Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Pgvo5I26B98hcRdFuGnjkRzpjiA.cer
File: Pgvo5I26B98hcRdFuGnjkRzpjiA.cer (raw, json)
Hash identifier: S/xFallS8XaBH3u72A07Ol5Q4N+3wQap42DmvBA9Qq8=
Subject key identifier: 3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B33A4BD146B45410D3A17060B9E7DE
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:48:33 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8938
IP: 62.29.128.0/17
IP: 212.38.192.0/19
IP: 212.203.128.0/17
IP: 213.218.64.0/18
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:3a:4b:d1:46:b4:54:10:d3:a1:70:60:b9:e7:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:48:33 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=3e0be8e48dba07df21711745b869e3911ce98e20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ba:a9:94:6e:3f:83:cb:76:ae:12:be:9b:5e:
0a:78:5d:ce:3c:86:c2:68:91:99:9f:a4:a3:4a:e6:
fb:8c:45:0c:7a:5b:0c:58:27:2e:64:d8:34:4b:3e:
d3:19:dc:52:05:4b:f8:7c:67:47:45:67:67:cc:b4:
0c:c6:af:aa:2c:85:ae:38:40:dc:62:17:d1:16:07:
e1:9d:b2:32:b6:47:5d:df:14:fd:8e:d9:01:64:a1:
bf:02:c8:8c:61:ab:fa:3b:5c:7f:01:24:b1:b0:33:
14:a2:16:51:09:07:08:39:91:73:5d:dc:7c:3f:16:
81:68:e2:38:ad:08:5e:33:b8:9b:db:3a:f0:6e:34:
85:ed:88:fc:52:b5:92:f8:12:d1:4c:b8:35:ad:6d:
fc:0c:84:a0:59:56:bc:24:3d:a4:ae:96:38:1a:05:
18:06:2b:7f:3f:12:d1:76:d7:c9:31:c2:0c:af:c0:
0f:8e:93:d0:a5:68:f5:58:dd:07:97:43:fd:91:8b:
77:6a:91:c8:72:25:da:a8:e1:81:30:89:e9:a9:f1:
25:c5:04:70:67:a8:8e:0c:46:21:86:46:aa:27:68:
e3:ad:4a:8b:2b:f7:3d:d1:c9:85:07:7a:fe:ae:1d:
e4:78:7f:d1:1f:37:d2:17:70:d2:fa:2b:3a:b0:00:
dd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:0B:E8:E4:8D:BA:07:DF:21:71:17:45:B8:69:E3:91:1C:E9:8E:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/95bce9-1e8e-41c1-89f8-20f9f0dbf458/1/Pgvo5I26B98hcRdFuGnjkRzpjiA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.29.128.0/17
212.38.192.0/19
212.203.128.0/17
213.218.64.0/18
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8938
Signature Algorithm: sha256WithRSAEncryption
70:89:3b:a0:3b:93:d9:80:33:64:43:7d:21:c8:a7:ce:f3:1d:
eb:01:e3:b2:78:64:de:4f:b6:26:46:fb:a0:f1:24:ca:f5:d4:
46:84:03:37:c0:08:32:24:86:d7:03:69:4e:af:bd:2e:c5:02:
32:4a:ed:b9:5a:74:db:a0:e2:03:18:e4:ee:09:4d:fa:17:e2:
4f:77:a5:ca:0f:eb:b3:35:c6:ea:d2:85:11:4b:37:50:39:da:
5e:4a:01:6c:fb:6a:79:6a:d4:a6:28:fc:a8:ee:e5:aa:b6:05:
e3:7c:0c:3f:9d:f5:0e:64:f2:b9:ca:45:c2:43:3f:f5:fa:bd:
20:ef:26:dd:73:d0:7f:d2:5c:12:c2:af:aa:ba:93:1c:48:aa:
11:84:44:5f:53:1e:28:bf:fa:03:6f:90:6c:5c:e0:50:ee:75:
45:78:e5:3e:db:ed:bb:1a:b2:a8:19:bf:04:c3:be:46:2c:d4:
78:ef:14:ee:6e:b2:f7:20:ab:f4:3f:83:13:4c:5a:3c:0b:f4:
7f:1f:c6:fa:95:f2:ee:2f:71:35:bf:b6:d4:bd:78:38:8d:a3:
29:ae:58:52:81:bd:13:56:f7:54:da:fd:cd:32:0a:13:85:a8:
13:31:2e:7d:2a:3a:7c:41:f7:39:49:7b:52:f9:f3:d9:44:16:
76:d8:8d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 11:45:19 2025 by rpki-client