Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer
File: Xrugc1oH5AyjICYniyZ4Z4-LrNk.cer (raw, json)
Hash identifier: ju/TJ6Xswo2+NFWL8ofsTLHMeDCK2JLnm9GL9yR1ka8=
Subject key identifier: 5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F306EEAAADBD360ED6A31E070D037
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 29555
IP: 85.117.96.0/19
IP: 185.57.72.0/22
IP: 217.76.64.0/20
IP: 2a03:32c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:30:6e:ea:aa:db:d3:60:ed:6a:31:e0:70:d0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=5ebba0735a07e40ca32026278b2678678f8bacd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:f2:5e:5f:c8:34:42:32:51:63:ee:a9:bf:f9:
8f:cd:20:a7:72:1e:6d:bc:81:25:5e:3f:20:d5:1f:
f4:2c:fd:38:09:55:2f:6e:c2:43:4c:f7:48:93:91:
fa:fb:27:26:ae:8d:60:65:bb:b9:e4:58:ad:bf:9f:
c1:57:56:b7:f0:a0:fa:01:69:04:26:17:b3:67:d3:
31:2f:fd:e9:d3:7b:79:a4:6e:18:31:42:69:f1:d1:
bd:33:87:3a:82:f7:c6:f8:5f:62:e8:30:e0:0c:b4:
62:db:87:42:f9:d7:47:fc:a9:7f:2f:24:ca:f6:49:
2c:85:b3:c7:24:74:f1:76:0f:87:05:77:61:f3:51:
d0:d0:5a:82:96:d7:9d:a9:d1:43:db:75:ea:f9:72:
3c:df:df:f4:52:48:e4:4b:68:ac:ac:bc:a4:60:d4:
c1:25:a2:e2:7d:79:ef:07:93:5a:59:48:ab:b2:88:
76:0f:7a:cb:8d:ca:3d:c0:41:cb:9d:05:53:45:c4:
5c:67:4a:c0:8f:d7:04:3e:15:8b:3f:da:7e:d5:f4:
ab:9b:c7:a4:28:30:e1:e0:92:af:33:b4:30:91:ab:
53:8a:f1:33:b1:f4:bd:73:2a:c4:b4:07:57:f0:b6:
df:87:ff:24:13:1e:ed:a5:ae:ea:14:ca:dc:c6:d3:
35:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:BB:A0:73:5A:07:E4:0C:A3:20:26:27:8B:26:78:67:8F:8B:AC:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/6077d8-2877-4698-8040-3212b68584e9/1/Xrugc1oH5AyjICYniyZ4Z4-LrNk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.117.96.0/19
185.57.72.0/22
217.76.64.0/20
IPv6:
2a03:32c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
29555
Signature Algorithm: sha256WithRSAEncryption
49:d5:99:e6:3b:e4:5f:95:ee:f0:92:84:2b:96:88:70:87:48:
0a:b9:47:96:8f:04:e0:55:25:9c:ff:41:59:aa:c4:8b:82:57:
a2:58:54:e2:2d:33:02:ec:48:a0:45:35:c7:b3:a2:69:a5:50:
65:fb:aa:4c:cc:16:2e:79:81:5e:ff:ad:6b:83:f5:79:98:da:
0e:ee:c4:93:84:29:48:26:9f:f2:cb:0e:2f:f3:6d:0e:25:f0:
11:f9:f2:f4:2b:5b:5a:c7:e4:cb:22:f6:c0:6a:84:6a:f8:36:
91:3a:c3:f3:41:30:15:91:56:2d:2e:c1:94:ce:a0:be:6c:13:
d5:d7:12:bc:9e:82:fe:ab:c3:ea:05:33:4c:a8:d1:8e:a0:b7:
b5:d1:02:fe:31:9d:3c:46:b7:dd:90:ed:1d:99:4d:f5:9a:2c:
39:74:1c:3f:a4:6a:8f:ec:ff:1a:b7:32:b1:f0:0d:ad:76:d4:
a1:04:5a:ed:97:10:c6:11:08:bc:03:f5:a2:f6:9d:f5:4c:cd:
76:de:99:22:c6:36:45:5d:17:24:1a:2c:de:d3:ea:8e:3f:06:
4a:5f:61:9f:c7:aa:fd:ea:ef:6c:0f:af:af:1a:67:7e:03:1a:
32:07:9f:4a:89:c5:49:c4:43:38:10:b7:26:af:8d:44:11:04:
e4:f4:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:32:53 2025 by rpki-client