Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer
File: cgmO-q6AY8rOzE8cGgtkSDu2lQM.cer (raw, json)
Hash identifier: VfwoEOFOUD2oJXiyC9WEGdwDdkmweJvPHbYmT/LCWkM=
Subject key identifier: 72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420680BFBA12A2F46051E5A7F2D6456CD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:47:57 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2593
AS: 35836
IP: 95.140.128.0/21
IP: 185.1.115.0/24
IP: 185.213.112.0/22
IP: 2001:7f8:5f::/48
IP: 2a09:8d00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:0b:fb:a1:2a:2f:46:05:1e:5a:7f:2d:64:56:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:47:57 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=72098efaae8063cacecc4f1c1a0b64483bb69503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:76:e5:22:4e:bc:43:15:4f:f3:d0:6a:f2:7b:
92:43:33:ff:bd:92:c5:85:82:11:9f:1d:e8:a9:57:
e7:55:22:b5:41:90:83:6f:50:df:16:b9:a3:71:7b:
13:91:74:20:72:48:0e:23:af:cc:4d:12:1d:a0:08:
26:d3:8f:0b:75:72:ff:e8:11:9d:9f:0c:e3:0f:47:
cc:ae:71:51:d8:49:e0:48:e1:70:80:2b:4e:9c:f9:
7b:ef:e9:a7:e4:25:5c:7b:9f:60:69:d6:30:93:fd:
d4:6a:38:1c:b3:51:af:ae:a4:c1:a4:d1:3a:dd:d7:
6a:5e:45:c0:7e:a9:8c:fa:c5:9d:57:29:6f:00:c6:
b3:97:23:78:13:3b:7e:b0:48:e9:7e:9f:27:d6:a8:
54:5e:d7:9f:b9:12:a6:ff:09:3a:3b:5b:08:bd:d3:
64:9d:cb:cd:35:a4:ca:b2:c3:bd:31:8e:17:ff:08:
0c:70:7f:95:d7:c4:f4:46:7b:49:0a:85:4e:f4:38:
12:9a:6d:99:ae:bf:e3:9a:62:24:47:f7:fc:8c:09:
88:00:f0:b5:4e:64:4b:58:82:c3:78:cf:2d:fa:20:
e6:6b:4a:e9:06:44:1a:f1:e5:e1:28:25:1b:a9:5c:
1b:77:5b:3d:0d:04:7a:ee:be:a8:db:1c:50:84:67:
6f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:09:8E:FA:AE:80:63:CA:CE:CC:4F:1C:1A:0B:64:48:3B:B6:95:03
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/b4daf6-448d-4f3e-944a-573ca5a609c0/1/cgmO-q6AY8rOzE8cGgtkSDu2lQM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.140.128.0/21
185.1.115.0/24
185.213.112.0/22
IPv6:
2001:7f8:5f::/48
2a09:8d00::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2593
35836
Signature Algorithm: sha256WithRSAEncryption
31:a7:a7:d3:9a:20:cf:58:15:71:74:fb:dd:7c:a0:b5:cf:cd:
15:97:da:ed:3f:ca:c2:93:53:2d:e3:23:8f:9b:5a:02:9c:23:
d5:d7:6a:6e:da:39:45:e1:af:35:56:21:5a:6c:71:e4:17:65:
72:9b:76:50:d0:ae:f2:1f:cb:63:e2:f5:2e:fc:d3:07:43:a8:
9d:1b:3e:7d:ab:16:a1:b1:9b:c1:7b:48:2e:9a:e4:91:43:03:
44:35:e0:3a:84:b4:8b:56:23:57:4e:a3:2e:47:b3:c0:29:ca:
c7:db:cc:92:55:9b:ea:c5:07:36:13:94:c9:f7:36:e4:02:a8:
fb:6f:9f:87:dd:68:2f:2d:3b:5e:21:0b:94:0f:71:0d:32:23:
0f:1e:ad:f9:88:d1:a9:bc:95:57:12:01:79:04:a8:95:37:87:
28:29:dd:d4:fb:13:43:58:e9:0a:4b:99:6d:a9:82:20:1c:c3:
8b:77:f7:90:43:50:24:04:2e:2d:a0:11:f5:a8:0a:75:2f:96:
47:2b:3f:2d:ec:75:a8:cc:43:a3:d4:a6:33:70:cf:07:2b:86:
d2:09:ae:cb:f7:91:ae:32:21:52:e7:b1:9a:36:3f:a3:00:e9:
d0:fe:88:b3:12:ee:da:44:00:fc:ad:39:7f:6b:f3:42:a2:2c:
b9:82:d7:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 00:20:18 2025 by rpki-client