Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cwLNwp_coJ6aDz99IRPahafh1lQ.cer
File: cwLNwp_coJ6aDz99IRPahafh1lQ.cer (raw, json)
Hash identifier: S2iHcnkDAZBgsC0KyneeXwSyzP1RgJHdX4zOjB61Gb8=
Subject key identifier: 73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B2661942C7D676A5B91CCFEFA628A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 42075
AS: 43391
AS: 202991
AS: 206648
IP: 77.223.128.0/19
IP: 78.40.224.0/21
IP: 91.191.160.0/20
IP: 93.187.200.0/21
IP: 185.80.72.0/22
IP: 185.148.84.0/22
IP: 185.178.240.0/22
IP: 195.244.32.0/19
IP: 2a01:aac0::/32
IP: 2a0a:be80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:66:19:42:c7:d6:76:a5:b9:1c:cf:ef:a6:28:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7302cdc29fdca09e9a0f3f7d2113da85a7e1d654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:4e:9e:73:d5:b4:07:05:4d:d1:3c:af:4d:fa:
ed:a7:e1:4f:34:fc:17:ed:b1:ad:91:5d:e0:fb:43:
b2:36:3f:f7:86:0e:2b:17:db:dd:d4:ae:4f:cb:9d:
58:5a:27:d8:d8:cc:d0:34:d1:ad:34:86:67:6a:20:
02:6d:f2:fa:9c:58:f1:7f:06:7e:9b:4f:22:f8:e6:
23:10:da:9f:fc:36:9a:e9:2b:f5:7e:01:ad:24:13:
a1:db:0b:2f:69:9c:2b:56:fc:bc:73:e3:a2:dd:53:
36:19:2a:6a:4d:e5:18:f5:40:5a:15:f4:55:05:e1:
ee:17:ac:b5:46:7c:6f:3b:f4:13:b5:9a:dc:7e:f9:
f2:03:52:81:0a:5c:f5:43:85:d3:c6:1d:a4:10:f8:
cc:a5:8d:c5:4a:e8:f1:3a:42:e6:49:c1:8d:79:b0:
be:f6:a6:7a:67:1b:e5:37:98:5b:f4:84:13:1c:ae:
1d:38:ff:f2:1d:3c:ee:70:29:e1:6f:62:6c:80:af:
ae:26:54:26:89:c8:9c:2c:28:1c:ae:37:30:5d:99:
53:07:9e:6b:00:8f:4a:79:08:b0:25:e6:68:e5:4d:
0b:48:46:e2:1f:ed:3d:31:e7:ba:b9:77:38:5f:8e:
c8:35:b8:82:f8:74:67:96:0d:2a:81:04:1c:26:69:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:02:CD:C2:9F:DC:A0:9E:9A:0F:3F:7D:21:13:DA:85:A7:E1:D6:54
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/77217d-814b-486a-8ef2-fe0333ed005f/1/cwLNwp_coJ6aDz99IRPahafh1lQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.223.128.0/19
78.40.224.0/21
91.191.160.0/20
93.187.200.0/21
185.80.72.0/22
185.148.84.0/22
185.178.240.0/22
195.244.32.0/19
IPv6:
2a01:aac0::/32
2a0a:be80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
42075
43391
202991
206648
Signature Algorithm: sha256WithRSAEncryption
5f:12:3d:f4:dc:d3:03:48:91:96:b1:c8:09:fe:a4:4c:aa:8b:
90:65:49:9e:3d:be:d2:e3:81:eb:a4:a6:cd:f9:f8:04:9a:da:
dd:3d:31:ca:80:ae:6a:86:59:c7:d4:64:34:3d:d4:87:4e:00:
46:5a:b4:f0:85:c2:7c:be:da:cd:9e:9d:fe:38:4e:a4:23:82:
b8:0c:66:fe:ca:07:30:bc:61:fb:23:c7:4e:e6:1d:28:24:fa:
c3:06:19:d7:70:62:3a:d0:17:90:25:91:eb:17:1f:b3:52:01:
8e:d0:40:4e:00:10:17:1d:1c:ea:41:f2:be:84:3e:6b:d8:25:
57:86:d5:ef:f6:5e:35:e2:a7:f3:f7:70:64:89:ba:92:91:41:
79:a8:e5:d7:10:9a:10:7d:6c:65:f0:d0:d7:44:36:d0:a2:fb:
2b:24:85:9c:56:67:2a:a1:66:3c:c8:d4:37:16:63:d1:39:9e:
fd:e5:46:a4:cf:3f:38:fe:c3:34:fb:4e:54:72:5b:ad:41:0d:
a8:b1:63:30:b1:76:22:c8:43:77:66:fe:8f:ea:53:5f:44:7c:
20:97:ef:b3:52:5f:2e:b1:fb:7e:03:54:ab:ba:e2:5a:80:52:
5b:ca:b2:06:1d:fb:e8:5d:2b:d6:a4:22:18:5c:72:56:06:22:
f0:62:fa:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:27:03 2025 by rpki-client