Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer
File: Rk3PqWOZcWaS0kWoBIh8CdpFH48.cer (raw, json)
Hash identifier: TtQeYz/mIhLlfBcaUnLs8uXG11E14v50Ml4xp1mZ/EU=
Subject key identifier: 46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425222FEAD3315E6DFDF7537F76348F1A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 51173
IP: 37.203.48.0/21
IP: 89.106.136.0/21
IP: 185.94.44.0/22
IP: 2a00:7b40::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:2f:ea:d3:31:5e:6d:fd:f7:53:7f:76:34:8f:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=464dcfa96399716692d245a804887c09da451f8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:18:70:fa:92:71:74:ec:b5:31:d6:30:3e:00:
44:c4:2a:fe:f4:73:bd:d5:c7:5b:00:16:aa:f6:6f:
f8:62:0e:54:d6:e7:0b:cc:f1:66:d7:15:49:96:54:
14:19:c9:f0:c7:73:ec:9a:95:eb:36:ec:14:4b:9f:
b2:59:09:83:2e:6b:91:ef:d5:60:61:97:b4:92:84:
db:74:21:68:fa:22:8e:84:72:61:10:ca:c4:e4:2e:
4f:ed:da:a9:98:47:a5:3c:7b:7c:c1:9d:00:db:4b:
83:df:c7:89:b1:8f:d9:37:01:7c:c9:38:a7:dd:16:
16:0d:45:10:e8:8a:dc:f1:77:9d:f6:c5:25:d9:3c:
10:13:40:d5:5e:af:79:7a:56:c4:94:05:54:75:c2:
e0:10:b8:7b:33:9e:ca:b9:96:74:1b:6a:18:60:ae:
58:94:b8:c3:90:41:1f:47:ed:b6:8f:5c:8e:6f:e6:
32:0e:fe:8d:be:02:ba:6f:9a:ae:9a:11:83:d5:06:
f4:a6:35:fa:f6:c2:36:e6:d6:55:56:4f:78:4c:7d:
c5:54:bb:34:79:68:39:29:49:95:da:f8:6f:90:b0:
11:f8:3d:0a:8d:68:c9:3b:bb:41:c7:c3:d7:f8:fa:
d3:1e:36:e5:5e:0e:8b:3b:f7:c8:4e:86:56:73:80:
ca:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4D:CF:A9:63:99:71:66:92:D2:45:A8:04:88:7C:09:DA:45:1F:8F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6be5a6-eb0e-44b4-b6a7-af1f36811098/1/Rk3PqWOZcWaS0kWoBIh8CdpFH48.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.203.48.0/21
89.106.136.0/21
185.94.44.0/22
IPv6:
2a00:7b40::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
51173
Signature Algorithm: sha256WithRSAEncryption
9d:7c:4f:3d:25:a4:63:ca:e5:34:ba:66:b0:44:72:09:a7:28:
69:73:df:5f:38:99:27:36:52:51:c6:9e:a9:72:b5:32:f8:24:
ce:78:1c:f0:e0:8b:11:bf:06:b6:42:b7:78:86:61:de:35:2b:
51:78:f2:8d:29:7a:91:ae:97:a5:8f:ed:71:4d:10:fe:87:41:
a6:3c:c9:58:96:69:df:bf:26:ad:df:81:85:44:68:26:19:5e:
d5:9e:ca:d5:13:9c:65:08:32:ac:c1:8d:c6:3c:7f:20:46:f8:
51:55:9a:bd:e6:6b:b2:49:e8:21:3f:06:fa:06:6a:c2:02:97:
1e:ce:ed:84:7e:86:15:8d:1b:c1:fb:40:5f:dd:41:ea:80:09:
d2:71:9a:79:49:2f:34:22:48:3e:fa:7d:6b:44:f2:cd:b6:0b:
a2:2f:5b:1a:d9:52:ef:d6:6c:a0:c7:9b:11:2f:82:07:cb:e3:
0f:a9:e9:de:7b:1b:0b:5c:1b:01:d9:46:dd:94:2f:bf:63:bc:
0c:a0:a0:bc:1c:42:25:de:3b:00:9a:37:b8:30:f1:81:09:31:
de:34:88:4d:21:61:1e:66:62:14:fc:68:7d:51:90:3c:ef:73:
90:32:26:e2:26:e9:04:17:8b:11:2b:16:63:80:cd:2d:97:59:
cf:38:fa:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:15:17 2025 by rpki-client