Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/lirjRjk4sm-Dt28MTfgd-rsVpOs.cer
File: lirjRjk4sm-Dt28MTfgd-rsVpOs.cer (raw, json)
Hash identifier: HOKaM+KygQ4O0WTNGepFlBfX0RLDYE8rvFz6fcFchdg=
Subject key identifier: 96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3C271FDE3150FEABA4CD9405C995D
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:08 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 40975
IP: 86.104.254.0/23
IP: 86.107.192.0/24
IP: 89.35.6.0/23
IP: 185.84.64.0 -- 185.84.66.255
IP: 217.19.14.0/23
IP: 2a03:6fe0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:c2:71:fd:e3:15:0f:ea:ba:4c:d9:40:5c:99:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:08 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=962ae3463938b26f83b76f0c4df81dfabb15a4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:22:8a:87:19:ed:22:67:64:4b:e9:70:39:6f:
b2:b3:21:0f:81:49:26:bf:03:73:a7:20:4f:81:8d:
d4:41:cb:bd:d9:66:a5:11:f1:c2:81:1c:a2:5f:39:
1a:2f:85:6c:32:e7:bf:02:8e:8e:31:26:78:83:90:
9a:16:4a:94:6b:bc:13:b0:e5:a1:8e:5a:e0:39:57:
08:20:23:27:7f:58:f0:ce:d3:cc:e2:20:ae:dd:3a:
f2:36:62:26:58:2e:60:33:e2:72:24:b7:cf:6e:4b:
93:83:0a:25:03:76:07:05:d3:de:f7:0b:3d:a2:32:
09:db:fb:1d:7b:bf:7f:1a:1b:a2:5e:c3:10:02:2e:
5f:41:00:8b:ed:91:7d:a2:b3:71:f9:1e:1d:94:9c:
0e:fd:06:48:d0:fd:1f:7b:9b:e8:3e:1f:28:f8:52:
1e:cc:9e:e9:85:d7:a9:12:54:27:b0:d3:e0:b8:cc:
94:c6:fe:96:60:6a:83:35:e9:92:54:33:dd:c9:a2:
cb:e7:50:9b:1c:46:bb:a7:7b:99:43:62:cb:ee:05:
4b:5e:57:1f:2c:89:3a:43:d9:a8:38:e3:e8:d9:42:
8c:60:8a:7b:d5:88:b8:fa:b8:ba:77:d8:20:d1:27:
8a:8c:89:78:83:94:f5:73:c7:2b:64:84:db:53:05:
9e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:2A:E3:46:39:38:B2:6F:83:B7:6F:0C:4D:F8:1D:FA:BB:15:A4:EB
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/bb0fc3-d5f9-4bf5-9683-9edf0d17fb91/1/lirjRjk4sm-Dt28MTfgd-rsVpOs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.104.254.0/23
86.107.192.0/24
89.35.6.0/23
185.84.64.0-185.84.66.255
217.19.14.0/23
IPv6:
2a03:6fe0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
40975
Signature Algorithm: sha256WithRSAEncryption
85:22:20:14:5d:c0:28:6e:96:5a:d6:4a:d6:f8:0a:ba:84:9d:
2e:0b:bb:2a:3c:a0:7e:53:d6:20:a3:f5:05:e3:6b:6d:97:b6:
d6:dc:ad:da:42:55:e3:40:b8:4d:05:df:1c:64:cf:b1:63:4d:
f5:73:64:35:8a:2f:25:36:b7:7b:91:d0:a8:c0:7c:09:12:66:
28:24:af:14:b4:44:97:f7:10:df:e8:83:5f:5c:97:db:2f:aa:
f7:88:fd:aa:b8:71:c5:ff:25:8b:63:f3:39:4f:b9:23:31:78:
5e:31:8b:85:bb:02:2f:07:7f:87:af:46:2e:70:a1:dd:54:e5:
7e:ff:de:3b:ad:04:06:3f:2e:68:7b:10:02:69:82:ec:08:9d:
84:dd:5a:57:0f:a6:85:fc:b3:4d:31:29:47:65:9c:37:69:97:
6d:d8:fd:93:20:d9:ef:50:fe:4f:fd:8f:18:13:62:1c:d6:cb:
42:75:21:91:59:2b:e1:67:31:52:82:3a:60:e3:e6:b6:e8:1b:
c2:01:b0:2e:31:6b:a7:65:c0:b7:6d:f4:c6:1c:4f:98:3c:3d:
55:f0:89:ce:61:97:4d:53:51:ab:3a:6c:c6:33:a4:e5:e1:35:
2d:0b:c9:1a:06:59:84:d2:86:dc:8d:df:79:68:25:79:7a:fc:
e6:9b:66:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 8 13:38:28 2025 by rpki-client