48:30:
67:46:6c:cf:e6:eb:34:01:eb:d4:52:9a:5a:f3:c4:
a8:6b:b7:64:d5:84:42:5c:f1:e9:6b:c4:5e:c9:64:
d6:35:73:4e:80:0d:65:ec:fc:d1:dd:af:a4:c1:38:
05:72:7f:df:b2:08:1a:57:a6:a0:c5:2a:23:19:21:
42:64:ef:42:bc:32:7c:e2:4e:c6:f3:61:30:d1:2e:
b7:97:92:9c:90:26:7f:92:23:72:f5:b3:75:5b:b4:
4a:47:1f:7a:a4:d4:9b:60:8e:aa:d4:ca:85:7e:d7:
48:ca:f3:8b:2c:70:0a:da:87:af:e4:e4:a8:3c:b7:
2b:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:79:01:C4:30:AE:39:FC:B0:5B:EB:5B:34:26:7F:52:24:F0:4F:61
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/6456de-740b-434d-b765-171d9f2cce3d/1/DXkBxDCuOfywW-tbNCZ_UiTwT2E.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.83.0/24
193.104.231.0/24
195.24.246.0/23
IPv6:
2a10:3500::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15422
207398
Signature Algorithm: sha256WithRSAEncryption
a2:a5:82:9d:ea:3f:89:d5:2a:cc:e9:cf:64:af:7e:f4:38:73:
91:ca:f7:a9:a1:19:a0:ca:39:93:63:27:28:84:57:0d:31:c5:
d1:d9:d6:fb:e6:3f:dc:0b:10:57:bc:f7:4b:91:bb:90:0e:42:
64:f5:58:02:b1:79:9d:77:44:b6:d6:0a:c7:ea:bb:66:e0:c8:
9c:ff:ee:f5:45:fa:6a:45:12:f3:93:49:ef:01:02:80:13:c5:
b1:46:d5:6b:a0:c7:59:4d:ac:6b:61:cc:45:f4:51:05:ec:6b:
58:88:eb:b3:e6:cf:35:35:37:dd:26:d8:0a:f0:96:70:8b:43:
4c:44:8b:c4:60:0f:34:db:9a:9a:74:69:26:88:11:2f:15:46:
30:77:bb:c6:c7:af:15:79:cd:d2:78:ab:c1:28:50:56:46:8e:
82:c6:a4:ba:df:3d:74:8d:66:08:6d:ac:95:db:24:9b:22:58:
7a:c5:0c:1f:1b:98:3f:15:58:c1:b3:f2:59:f5:eb:c4:1c:19:
6f:a7:38:59:48:f3:e8:0b:e4:9d:e8:dd:d1:18:b9:28:06:39:
63:8e:e7:eb:51:83:ac:61:4e:6f:2e:29:76:a7:75:7f:65:9f:
e7:80:70:6d:5c:92:84:29:f1:1b:54:7b:a4:91:b9:30:06:f1:
ed:d1:92:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 06:31:35 2025 by rpki-client