Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer
File: WhQcUJCCTQoXwp7EBQ4hAHET-9o.cer (raw, json)
Hash identifier: 9W4ned84ekUUJveMHfkGxrBFXgdXo1qL1JuZFJvN4Oc=
Subject key identifier: 5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D63A25F316AAB9BE94BABC8DC8B0DD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:48:18 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31688
IP: 5.63.24.0/21
IP: 91.190.168.0/21
IP: 185.85.76.0/22
IP: 2a02:798::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d6:3a:25:f3:16:aa:b9:be:94:ba:bc:8d:c8:b0:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:48:18 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5a141c5090824d0a17c29ec4050e21007113fbda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:25:dd:dd:a4:6d:a5:15:80:1e:fc:3f:ac:22:
cf:39:45:82:d7:af:83:d3:3a:ac:91:b6:92:ab:0b:
25:94:d1:26:a1:36:ce:74:b5:16:af:0e:7f:f7:3c:
77:69:71:71:c8:6a:ed:97:99:ef:34:ab:f5:eb:42:
8b:ec:13:64:26:a2:99:ea:91:64:38:dc:48:49:4a:
6b:d0:c6:12:9d:11:4f:83:a0:31:bb:98:94:0f:39:
a4:a1:32:4d:ad:8d:6b:dd:d1:da:c2:81:a5:a7:b8:
79:fa:52:ae:80:72:84:22:f2:6c:13:6a:ac:f1:6a:
f3:d3:bb:28:4d:c3:11:2b:f1:e0:51:c3:50:da:66:
af:f5:bf:18:d1:2e:a5:56:25:fb:eb:76:e2:65:7a:
69:86:a9:22:53:f1:e1:5d:1b:43:e8:6d:2c:21:c5:
ed:ba:ca:8f:63:e6:7a:2c:1e:77:fa:17:aa:fe:12:
2e:9a:51:4b:22:ed:3c:8c:d8:35:31:f9:da:1e:a6:
fe:03:78:ab:b4:59:36:e4:ca:75:07:d5:f0:21:f6:
0f:d6:ab:6a:98:a1:a9:4c:2c:08:34:81:97:22:ae:
25:9c:63:a4:a1:a8:2e:dc:8b:67:f7:d9:75:f2:f5:
6e:c2:28:ea:c4:f5:d8:3b:7b:34:1d:4a:72:af:a9:
5f:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:14:1C:50:90:82:4D:0A:17:C2:9E:C4:05:0E:21:00:71:13:FB:DA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/b20e90-bf6e-4e25-87d5-eceeff8e84e0/1/WhQcUJCCTQoXwp7EBQ4hAHET-9o.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.24.0/21
91.190.168.0/21
185.85.76.0/22
IPv6:
2a02:798::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31688
Signature Algorithm: sha256WithRSAEncryption
9a:6d:0d:4f:2d:58:83:96:21:49:26:d9:f6:59:96:76:c2:37:
d3:dc:53:51:4d:a0:5c:b5:ad:d1:f1:12:a4:c3:4b:b5:39:a4:
13:80:cb:e0:e9:2b:a4:43:19:29:dd:25:2b:d7:15:85:bd:d0:
b7:93:97:3c:32:12:a9:c4:5b:d5:cc:a4:56:81:43:b2:8a:27:
7e:cb:a8:97:74:aa:ad:8e:95:7a:f7:28:49:23:8e:ce:3e:4c:
60:5f:ec:d3:4a:98:eb:37:33:5c:be:0a:5f:8b:38:4c:ed:dc:
29:10:9c:4c:7d:57:14:8b:c7:b8:cd:d9:b2:9f:b1:cf:7e:09:
ee:8d:d2:97:70:0c:85:12:96:db:ad:cf:05:75:b2:9f:d8:b3:
69:d2:a6:d4:04:67:59:06:af:85:61:90:ae:d9:08:1e:26:8c:
47:91:e0:fc:65:90:a4:e8:2b:fb:62:12:50:c8:6e:9d:11:ad:
1d:69:cf:2b:bf:11:9b:c0:c6:03:bb:06:d0:54:83:8d:3a:38:
a8:c5:5a:1b:63:33:a1:b8:01:1c:82:fb:8f:aa:1c:c3:d3:f4:
68:86:46:7f:dc:10:51:47:a7:f2:0f:a2:00:e3:3c:93:45:66:
4d:3b:23:e4:10:0f:ee:e6:a4:1e:50:b4:63:0b:7f:13:fb:36:
05:5c:b8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:09:29 2025 by rpki-client