Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/WwB5C6482FpQ5Pk0OINhdj6_vlo.cer
File: WwB5C6482FpQ5Pk0OINhdj6_vlo.cer (raw, json)
Hash identifier: UdnJcgZF8T0L19p6h9ZkU/1HkizsT3EUPqL1Buq+HE8=
Subject key identifier: 5B:00:79:0B:AE:3C:D8:5A:50:E4:F9:34:38:83:61:76:3E:BF:BE:5A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942144468F8DF4F56F6B73A13A85600A0F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/WwB5C6482FpQ5Pk0OINhdj6_vlo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:30 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.225.161.0/24
IP: 185.249.220.0/24
IP: 212.11.79.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:46:8f:8d:f4:f5:6f:6b:73:a1:3a:85:60:0a:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:30 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5b00790bae3cd85a50e4f934388361763ebfbe5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c2:fe:21:70:3c:24:8d:0f:f1:21:70:0f:db:
d2:01:2f:51:8a:da:ed:09:df:db:1b:f1:91:d5:62:
ee:1a:42:7e:3d:ff:f5:87:14:3a:e2:2a:81:7f:dd:
3f:19:58:4b:ca:70:8f:b1:0e:55:b8:60:62:36:08:
98:0f:a8:c5:15:a5:1c:2d:3b:d6:b7:b4:d0:20:81:
6d:58:e7:94:2c:b1:6f:a0:5a:7c:30:8f:b9:fe:37:
e6:f4:4c:28:86:d4:ad:7e:bb:ad:c8:f3:b9:01:dd:
40:e1:8f:f8:4c:04:a7:db:7d:28:1c:cd:65:ee:f2:
fd:d8:0d:65:47:e5:b0:16:8c:6a:aa:c3:1c:d8:34:
14:c0:5f:3b:14:5b:d2:ee:4b:c0:58:63:9f:d4:1e:
3f:fe:a2:a7:16:1f:50:b9:c9:93:ff:60:7b:99:43:
0f:c0:34:ae:74:b3:9e:bc:b3:80:ae:c9:0d:57:45:
9f:dc:b3:a9:d0:b5:1c:6a:b2:cf:bb:37:b0:29:fa:
aa:af:70:4e:bc:d9:e5:44:71:ef:7b:aa:a1:f1:8c:
95:24:3a:d4:06:9e:67:f3:1f:0b:3e:80:2f:70:a4:
d9:3f:87:06:f2:e8:75:f2:bb:84:d2:12:11:4b:0c:
37:5d:e5:e5:e6:a6:0b:ec:4f:d1:d1:b1:df:1b:4b:
41:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:00:79:0B:AE:3C:D8:5A:50:E4:F9:34:38:83:61:76:3E:BF:BE:5A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/8e416c-5550-4e81-a8c4-d6235b5fe67a/1/WwB5C6482FpQ5Pk0OINhdj6_vlo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.225.161.0/24
185.249.220.0/24
212.11.79.0/24
Signature Algorithm: sha256WithRSAEncryption
32:31:71:d6:2d:8a:7d:3e:23:ef:b8:9e:4d:e7:ce:32:33:88:
e3:98:d0:c2:f4:ae:c3:5a:b0:ab:df:07:10:e6:d2:31:c9:08:
3b:46:86:ca:6c:9f:71:81:bc:c8:52:4c:34:59:c6:79:d9:d9:
4a:d7:c8:39:d2:74:b1:74:72:5c:07:7a:2e:4f:ba:e5:ea:b9:
a3:a7:96:0a:ee:e3:a1:15:9e:6c:1e:10:cf:79:be:f4:aa:9e:
52:46:20:4d:ba:c5:a7:9c:f9:15:da:5d:f1:46:b3:b1:96:ad:
ce:d6:39:a2:b0:28:29:5e:43:db:3b:70:ed:9f:00:85:fd:23:
f0:07:9f:93:fb:03:cc:cd:f0:64:e4:5e:e1:2e:8b:ee:90:ca:
58:ab:9b:b5:a3:df:26:a7:b0:4e:d4:b8:79:2a:33:74:d8:e1:
97:a1:94:d3:e4:2b:0a:04:50:7d:10:25:e0:3e:a4:c0:ac:93:
7c:77:03:ad:7c:3f:a5:b4:cc:76:c4:39:61:08:e3:24:c4:f8:
c6:45:2b:e3:db:82:31:c0:18:e4:94:1c:ee:8f:5a:65:a0:7b:
46:11:15:de:d1:93:a0:c0:22:68:34:e2:cf:23:78:43:5d:29:
43:1a:7f:14:ff:f5:ec:52:7c:a8:10:87:e3:eb:67:f4:e5:c7:
4e:d5:6c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:38:41 2025 by rpki-client