Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/g2Uo4VK23LoVcSQaxVvlvOARGLc.cer
File: g2Uo4VK23LoVcSQaxVvlvOARGLc.cer (raw, json)
Hash identifier: L2l7L5YBohEvdr049cnPhVWOhsJJXEdyL0LTxAV6U0k=
Subject key identifier: 83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C01283E6D865842DDA3F578AE8080
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 197991
IP: 5.144.144.0/21
IP: 149.126.32.0/20
IP: 178.132.56.0/21
IP: 185.198.100.0/22
IP: 2a0d:a5c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:01:28:3e:6d:86:58:42:dd:a3:f5:78:ae:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=836528e152b6dcba1571241ac55be5bce01118b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:55:64:c3:88:cb:47:53:ce:0b:49:43:76:8b:
14:c1:67:4d:10:02:43:9f:73:2c:eb:16:82:44:68:
d9:14:7e:40:00:fe:60:0e:81:b9:95:0e:f6:c1:1b:
37:a7:ae:3a:f2:4d:ee:ab:57:bc:bf:62:99:db:2e:
19:29:74:db:31:dd:b4:fd:e8:c2:a0:e9:31:ce:dd:
95:4f:5d:78:83:8e:68:ad:79:81:73:9f:62:d2:4c:
aa:2d:2e:06:1e:f0:64:49:de:6a:78:4d:7c:1a:ac:
e1:73:bb:a4:fb:80:79:cc:31:66:60:7a:92:69:16:
e1:19:8d:6c:d2:a7:78:ad:1d:e2:41:e5:84:e7:49:
91:40:c6:d5:9a:fe:cc:2a:af:c7:0b:56:ee:fc:cd:
52:a5:7e:dd:44:cd:ca:f3:d9:d8:b3:f2:61:9b:ff:
96:8c:6c:84:f2:b4:47:91:53:77:46:dc:ad:0c:86:
d9:1d:8b:3c:e8:64:ad:a6:88:29:15:f6:db:37:71:
19:1a:42:81:11:ab:a4:4b:76:9c:3b:ab:df:41:b9:
95:36:2b:a6:45:14:c2:90:84:ff:4d:9f:28:da:e4:
e9:af:35:5a:cc:20:7c:ea:c4:0f:c4:49:66:47:ed:
0b:c9:1d:2f:3f:c7:0d:28:ed:d2:bb:38:42:49:71:
7e:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:65:28:E1:52:B6:DC:BA:15:71:24:1A:C5:5B:E5:BC:E0:11:18:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c70f4-5f3a-4fd3-883c-eb9415ec548a/1/g2Uo4VK23LoVcSQaxVvlvOARGLc.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.144.0/21
149.126.32.0/20
178.132.56.0/21
185.198.100.0/22
IPv6:
2a0d:a5c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
197991
Signature Algorithm: sha256WithRSAEncryption
67:b0:80:36:d6:76:90:d2:99:a8:06:39:15:ae:a6:cb:d9:4f:
54:c8:cb:63:fa:b2:aa:ab:ba:a9:44:24:95:47:db:ef:55:c3:
74:48:4e:89:9d:3a:b3:40:6c:56:1a:89:78:a8:2d:91:d6:ff:
6f:3f:04:f3:9d:ae:bd:11:1f:e4:23:c6:a4:8a:8f:49:7b:cb:
36:8d:aa:92:ea:66:4c:08:23:c8:00:ea:9b:73:b3:3b:84:64:
05:05:c0:2d:8c:1f:f4:bf:45:4e:37:5e:4d:c7:55:cd:ce:8c:
a6:45:0e:d4:b8:12:48:ab:d9:fc:cc:d8:b5:a0:e7:28:d7:69:
46:d8:4b:65:ad:ee:21:be:9c:26:45:5a:ef:2a:67:75:20:7a:
b6:65:c9:96:0e:cf:98:b1:df:91:a8:dc:3c:08:f1:db:12:a7:
71:82:f2:a8:2e:7f:31:f8:f6:35:b5:78:09:44:21:1a:6c:8e:
9e:5b:40:f5:3e:74:cf:45:87:99:d4:41:38:27:c8:3f:c7:1b:
99:fb:21:ce:b6:4e:1d:f8:12:f5:d3:79:e5:74:0d:e7:2d:c0:
ab:c4:cd:17:67:88:a6:8b:75:a8:ec:00:1e:b5:48:3c:d1:19:
9b:f4:c0:54:8a:bb:60:79:94:c0:41:0b:8f:99:db:38:35:24:
e1:06:26:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 04:53:27 2025 by rpki-client