Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KBeCQ6CGawkSctHh60UeceQTuZo.cer
File: KBeCQ6CGawkSctHh60UeceQTuZo.cer (raw, json)
Hash identifier: rJVo3DHS8VeLFStzbdi9pyk8c2ke1MWqN2G6NLNmWjE=
Subject key identifier: 28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194228E2B5236E04F40FDFBDC8072DD7547
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 15:48:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204627
AS: 208152
IP: 45.85.220.0/22
IP: 185.61.248.0/22
IP: 2a13:86c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:8e:2b:52:36:e0:4f:40:fd:fb:dc:80:72:dd:75:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 15:48:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28178243a0866b091272d1e1eb451e71e413b99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:93:d8:e0:c9:be:90:85:ba:7f:24:cc:17:09:
b0:aa:26:99:14:e7:35:54:ae:d3:58:41:0a:cc:35:
f4:20:b2:71:a5:f4:06:ac:bb:51:5f:5a:e8:12:16:
3f:03:3b:d1:fd:4d:5a:24:95:bf:19:22:6f:2a:a9:
50:78:2f:26:72:34:ee:1e:b1:21:1a:f9:09:b9:c8:
e3:b3:9a:7e:67:b7:2f:b8:6f:65:18:26:a4:20:64:
80:5b:30:76:1f:28:5a:3a:7a:e6:ed:a0:4c:10:30:
9b:22:3c:b8:08:87:87:69:7f:1a:79:d2:7d:97:fc:
62:67:da:61:dc:b4:d9:b9:74:bb:4e:c8:cf:35:bb:
8b:20:26:b3:8b:c5:c3:fc:07:40:1c:07:c8:5c:60:
f3:1c:05:1a:a5:ec:f8:be:7f:4e:58:d5:19:32:da:
0a:07:b3:51:eb:cf:67:20:b1:93:da:4e:53:ea:29:
5e:fe:aa:3b:2b:e2:64:ff:21:ad:c1:57:92:01:bd:
9e:2d:73:01:ad:90:4f:11:c4:00:73:85:fa:f1:a5:
d9:a6:43:bb:ef:be:53:ee:4a:1d:f9:ef:7c:1b:0f:
35:d8:fc:c5:50:11:11:e4:eb:fb:2c:a6:b1:cf:5f:
42:63:86:3b:79:6f:5f:57:6e:52:f9:a1:c8:93:2e:
e7:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:17:82:43:A0:86:6B:09:12:72:D1:E1:EB:45:1E:71:E4:13:B9:9A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/747db8-ac57-46a8-b632-6ce3c03a134c/1/KBeCQ6CGawkSctHh60UeceQTuZo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.85.220.0/22
185.61.248.0/22
IPv6:
2a13:86c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204627
208152
Signature Algorithm: sha256WithRSAEncryption
08:bc:2c:f3:a1:a6:e1:2a:d4:e2:09:e7:fb:5d:f7:71:65:de:
06:2f:d5:e7:a1:8a:16:12:e7:da:f2:78:fb:56:93:e2:cf:1b:
76:a3:c7:f9:ee:38:d4:5e:8d:a4:5e:8e:d4:b8:76:06:5f:08:
e8:c4:5e:55:14:c9:55:44:7b:73:28:28:82:63:77:3c:55:f7:
e1:7c:3a:a3:4b:d9:1c:e1:b7:67:64:16:e4:01:97:01:1c:6d:
df:51:9b:c1:55:01:af:1b:ca:24:2a:3f:2b:ef:54:9a:af:6d:
6a:44:6d:aa:32:51:c6:16:a9:2e:5e:db:c4:b6:d0:53:4b:88:
27:c1:ec:ea:0d:7e:b5:28:3d:07:24:f7:f2:e1:fe:ee:a8:bf:
92:06:7b:3f:34:fc:11:3e:76:e9:db:c7:28:02:28:f4:ca:70:
f5:2c:3f:35:65:e2:44:55:51:89:9b:09:4d:7a:95:9a:7c:31:
41:e5:9b:17:8a:43:a8:f8:13:d4:5c:86:c6:7c:27:64:e3:21:
6c:d7:2d:4c:d9:7b:a5:a0:ce:c6:b9:c0:88:df:2c:c2:24:5c:
ee:92:a7:b5:e5:8f:5d:9e:f6:31:7b:c4:3c:8f:c4:b3:6a:2b:
ea:d8:8c:23:b4:dc:94:43:03:38:73:f9:16:3e:1c:54:e1:ea:
85:1a:18:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 18:21:56 2025 by rpki-client