Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer
File: KP1m5DoQRjOye6xTm5i9-Ov6ya4.cer (raw, json)
Hash identifier: cnOHn5D/1EUWNqu7LR6nAB5bZlK9gpGhpK8pfS04UKM=
Subject key identifier: 28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D64B5AF0D352CCAF8EBF0CA253DFE3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:22 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 203377
AS: 207508
AS: 210981
IP: 2.59.117.0/24
IP: 2.59.119.0/24
IP: 45.80.174.0/24
IP: 185.136.205.0 -- 185.136.206.255
IP: 185.207.39.0/24
IP: 194.147.216.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:4b:5a:f0:d3:52:cc:af:8e:bf:0c:a2:53:df:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:22 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=28fd66e43a104633b27bac539b98bdf8ebfac9ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d5:da:04:08:dc:7a:4b:c7:6b:d1:9a:43:cb:
48:0f:f9:31:e6:55:3c:fe:0f:89:37:98:fa:d6:ec:
c3:d9:c2:83:b2:e3:1d:df:ed:a6:7d:2f:ba:bf:c7:
f0:3b:c6:21:81:41:2c:81:c4:7b:5a:14:cc:b0:28:
a2:12:e8:62:c0:14:dc:78:e8:f1:43:83:bc:48:e1:
10:93:f3:02:8b:c8:d9:31:95:63:ad:85:4e:21:30:
0a:9b:aa:2c:cd:f6:91:1f:24:7b:e5:96:48:88:43:
7a:24:66:cc:7d:0c:58:87:2c:c5:e4:28:90:79:43:
85:b4:5e:9c:b8:3b:2b:61:81:b5:dd:e8:4e:97:c6:
6a:14:64:3b:f6:a0:f7:7e:92:5f:8f:d6:ef:b5:16:
5a:08:14:99:d3:29:2c:a2:bf:ec:c5:b0:2e:f4:ae:
3d:c8:8e:b7:12:cb:2b:f7:a0:4b:6f:ea:4a:8c:1d:
79:fa:ca:f9:c0:74:17:d4:48:e7:fc:45:4b:69:dc:
1e:3e:95:91:3b:5f:d6:a0:83:0d:7f:aa:85:ea:fb:
9c:0e:44:a8:95:21:e7:a7:be:b3:5b:cc:ce:ad:87:
05:f4:09:82:34:4c:97:16:00:de:f1:8d:5a:77:e0:
70:bc:dc:d0:0a:cc:e3:fe:d2:16:e8:f8:57:8f:a2:
82:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:FD:66:E4:3A:10:46:33:B2:7B:AC:53:9B:98:BD:F8:EB:FA:C9:AE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/8ed3b7-bb2d-4f4d-9db6-267669f35648/1/KP1m5DoQRjOye6xTm5i9-Ov6ya4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.117.0/24
2.59.119.0/24
45.80.174.0/24
185.136.205.0-185.136.206.255
185.207.39.0/24
194.147.216.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
203377
207508
210981
Signature Algorithm: sha256WithRSAEncryption
73:ad:78:e9:cf:c5:0f:b5:02:5d:af:1b:58:e1:43:f0:2c:b7:
3f:5d:41:4e:ed:a2:ab:0e:ce:74:e7:16:bb:cf:89:b9:df:4d:
a1:e0:b8:03:c6:b1:6c:a2:b0:0a:5d:5a:b5:9c:65:81:70:20:
30:69:3a:02:77:29:6c:b8:47:a4:3b:61:d0:57:0f:a5:3c:8d:
6f:8d:1f:4c:c3:2f:74:7d:f3:08:4d:39:90:97:3c:f7:5f:a6:
11:da:a4:31:91:a4:67:a5:99:40:a5:93:b7:40:8c:29:9a:51:
d5:22:b5:78:7d:79:c0:9a:48:4b:4c:89:43:dc:f1:40:11:01:
ec:73:e6:1e:44:b8:91:58:8d:06:39:ba:6e:b0:a6:24:ce:9f:
36:f2:a8:16:61:5d:26:6f:af:b0:67:98:d2:0a:e5:cb:6f:99:
7c:21:7b:14:dd:b4:2e:a8:b6:5e:bd:d4:5d:40:79:aa:15:5a:
6d:13:03:e9:39:bc:28:77:db:41:dc:d3:de:33:10:75:b1:3d:
fc:63:44:33:e3:f8:5d:93:77:3a:26:80:fe:d1:4b:e5:80:e9:
a6:46:c1:83:40:17:78:19:62:a7:2c:a1:51:c5:1b:15:44:a6:
99:fa:2e:fe:72:b2:4e:2f:77:e7:3f:49:9c:a3:f2:a0:1e:4b:
60:18:5a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 20:49:24 2025 by rpki-client