Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i3-BpueC4hEYnE805Fm0Imx19KY.cer
File: i3-BpueC4hEYnE805Fm0Imx19KY.cer (raw, json)
Hash identifier: elztdUdg33YaLfDGWwxkU9nLqlT5LF3GVCHzOH6NGbU=
Subject key identifier: 8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941F8C7F566680DD6037D443052E7DDC25
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 01:48:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 43511
AS: 199236
IP: 45.86.116.0/22
IP: 45.87.196.0/22
IP: 45.91.44.0/22
IP: 45.128.164.0/22
IP: 45.128.172.0/22
IP: 89.37.88.0/22
IP: 91.194.248.0/23
IP: 91.211.240.0/22
IP: 185.4.120.0/22
IP: 193.177.216.0/22
IP: 194.113.24.0/22
IP: 195.54.172.0/23
IP: 2a02:7040::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:8c:7f:56:66:80:dd:60:37:d4:43:05:2e:7d:dc:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 01:48:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b7f81a6e782e211189c4f34e459b4226c75f4a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:7f:0e:43:76:c7:cf:22:bd:19:36:05:e7:f9:
d6:5d:f2:b7:a3:f3:06:47:c9:2d:63:15:f8:d8:74:
1d:a2:e3:53:7b:6e:fd:cf:3e:de:3c:08:5a:d2:39:
2e:e1:44:0f:05:44:de:e2:5a:8c:6b:b4:fa:1b:73:
fa:b3:a8:16:95:2e:db:05:59:9d:b9:6b:2d:b5:7d:
d4:bd:e2:26:7e:67:3e:0c:c4:a1:02:60:b9:e8:8a:
e7:59:b0:39:eb:bf:47:63:c9:6f:2a:fa:f8:9a:8c:
a1:11:1a:f6:55:da:19:bd:32:76:4d:2e:a7:14:da:
17:2e:2c:a7:9b:91:ac:62:0c:0e:6c:4f:d4:e6:20:
6d:b4:08:20:43:db:dc:4e:ec:10:3a:d2:8b:20:4b:
c5:32:a0:c5:3c:fa:c5:b4:ff:12:c0:86:db:13:28:
33:11:6f:45:2a:ba:28:49:57:05:0e:28:1b:9f:c3:
57:37:d9:00:b6:1a:d1:e9:00:72:8b:79:82:cc:7c:
20:49:e5:41:7b:3d:1e:9e:3d:e5:b5:be:be:bc:cb:
2b:07:2c:8b:af:20:33:7c:8e:ce:c6:09:89:35:b8:
83:d7:2d:00:13:5f:11:45:91:8a:c7:9d:8b:48:aa:
40:dd:1d:7c:13:34:da:d7:0f:25:0e:cf:83:83:d6:
6b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:7F:81:A6:E7:82:E2:11:18:9C:4F:34:E4:59:B4:22:6C:75:F4:A6
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/9b60e5-f98f-4ac6-98a5-f2f426efe039/1/i3-BpueC4hEYnE805Fm0Imx19KY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.116.0/22
45.87.196.0/22
45.91.44.0/22
45.128.164.0/22
45.128.172.0/22
89.37.88.0/22
91.194.248.0/23
91.211.240.0/22
185.4.120.0/22
193.177.216.0/22
194.113.24.0/22
195.54.172.0/23
IPv6:
2a02:7040::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
43511
199236
Signature Algorithm: sha256WithRSAEncryption
03:00:7d:92:81:1f:1b:cc:f9:a3:0f:eb:8b:0d:bf:9d:70:33:
a0:7f:84:f1:13:99:8f:bf:5d:fa:9a:64:c1:f6:a0:50:10:ad:
55:6a:cf:38:c4:53:0c:bf:3f:a8:75:a5:57:c9:da:84:82:d7:
b8:34:97:12:c9:d4:dc:e2:00:a0:99:f1:fa:d1:a9:c6:31:83:
c9:95:85:d6:69:1b:06:2a:e9:22:01:e8:bf:82:09:67:5a:aa:
de:91:e6:c3:3f:25:52:de:da:e1:fa:c5:11:bb:27:a1:fe:e3:
b2:c6:89:06:fe:da:21:e4:75:f0:5a:b3:f9:67:0a:20:40:31:
5d:27:c6:b0:ce:3f:7b:f6:2e:c2:a2:4e:4c:37:4b:c0:3c:40:
8e:1e:26:37:01:0d:f6:7d:61:7f:33:4b:4a:6e:bb:e4:9b:59:
be:f5:dd:8d:34:29:be:c0:9a:b5:bf:42:d6:7d:ea:de:b3:c4:
73:b4:91:f7:c3:7d:d6:88:fb:a2:86:d8:d0:02:d9:c3:b2:6d:
d1:7d:dc:6a:b8:13:aa:04:00:fd:7a:6b:b0:47:71:6d:9a:ac:
e9:04:b6:41:df:ee:a0:aa:61:b7:50:2b:36:51:73:84:a3:66:
cd:7c:69:d2:70:38:6c:b0:57:f9:68:8c:a1:ae:0f:28:35:d7:
1c:96:0b:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:58:35 2025 by rpki-client