Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/i5uprd6WNXd79Yb9ST4UzTD3xMo.cer
File: i5uprd6WNXd79Yb9ST4UzTD3xMo.cer (raw, json)
Hash identifier: tF4O4w58QWTYAO1FRR2QkBaf3PqSzu8n5Puv+3u+V/4=
Subject key identifier: 8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5B4435F9D737998BB5F2CFB6556ED
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
caRepository: rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/
Notify URL: https://rrdp.paas.rpki.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 199673
IP: 185.121.236.0/22
IP: 188.164.152.0/21
IP: 2a01:bbc0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:b4:43:5f:9d:73:79:98:bb:5f:2c:fb:65:56:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8b9ba9adde9635777bf586fd493e14cd30f7c4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:47:3f:53:3a:e8:a2:ff:58:aa:e3:e4:20:
ee:96:a2:cf:54:10:2d:5b:56:57:4f:8f:68:b5:c1:
10:9c:05:c6:b5:b5:0f:d0:e5:cb:39:e5:5b:d5:5b:
4f:09:68:9f:77:9f:08:89:fd:64:30:13:2c:96:47:
70:65:62:4c:af:18:4e:da:0a:65:3e:30:32:44:e2:
ad:0e:15:b3:85:d3:17:e1:c9:98:a2:82:e0:c3:0e:
49:37:20:c6:32:1c:b1:fb:88:61:03:ad:4f:62:e9:
9c:ae:90:5f:9e:69:bc:14:38:e2:42:32:24:77:6d:
c9:f7:e8:c3:09:0a:64:09:3b:a1:3b:95:18:4f:10:
2d:ef:5d:37:29:19:e6:d4:4c:55:0c:e2:fc:36:c7:
90:56:2b:20:bd:9c:0e:36:82:e1:a6:5d:8b:04:57:
85:9c:04:81:85:90:39:84:fc:24:6a:05:77:6f:85:
08:ab:50:32:3b:5f:29:46:f9:39:02:f6:07:6a:07:
13:ad:7b:bd:cb:f2:dc:d5:46:72:8e:d2:1c:ec:3c:
c4:69:7a:b9:14:e5:06:28:d1:92:54:2a:c2:be:af:
df:ff:48:bd:87:3a:39:11:88:5a:c6:87:d8:da:5b:
8e:42:24:80:6b:2b:a1:db:7d:53:e1:36:bd:9f:b7:
f8:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:9B:A9:AD:DE:96:35:77:7B:F5:86:FD:49:3E:14:CD:30:F7:C4:CA
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/
RPKI Manifest - URI:rsync://rsync.paas.rpki.ripe.net/repository/6c030890-f6e0-410c-bc99-af0921d1c3a4/0/8B9BA9ADDE9635777BF586FD493E14CD30F7C4CA.mft
RPKI Notify - URI:https://rrdp.paas.rpki.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.121.236.0/22
188.164.152.0/21
IPv6:
2a01:bbc0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
199673
Signature Algorithm: sha256WithRSAEncryption
22:01:13:cf:a1:d3:c7:ba:a4:3e:ee:14:bb:4a:05:dd:97:f1:
c4:b0:d3:06:9c:f9:9f:bf:df:e3:0d:8d:f3:cb:b1:3d:4c:9f:
c2:f4:57:77:4a:3b:3e:6d:8c:4b:5d:0f:60:68:19:78:6b:b8:
e0:e5:1f:7c:e2:dd:dc:ff:43:e3:dd:8a:50:85:44:ca:87:e9:
7e:67:7c:c5:3b:b1:e8:35:9b:0d:83:ee:a0:fb:4e:9c:01:80:
ed:07:92:90:2b:f0:79:24:2c:99:5c:65:e4:01:63:53:67:13:
f0:62:0e:4a:e7:01:fd:a6:63:fa:3e:b3:ae:1c:6e:a9:1a:e8:
27:cb:b4:cb:18:1a:f4:50:6d:8c:95:a0:4c:37:27:6b:2a:a7:
05:11:ab:39:55:55:39:77:df:02:72:7c:ca:f0:2a:94:39:aa:
3c:7c:33:38:42:56:0e:9c:e4:bd:c0:56:82:3a:9c:40:27:f2:
ce:a7:a9:26:42:c1:1b:7a:c6:34:e0:be:0b:3e:f3:bc:b6:0a:
94:16:6d:97:98:78:37:d2:ac:3f:27:e5:96:04:8b:de:d5:e6:
65:ed:dc:87:5e:02:58:49:41:f2:c4:d0:de:7e:da:7e:8f:0c:
c6:81:17:d6:20:5a:a9:44:d7:b9:4b:f0:79:10:e9:2d:9e:68:
3d:a6:15:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:12 2025 by rpki-client