Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer
File: KHXxhYI9vGqC0QWzyhYHfbVyk3c.cer (raw, json)
Hash identifier: RQ/6TBP6B430AoaBURgvtn8YgkqFx2VTNX3y3N/aH/U=
Subject key identifier: 28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942823E4912ADD009DD3DB73E5DDBED8C4
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 17:50:28 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31472
IP: 37.157.48.0/21
IP: 84.247.32.0/22
IP: 89.35.164.0/22
IP: 149.19.176.0/22
IP: 185.2.76.0/22
IP: 185.34.80.0/22
IP: 185.60.4.0/22
IP: 185.61.88.0/22
IP: 185.86.20.0/22
IP: 185.91.40.0/22
IP: 195.206.184.0/21
IP: 2a00:b840::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:28:23:e4:91:2a:dd:00:9d:d3:db:73:e5:dd:be:d8:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 17:50:28 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=2875f185823dbc6a82d105b3ca16077db5729377
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:fb:47:26:9a:89:3f:60:59:ea:90:35:2e:3c:
36:bc:1b:55:6b:8c:cf:c3:cc:c7:4b:a2:f8:c5:31:
ab:f0:07:16:fe:ac:66:a2:5a:3b:8e:bb:67:3c:ef:
b1:31:6c:67:f2:e6:ad:d7:98:d6:c4:ac:b1:ed:73:
55:01:df:12:52:32:12:c3:ec:8b:8d:98:aa:ee:91:
60:47:b3:42:8a:4d:26:5b:23:76:ce:fb:71:c5:7e:
78:aa:d7:90:50:72:b3:51:b7:7e:f6:12:e5:9c:d4:
71:ff:42:a8:43:aa:92:8f:cf:f4:63:60:13:2a:58:
88:e9:a5:af:cb:05:34:c2:13:d6:0b:04:14:de:4d:
ad:04:8a:ee:06:1a:0e:59:69:98:c6:00:d2:c9:05:
66:52:7c:a0:d3:b4:db:e7:b4:6c:a4:20:1a:2d:96:
ff:80:da:78:4b:9a:ac:c3:82:d1:1d:56:18:33:fa:
44:c1:21:85:8b:ff:21:d6:19:f0:f0:00:20:88:9c:
36:ba:29:0d:1f:34:3f:f3:79:08:de:98:d6:61:4d:
44:6f:d7:37:94:57:31:8f:95:fa:48:44:a1:8c:0f:
40:3c:fa:ce:31:00:40:5f:c0:d7:b7:e9:a7:fa:85:
3e:12:61:1a:65:ed:03:09:cc:97:51:5f:93:d6:7c:
fa:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:75:F1:85:82:3D:BC:6A:82:D1:05:B3:CA:16:07:7D:B5:72:93:77
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/a04da6-9887-42a5-8ed7-94e5d49cc628/1/KHXxhYI9vGqC0QWzyhYHfbVyk3c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.157.48.0/21
84.247.32.0/22
89.35.164.0/22
149.19.176.0/22
185.2.76.0/22
185.34.80.0/22
185.60.4.0/22
185.61.88.0/22
185.86.20.0/22
185.91.40.0/22
195.206.184.0/21
IPv6:
2a00:b840::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31472
Signature Algorithm: sha256WithRSAEncryption
87:53:22:d3:f2:58:48:23:06:4a:13:7e:0b:48:24:94:ce:d7:
bb:6e:14:96:4e:e5:40:cd:6f:8a:c4:ec:55:99:8a:59:e9:54:
cd:e4:e2:e8:2c:52:2c:23:80:b7:b0:f1:5f:52:9b:50:9e:9d:
27:6c:7a:88:ce:04:d1:cb:57:43:14:13:f2:55:58:1f:31:5b:
05:ec:54:4d:bd:13:b9:f7:aa:65:d8:45:79:61:49:b6:55:71:
73:a2:4a:78:c8:8d:91:4e:26:c2:74:97:72:77:a5:24:76:85:
d7:53:c7:ef:35:21:67:85:9c:17:27:6f:59:98:6e:84:55:9b:
65:bf:c0:97:fe:bd:4c:e1:d7:3d:1a:07:aa:64:e2:fa:c6:2d:
96:0b:f3:d9:b9:bd:51:a0:87:00:37:2e:e6:6d:9a:74:f9:d6:
f9:15:f6:a3:f0:56:b8:20:ec:59:15:02:38:8d:11:50:28:9a:
f0:40:7e:47:f9:b6:33:2f:20:f0:8d:3d:41:35:68:78:a3:8a:
10:29:1a:64:6b:d9:c9:e3:de:be:30:7a:f9:50:19:09:4c:6a:
ca:fb:04:c2:a9:ec:15:80:f0:ca:1f:ce:00:62:6c:c3:d2:17:
11:c2:a0:ac:46:ea:38:d4:20:fe:d5:88:86:4b:a8:79:af:a8:
fe:c0:f3:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 12:08:52 2025 by rpki-client