Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/boSxI5O_yw5tbzLMlcDXEXT8mzA.cer
File: boSxI5O_yw5tbzLMlcDXEXT8mzA.cer (raw, json)
Hash identifier: FQV/53Db3m0zL6YJX6HumCf9DF2wHr/jDjwuxTUVQ1Q=
Subject key identifier: 6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B253D65C55D5886D8FE82AABE31BD5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31554
AS: 39629
IP: 193.200.126.0/23
IP: 193.239.194.0/23
IP: 194.9.92.0/23
IP: 194.42.102.0/23
IP: 194.116.200.0/23
IP: 2001:67c:1e0::/48
IP: 2001:67c:115c::/48
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:53:d6:5c:55:d5:88:6d:8f:e8:2a:ab:e3:1b:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=6e84b12393bfcb0e6d6f32cc95c0d71174fc9b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:57:db:e4:bf:78:31:82:d8:f0:d3:a6:a6:43:
da:4f:8e:9f:f5:61:d9:32:d1:6d:cf:e5:d7:ae:64:
8e:63:2a:9c:a3:a3:c0:4f:48:69:24:43:c2:ec:97:
0d:9d:30:44:d1:d8:b4:cc:8d:3a:29:2a:c5:da:d6:
31:e3:66:ac:ee:ec:a2:bd:07:77:79:33:ab:5a:d1:
c8:4a:fa:88:e3:7e:28:74:04:5d:e3:78:45:a0:24:
f8:77:71:09:fe:9a:34:0d:4a:31:95:20:e4:28:16:
b4:76:8a:62:b9:a5:9a:f1:1a:ef:83:53:e9:a3:71:
d6:cd:36:96:b5:16:f9:74:8e:0e:32:f4:12:b5:a1:
b3:3c:e0:88:13:5f:19:d0:8d:b1:83:42:58:f0:00:
25:26:05:be:aa:86:89:8b:d2:06:17:f4:27:f1:f0:
ba:ce:1b:c7:e6:04:16:5f:f1:df:c3:66:7f:4a:81:
79:17:43:2c:37:c2:13:b4:d0:1d:6b:10:b2:6e:72:
5d:ef:13:ca:c0:bd:ad:d2:70:73:57:64:77:17:e7:
08:52:9d:75:2a:7b:2c:b0:59:6a:60:18:79:9f:38:
62:5f:a4:53:b2:fa:13:90:3d:9f:6d:b1:e8:5d:98:
68:46:eb:ec:5f:71:81:44:35:e2:20:c2:22:69:73:
82:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:84:B1:23:93:BF:CB:0E:6D:6F:32:CC:95:C0:D7:11:74:FC:9B:30
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/24d7ad-83f1-4f14-aa1d-6de6d18cc39f/1/boSxI5O_yw5tbzLMlcDXEXT8mzA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.200.126.0/23
193.239.194.0/23
194.9.92.0/23
194.42.102.0/23
194.116.200.0/23
IPv6:
2001:67c:1e0::/48
2001:67c:115c::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31554
39629
Signature Algorithm: sha256WithRSAEncryption
80:23:cb:57:5c:a7:42:2c:5d:ef:0e:63:97:e2:03:b6:a4:3b:
62:1b:58:ce:d5:72:5c:bb:1a:46:5a:eb:8d:2e:6e:34:6a:5e:
cd:a9:37:62:aa:a4:4f:12:09:54:43:c8:33:2b:c4:51:36:34:
50:c3:5e:8e:69:bc:b7:d5:a2:bb:f8:8b:9f:7a:e6:c4:ba:f7:
13:de:f8:7f:de:6b:33:12:87:df:53:dc:a2:46:e3:46:43:16:
a7:01:f9:19:09:81:ff:07:88:0a:73:9f:f5:d8:eb:1f:34:b2:
b7:90:45:33:4d:92:a7:8e:52:fd:9c:08:ba:4b:10:e6:3c:81:
4c:96:fa:6e:b2:4e:b2:29:9b:38:87:4f:03:a9:f7:64:5b:ca:
3d:8d:08:35:8b:17:f9:91:3d:11:5d:62:c5:8a:f5:ca:d5:7b:
2f:50:f2:dc:a0:1a:8c:2b:cb:87:2c:29:fd:6b:6b:3a:ca:25:
95:d8:56:eb:81:7d:e3:80:d5:c4:56:a5:b3:d0:81:f6:e2:eb:
34:1f:e1:de:fc:89:4e:b7:91:f0:2d:4c:5b:52:f6:6c:73:c2:
fa:c9:34:17:29:1a:8c:92:c4:cd:d2:0d:e8:95:84:34:ac:e4:
8d:69:24:74:f2:4a:46:75:b7:f7:0f:3e:ac:07:5c:55:e8:66:
88:94:05:97
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 7 18:58:04 2025 by rpki-client