Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
File: nkWapGAr_6LSZQumaBhFjIn8RYI.cer (raw, json)
Hash identifier: 9iRmAImlJFwoWsHfu/neQMxw0HNcICBRTDMr6tI0hw4=
Subject key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B189808F5D3E311EEC7D9FD6CB28B9
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:47:50 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 12310
AS: 21007
AS: 34198
IP: 80.86.96.0/19
IP: 83.166.192.0/19
IP: 84.247.64.0/18
IP: 89.42.16.0/21
IP: 89.149.0.0/18
IP: 188.240.8.0/22
IP: 188.240.216.0/22
IP: 194.102.203.0/24
IP: 195.95.228.0/23
IP: 2a02:2a00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:89:80:8f:5d:3e:31:1e:ec:7d:9f:d6:cb:28:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:47:50 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1f:d4:1e:78:c2:e0:5d:73:39:5d:bb:2b:05:
8d:38:7e:a3:51:3a:fd:bb:b9:59:3c:af:89:f7:e9:
f4:82:36:8d:a3:90:5f:51:80:80:1e:9b:21:ae:bd:
d5:87:db:6d:2f:6e:58:88:9e:b7:85:a4:6b:a9:db:
99:dd:a6:7a:09:12:db:8e:11:48:8e:e2:ca:35:7c:
91:8f:1a:8b:b5:ce:43:71:65:41:23:9c:11:12:09:
31:4a:ef:d2:3d:aa:69:29:37:80:32:60:da:9b:e3:
81:40:d6:d2:3c:47:33:f1:5d:42:5b:cf:c8:8e:7b:
0a:d6:22:79:83:ef:f1:2a:5a:55:c7:5b:ba:6e:18:
cf:a9:66:20:06:e6:bc:6b:5e:66:0c:d6:e7:db:61:
32:99:0e:32:33:07:96:a9:87:97:e2:ee:46:d5:07:
10:6e:fc:dd:af:85:45:19:41:aa:37:67:a5:d2:dc:
61:df:32:fb:1e:f2:f0:66:0e:44:36:e3:88:a1:da:
44:84:2a:8c:b2:1d:fe:d0:52:a4:32:dd:8b:4f:07:
25:04:18:43:2d:34:04:6e:f9:6c:0d:c6:62:c6:3d:
29:76:d2:20:93:cf:df:69:51:40:ed:59:76:e2:a9:
ff:3c:23:2b:ad:2d:62:20:cb:74:d7:93:d3:9a:16:
c0:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.96.0/19
83.166.192.0/19
84.247.64.0/18
89.42.16.0/21
89.149.0.0/18
188.240.8.0/22
188.240.216.0/22
194.102.203.0/24
195.95.228.0/23
IPv6:
2a02:2a00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
12310
21007
34198
Signature Algorithm: sha256WithRSAEncryption
22:af:0d:ac:ae:5d:31:50:0e:de:2b:c1:7a:30:a2:d4:62:05:
19:c2:4c:d3:bb:cc:24:ce:35:d2:c0:cc:f6:4e:5e:8f:f5:b1:
10:95:29:fb:4f:88:91:3c:58:ae:26:cf:3c:b0:fa:83:cc:02:
29:ad:ca:69:a1:94:f0:78:41:f5:f1:01:6d:2b:d1:a3:8f:a3:
e8:4e:11:39:d3:22:7d:83:5a:ef:78:72:fc:2b:3c:7a:fe:93:
df:f3:5c:df:1d:cc:55:e4:e8:a9:7e:ca:03:33:06:6a:b5:6f:
b1:70:bb:81:a0:64:af:87:15:c0:99:18:0a:0e:68:88:7f:07:
92:cb:b2:74:60:a1:14:c9:65:3d:48:e5:f6:e6:9f:77:ba:39:
74:3d:ce:98:d0:66:13:33:e3:fb:78:cb:96:55:8e:d5:7d:cc:
3c:e5:69:0e:50:5c:50:7f:f3:b8:48:cb:2c:88:a4:88:81:b7:
9b:dc:9d:9b:c3:89:4c:d4:2d:a7:38:a1:7e:be:35:1a:3f:b1:
83:b1:2e:bb:3d:41:03:1d:56:b5:0a:0a:8f:cb:b8:29:0f:02:
6d:ec:79:5e:98:a1:45:ff:c3:5d:02:0f:95:26:8d:a8:d8:da:
fc:22:d4:34:1c:ea:ec:15:61:fa:7b:ff:e4:06:89:87:75:55:
6c:df:93:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 9 20:27:39 2025 by rpki-client