Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
File: i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer (raw, json)
Hash identifier: mKaKl3E9mgDcpWxOoDbvCcsKWWvt6+a/zgdZ+x8NeTU=
Subject key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C55912E4E12C9D0AC40153975CFA5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
caRepository: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/
Notify URL: https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/dba8f01c-9669-44a3-ac6e-db2edb099b84/notification.xml
Certificate not before: Wed 01 Jan 2025 01:47:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8987
AS: 9059
AS: 39111
IP: 46.51.128.0/17
IP: 46.137.0.0/16
IP: 79.125.0.0/17
IP: 87.238.80.0/21
IP: 176.32.64.0/18
IP: 176.34.0.0/16
IP: 178.236.0.0/20
IP: 185.48.120.0/22
IP: 2a05:d000::/25
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:55:91:2e:4e:12:c9:d0:ac:40:15:39:75:cf:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:47:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:9f:8c:c4:13:26:bc:0e:fa:7f:50:6c:14:cf:
fe:6d:a0:9b:50:10:04:8e:55:d9:58:35:5a:3a:f5:
9f:c6:35:94:29:4b:97:98:bb:4a:32:9d:b8:fa:ab:
46:65:8d:99:4b:89:81:0f:77:31:43:c4:51:7e:0e:
af:3f:53:e7:fb:56:5c:8a:42:bb:50:68:b6:0d:cb:
00:77:89:ef:aa:96:fb:22:47:06:17:22:4a:1a:13:
a8:a8:00:a1:69:f5:cd:96:99:d7:85:47:6a:33:7d:
74:bb:65:43:8c:5a:d3:1e:e8:01:ac:ab:82:a3:4f:
a8:8a:72:ef:6c:cc:a0:8c:2f:4f:53:1c:42:b3:e6:
cb:7c:47:d8:35:60:aa:85:f1:30:38:77:86:a3:db:
e7:a6:cb:ef:c4:39:eb:20:e5:aa:fc:09:57:df:cc:
c3:31:d8:bb:16:08:fb:4b:84:9e:f8:a7:78:d3:68:
c9:ac:91:46:4f:b7:a0:c0:21:d5:0e:e5:25:27:0f:
57:38:b1:6b:cb:06:bf:2b:06:08:da:84:8d:c5:d4:
42:ff:25:2c:55:f0:e6:cf:2c:3e:b5:d0:ba:a5:f0:
31:8f:9a:5b:4b:80:7e:e7:d4:6a:4e:58:a0:66:b7:
24:68:cb:fc:8c:17:bc:3f:cd:7f:ee:df:a2:db:5e:
a6:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/
RPKI Manifest - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
RPKI Notify - URI:https://rpki-rrdp.us-east-2.amazonaws.com/rrdp/dba8f01c-9669-44a3-ac6e-db2edb099b84/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.51.128.0/17
46.137.0.0/16
79.125.0.0/17
87.238.80.0/21
176.32.64.0/18
176.34.0.0/16
178.236.0.0/20
185.48.120.0/22
IPv6:
2a05:d000::/25
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8987
9059
39111
Signature Algorithm: sha256WithRSAEncryption
ab:4b:69:a2:84:54:7b:8a:62:27:23:35:c6:9f:15:46:6a:83:
f9:88:3e:ef:13:65:40:6c:bb:6a:45:a4:f0:23:b8:74:2e:25:
0d:9c:bb:8f:37:c7:52:fa:22:ae:9d:5f:87:1e:31:31:cf:58:
02:c5:71:5e:71:8b:2e:1c:45:60:12:86:42:06:81:7e:cc:e6:
33:7d:fd:fd:f7:21:be:53:32:2c:6a:a4:53:68:9f:bf:cf:78:
6e:87:44:14:f9:c5:88:d7:1b:16:56:be:bb:69:4a:80:7a:1e:
b3:3c:e1:f9:89:e6:cd:c7:be:96:64:4f:d8:9a:fa:43:5e:e1:
13:37:31:ff:c8:a4:60:2e:cb:e3:40:81:74:be:a8:f4:53:88:
11:80:cc:8d:24:97:3c:81:4a:75:9d:05:9e:e4:25:ea:e4:40:
ea:14:df:43:9d:01:7e:d2:70:95:99:18:19:27:7e:8a:48:2d:
c0:62:87:8a:3b:40:8a:03:a3:11:59:3a:b8:c0:f5:bc:b4:6d:
d3:81:56:86:fd:5c:a8:9a:b9:a2:89:46:c7:07:65:e0:0e:12:
7a:ef:2c:9d:c1:ed:79:19:f4:9d:aa:01:82:42:7e:43:56:f8:
22:a1:fc:bc:9e:3e:11:a1:25:4e:24:b8:c4:50:72:5d:69:69:
de:2b:91:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 03:51:45 2025 by rpki-client