Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/j32Qq83eC8bwvKryHOw6TyrPrk8.cer
File: j32Qq83eC8bwvKryHOw6TyrPrk8.cer (raw, json)
Hash identifier: wLKSZjxzXJPJU82R+iM/KxjGmCBD58XgUBmcxvD2gcQ=
Subject key identifier: 8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019425FC166B3C3A822186B9502AEEBD3F20
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 07:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 44609
AS: 62229
IP: 45.157.244.0/22
IP: 178.22.72.0/21
IP: 2a0e:f3c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:fc:16:6b:3c:3a:82:21:86:b9:50:2a:ee:bd:3f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 07:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=8f7d90abcdde0bc6f0bcaaf21cec3a4f2acfae4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:19:30:7a:cb:1a:50:4e:d3:39:2c:ee:a7:60:
06:c8:e4:dd:d1:d8:a3:3d:63:e3:de:fe:97:bc:e8:
9e:7d:e2:58:05:b0:3f:ab:b4:9f:2b:e2:1d:63:2c:
9c:16:b6:b8:06:0d:13:d2:19:8d:f4:03:46:1e:68:
d2:1f:94:c2:88:65:84:02:2f:75:7c:4a:62:1b:1c:
2f:1d:d6:d7:32:e4:62:b4:e6:ed:4e:29:b4:91:b9:
eb:07:2c:a2:54:bd:a5:0c:c2:df:53:3c:3d:0a:ed:
4f:25:60:94:1e:b0:17:d8:9e:6f:9e:4f:fa:de:83:
97:2e:82:7a:da:d4:01:a2:1d:cf:da:ec:b5:68:72:
ba:68:71:7f:00:58:df:30:d3:a7:5b:a2:8f:53:34:
2a:05:58:32:7f:14:85:2e:d4:ce:82:11:9b:f1:31:
e6:33:92:38:bf:74:45:f6:31:2c:51:51:d6:9a:13:
88:59:e3:5d:0f:10:aa:2f:dc:86:87:f1:59:c1:2a:
39:83:a5:f0:f2:91:6b:35:5a:be:5b:29:30:64:9d:
1a:15:1a:c6:fe:2d:95:2b:ba:4f:28:b0:e0:f3:7f:
44:e9:b5:ea:f8:bb:8e:5a:a6:7a:a2:f8:21:f2:2e:
f6:af:d2:fe:34:1f:5a:70:4d:83:b1:b3:bb:4a:e4:
a4:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7D:90:AB:CD:DE:0B:C6:F0:BC:AA:F2:1C:EC:3A:4F:2A:CF:AE:4F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/30b0bb-898c-4289-9124-37e32eaa7667/1/j32Qq83eC8bwvKryHOw6TyrPrk8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.157.244.0/22
178.22.72.0/21
IPv6:
2a0e:f3c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
44609
62229
Signature Algorithm: sha256WithRSAEncryption
4c:f1:34:c4:73:8a:c3:4b:19:62:d0:a2:1d:32:34:4e:20:89:
ac:d4:5d:9b:7a:1a:e3:7e:7d:3a:13:59:e2:7b:f7:59:5a:03:
20:e9:ba:9d:11:84:31:37:64:6d:3a:22:d9:aa:ad:8b:1c:f1:
30:eb:ea:49:94:4a:8a:5c:c2:2d:9b:81:b0:75:f6:47:27:37:
4f:6f:d2:55:84:51:8a:9d:ac:5b:50:44:40:3c:d1:88:53:9b:
87:79:4a:f1:77:84:af:80:08:c4:55:3b:98:f0:5f:65:ad:ef:
66:8f:cd:1b:69:f0:43:bc:9a:ca:f4:e6:44:3b:15:90:7b:29:
50:2c:f1:e6:1f:ab:13:01:f7:b2:79:9c:70:36:1b:b5:5a:5f:
ed:69:01:b3:aa:8e:36:60:53:43:01:66:21:f5:7a:d8:96:69:
ab:d7:30:77:02:da:92:1d:c2:7b:03:5d:35:38:42:1f:40:06:
b8:c9:74:1c:ac:f2:a4:20:24:1e:bf:e9:78:d3:95:e7:0d:ae:
9c:a5:f1:2d:32:1e:f1:12:37:aa:85:ba:a7:d0:76:bb:c5:f6:
c2:f4:cc:dd:f6:db:cb:7b:4a:b9:fc:8c:e7:29:fc:a1:c2:e8:
57:dc:68:54:b8:44:d6:2c:7d:ca:e8:b3:62:f2:1d:35:e8:25:
1d:84:9a:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 22:32:50 2025 by rpki-client