Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer
File: IcFnLbu_cWWmqDsyJ6cRnw0x6O4.cer (raw, json)
Hash identifier: fpF9qapy1A+RJobv2F3MGjCGJ0u0pMp/0YdQxqbkiLg=
Subject key identifier: 21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194266C3565A86D4A3B5826EE93EA65049A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 09:50:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204114
AS: 210605
AS: 213336
IP: 45.148.176.0/22
IP: 185.25.112.0/22
IP: 2a00:7e60::/32
IP: 2a11:61c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:6c:35:65:a8:6d:4a:3b:58:26:ee:93:ea:65:04:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 09:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=21c1672dbbbf7165a6a83b3227a7119f0d31e8ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:5a:a1:1c:f1:0e:6b:b6:7a:86:30:3f:4e:ae:
ee:d2:d1:bf:32:61:a4:17:55:e9:86:97:f6:69:d3:
d5:9e:03:32:40:59:22:97:93:87:02:3c:de:3d:36:
a7:a3:5f:7e:1d:9d:2c:51:bb:b5:51:8a:4c:34:5e:
f9:f6:f5:62:1e:0f:3f:33:f4:50:86:0c:ec:8b:20:
ff:cf:65:54:f9:4b:77:c8:53:6e:0e:75:5f:13:18:
91:02:b2:c6:f3:aa:a8:c7:05:62:63:73:11:4e:fd:
ce:db:ad:78:db:4e:35:9a:88:38:04:ab:c0:23:78:
b8:8c:ec:84:b8:e7:41:6d:6e:bf:fc:df:1b:90:8c:
1e:39:25:ed:9b:eb:e1:ed:67:ca:d8:4a:d5:73:0d:
5f:75:c3:49:b3:d5:4d:70:6d:c7:84:38:e0:93:2b:
26:07:98:cf:59:ea:ee:c2:71:3d:d9:c1:9e:7c:37:
ee:39:f6:4c:ad:5c:26:ef:5f:1a:ce:6a:7a:05:b6:
50:b9:9b:70:1f:88:4b:fa:a6:a8:9c:cb:6d:bc:fb:
b4:d2:74:cb:32:35:1c:4a:0b:a6:60:09:70:18:11:
b1:bd:8c:db:3b:ea:54:ec:ed:56:de:66:58:9e:f8:
92:41:37:22:45:15:c6:ab:20:14:2c:f1:0e:c2:1f:
03:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C1:67:2D:BB:BF:71:65:A6:A8:3B:32:27:A7:11:9F:0D:31:E8:EE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/c05d4c-96d3-4b57-ae34-3477c7fcd4d9/1/IcFnLbu_cWWmqDsyJ6cRnw0x6O4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.176.0/22
185.25.112.0/22
IPv6:
2a00:7e60::/32
2a11:61c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204114
210605
213336
Signature Algorithm: sha256WithRSAEncryption
1a:be:0d:99:57:59:ea:8e:9e:42:85:ff:38:f5:63:dc:fa:ca:
5e:25:67:27:4b:4b:0f:ed:e4:d0:af:1e:60:c9:f2:4a:d5:88:
c0:1d:9e:bc:4b:14:81:ce:c2:6f:27:e5:e2:45:23:a8:e8:f0:
df:fc:ba:4f:5a:84:10:3b:3c:6d:67:5b:da:12:ec:b3:51:b9:
eb:23:87:89:6a:b7:49:7c:e9:e1:4e:d7:16:62:e2:84:b5:f5:
c8:c6:a0:ef:a5:5b:56:40:29:2a:8c:ec:9c:15:6f:6b:8a:0c:
20:18:26:fe:6c:80:8d:3c:fe:ed:bd:65:ff:64:23:bf:6a:44:
85:d3:30:d9:a2:b8:77:aa:86:af:7c:dc:ba:c2:eb:55:f0:c3:
8a:bd:15:08:f4:f1:0a:44:dc:25:46:9c:e1:e5:ab:d9:8b:24:
a9:d0:7c:c5:3f:95:9a:78:22:bb:b4:55:9d:a1:f3:2a:c8:eb:
e8:0c:5f:4f:3f:e2:c2:1d:54:b6:cc:61:e7:34:f4:40:cb:da:
f2:a2:70:18:41:87:92:93:d7:6c:93:0f:85:ab:58:84:2f:5e:
58:2e:96:f2:25:88:36:93:ea:e3:2e:78:1c:93:19:da:4b:d2:
4a:e8:b4:a3:82:c1:44:7b:69:55:80:10:30:52:ac:f5:eb:04:
61:3a:25:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 05:42:53 2025 by rpki-client