
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2vRprBGJcVx2DD4eLHAI4JHQIw.cer
File: f2vRprBGJcVx2DD4eLHAI4JHQIw.cer (raw, json)
Hash identifier: lLwq/rh3cwANPnOoU8Y6wTmjem2TQp9LHNHbkU1XA+o=
Subject key identifier: 7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194CC051E9276DBD915F4CCCA97B1081F8A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 03 Feb 2025 13:34:35 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 214937
IP: 14.102.90.0/24
IP: 66.220.47.0/24
IP: 86.54.81.0/24
IP: 2a0b:d500::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:cc:05:1e:92:76:db:d9:15:f4:cc:ca:97:b1:08:1f:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Feb 3 13:34:35 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=7f6bd1a6b04625c571d830f878b1c0238247408c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:43:de:8e:24:b1:0f:c4:29:00:01:a1:40:76:
94:f8:b1:31:60:0f:e3:34:28:69:be:da:3e:0f:bf:
48:73:52:d9:65:8c:d5:32:d4:ac:9d:e4:c3:b6:bf:
97:02:7f:1d:4e:44:d6:df:00:5c:7c:f3:bc:32:a5:
39:ea:fa:1c:d7:0b:33:9b:95:13:b0:14:76:3b:d3:
1d:e4:1a:4c:6f:77:3c:8f:0d:1e:73:63:2a:ef:2c:
9d:e7:4c:3a:7c:a1:1c:9c:40:af:bb:42:32:84:24:
93:c9:00:27:c3:cd:3c:34:3a:4d:d6:41:c2:d4:2d:
51:5e:69:5b:f2:62:ad:e7:27:c9:92:d3:86:b7:1f:
c7:ff:cf:b6:11:ed:ed:63:4a:51:8b:4b:35:9f:5a:
e1:c7:0a:ef:2e:a2:c5:03:a7:aa:e4:5b:18:a7:7e:
f3:02:53:6b:5f:e0:cb:9b:28:41:fb:9d:f3:fe:b7:
c6:6d:3c:b7:29:4c:a8:a8:1f:1b:1a:8b:67:c7:67:
98:8b:91:b8:c2:4a:be:45:35:ab:0e:82:ee:7d:12:
0c:54:93:61:7c:1a:78:dd:cf:58:3b:6c:55:ef:3e:
3d:d3:34:55:04:bf:d3:61:6f:28:85:e8:21:1b:89:
25:a7:dd:10:92:bb:68:3d:8d:8e:ec:ef:87:49:a8:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:6B:D1:A6:B0:46:25:C5:71:D8:30:F8:78:B1:C0:23:82:47:40:8C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/bc66d7-57ab-475d-96ba-89b6c32315c2/1/f2vRprBGJcVx2DD4eLHAI4JHQIw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
14.102.90.0/24
66.220.47.0/24
86.54.81.0/24
IPv6:
2a0b:d500::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
214937
Signature Algorithm: sha256WithRSAEncryption
46:77:6c:b2:df:23:27:15:bd:86:53:dd:61:eb:18:42:48:25:
ce:d8:dc:76:c6:9b:d5:7a:43:4e:ea:c1:32:80:70:0b:04:a7:
0b:a6:78:dd:b5:73:0e:97:4e:d6:1b:72:0c:2c:5a:bc:f2:15:
a2:cc:6f:5c:00:1c:25:f8:4b:bd:3c:48:f2:45:b4:68:52:57:
97:76:ab:40:2f:17:67:92:36:8c:db:e0:b6:2f:55:9a:9c:b6:
2c:da:f4:ec:30:33:b2:b5:24:af:14:3a:33:f3:30:09:97:13:
33:f3:72:d7:d0:f1:65:62:b6:c4:bb:0f:2e:55:9a:8c:eb:a7:
48:2d:33:39:74:7d:dc:52:2a:18:31:a0:be:61:e7:4b:e9:46:
a3:24:77:ac:c5:7d:ee:08:99:a5:d8:75:92:37:c0:32:04:2d:
da:c3:c6:f8:c0:4d:f1:94:6e:24:af:79:00:73:e3:38:f1:12:
0b:44:49:d9:29:67:2e:27:06:cd:f2:3a:51:df:7b:6b:ed:56:
37:b6:31:1e:43:ec:9f:75:f6:ba:9c:3a:f4:f8:f9:6a:fb:58:
33:65:95:d8:81:5e:31:03:b0:59:a8:45:43:b9:b7:0a:22:ad:
d2:8b:b9:46:fc:4c:2a:08:2b:6e:02:d4:bb:ac:a5:31:e4:34:
ac:67:4b:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 01:47:58 2025 by rpki-client