Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/T7K7e61Q8ZIYEKAo547dZfgfan0.cer
File: T7K7e61Q8ZIYEKAo547dZfgfan0.cer (raw, json)
Hash identifier: eEEPlN4MhXLdZHEkFQK5CWnACml2O/pQN+X7gHHrBtI=
Subject key identifier: 4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942521ECE642697BDFEA99CBA3A315D233
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:27 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31715
IP: 5.150.156.0/22
IP: 91.238.70.0/23
IP: 185.22.40.0/22
IP: 185.141.116.0/24
IP: 2a07:23c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:21:ec:e6:42:69:7b:df:ea:99:cb:a3:a3:15:d2:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:27 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4fb2bb7bad50f1921810a028e78edd65f81f6a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:31:6c:f1:0f:0c:c5:c5:a5:de:60:22:aa:31:
55:72:b7:de:75:b9:cc:ee:0d:07:14:93:09:59:f7:
b3:68:a2:ec:a7:f0:9f:2c:8f:f7:79:7b:45:fd:36:
20:a5:8f:0d:fe:79:5d:ef:99:45:9e:56:59:b6:fa:
06:83:df:34:6d:1a:12:d5:45:2f:6d:da:ce:37:b9:
cf:17:2a:a1:d1:28:15:89:d6:9a:00:39:af:af:f9:
3f:ee:31:0d:4a:18:6f:39:55:82:52:17:1b:a4:39:
d3:75:38:d2:17:51:5b:03:02:4c:5d:50:73:80:03:
47:13:0d:a5:a0:de:ae:81:30:76:a1:c4:ba:df:eb:
e5:3a:bd:b2:44:06:7d:33:e9:a6:9f:d0:a8:20:11:
e1:73:fe:5a:d5:90:ce:fb:86:6a:04:6e:4b:bc:c6:
de:ea:fb:21:9b:c9:ba:44:aa:a0:34:f3:81:95:32:
45:cb:08:d1:b9:64:06:c3:49:5d:73:97:12:d9:36:
6a:28:1d:9a:a6:18:ac:be:49:9e:c8:6b:ea:47:a2:
33:43:bc:c9:46:64:62:70:cd:8b:1c:e3:f1:4b:b8:
ec:9c:ae:c4:c0:46:ab:65:7b:54:4b:15:55:21:dd:
5e:eb:22:41:7d:04:be:33:f8:9a:df:11:16:43:d8:
fd:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:B2:BB:7B:AD:50:F1:92:18:10:A0:28:E7:8E:DD:65:F8:1F:6A:7D
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fda382-4257-41c3-8ec6-27fbc99ea3c6/1/T7K7e61Q8ZIYEKAo547dZfgfan0.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.150.156.0/22
91.238.70.0/23
185.22.40.0/22
185.141.116.0/24
IPv6:
2a07:23c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31715
Signature Algorithm: sha256WithRSAEncryption
6c:b6:27:21:86:a7:b4:58:12:12:95:c7:b7:fc:02:d8:22:a9:
e3:04:24:8c:c4:69:9e:f1:61:42:66:19:09:11:8f:39:c8:47:
39:3f:0a:5e:aa:d4:e3:27:0a:b9:0e:7d:07:f8:7c:28:e0:36:
ee:6e:dd:4f:0e:d7:c1:67:a9:fc:ae:15:79:76:59:82:81:7b:
5d:ec:ad:3a:13:7c:11:c9:cf:6f:d3:20:4e:4b:b6:7d:00:0d:
8e:4e:48:d9:db:3c:1d:c9:8f:0f:83:41:c7:54:30:27:da:57:
dc:b7:56:1a:b1:84:a6:f7:38:5f:6f:dd:4f:14:49:01:9c:ef:
5e:3b:30:c9:94:38:85:13:cf:1a:d3:c5:7a:cc:67:0a:7c:86:
15:02:14:a1:79:6f:19:f6:26:ec:d6:65:48:d9:48:75:44:57:
47:61:57:d1:7b:9f:cc:a1:94:37:54:49:1f:99:0d:e0:82:02:
5f:26:c8:49:15:4b:d5:5a:86:87:da:15:80:37:1f:13:09:58:
e8:65:36:0b:55:44:a1:7c:af:cb:62:d6:9f:de:96:3a:8c:98:
50:0c:88:71:1e:d2:28:63:f4:66:5b:2d:60:c4:38:bf:92:3b:
f8:81:43:8d:9d:99:40:20:64:76:37:86:a5:4f:8e:fa:62:58:
49:a3:37:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 00:35:29 2025 by rpki-client