Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/rKZqWTivVnqeKbT3bxFWB8K4qiA.cer
File: rKZqWTivVnqeKbT3bxFWB8K4qiA.cer (raw, json)
Hash identifier: EfISTbExx/AvotALcEz5eSrumzS4Nnxd3R6eMS1fTWI=
Subject key identifier: AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FBD649335CFF223DDA52C92CCBA0C8
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:37 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 62044
IP: 87.58.64.0/18
IP: 147.161.128.0/17
IP: 159.254.0.0/16
IP: 164.137.0.0/16
IP: 185.46.212.0/22
IP: 194.9.96.0 -- 194.9.116.255
IP: 2a03:eec0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:d6:49:33:5c:ff:22:3d:da:52:c9:2c:cb:a0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:37 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=aca66a5938af567a9e29b4f76f115607c2b8aa20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:99:16:f6:6e:c6:5b:2a:aa:6e:9c:20:c9:
19:4c:68:68:52:40:02:3f:24:a0:69:ce:af:5d:6a:
97:23:6b:b4:b6:3f:62:c5:0c:f6:36:fc:c7:e9:13:
e4:2c:fa:20:38:e5:fb:96:55:59:48:bd:08:99:28:
7b:ab:1d:ff:6d:53:98:cf:c2:10:ea:74:98:92:c4:
e1:84:c0:c4:0e:46:d3:32:b7:1d:1c:4b:a3:22:35:
6c:be:ef:a4:3b:36:9a:ba:d4:d3:4a:49:8b:6a:5b:
00:83:98:28:cb:cd:42:27:35:d3:ea:05:98:76:70:
79:73:e4:37:c5:35:d8:6b:54:5f:04:14:c1:ad:4e:
d8:ba:44:5e:ce:c7:46:89:0f:ad:1f:b7:2b:48:08:
c8:40:b7:af:77:6d:36:f6:ab:4d:aa:48:8b:b7:b4:
3f:3a:86:39:bf:34:a9:74:ec:99:ba:b0:dc:37:52:
67:b4:b1:e9:7d:29:1d:1c:13:3f:a7:89:8a:7d:e3:
17:f5:db:54:e9:72:6d:89:e9:68:b3:58:1b:39:0d:
90:37:4d:66:9a:92:85:95:9d:cf:6d:1a:1d:7b:9a:
60:34:9c:41:6d:bf:84:96:17:cc:e2:36:4f:8c:54:
b3:81:29:be:11:7c:a1:ba:ea:54:1d:c3:9b:a4:20:
4a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A6:6A:59:38:AF:56:7A:9E:29:B4:F7:6F:11:56:07:C2:B8:AA:20
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/15089b-18d7-4ff0-9d28-b9b65402b928/1/rKZqWTivVnqeKbT3bxFWB8K4qiA.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.64.0/18
147.161.128.0/17
159.254.0.0/16
164.137.0.0/16
185.46.212.0/22
194.9.96.0-194.9.116.255
IPv6:
2a03:eec0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
62044
Signature Algorithm: sha256WithRSAEncryption
95:38:8a:77:f9:ca:61:70:ec:06:f8:c1:8c:e6:ed:52:9e:3c:
66:91:76:1c:3b:95:79:df:7e:67:6f:93:a7:b9:33:6e:d1:9c:
78:ff:0c:3b:42:65:52:80:dc:69:06:25:4a:33:c4:40:e0:e9:
45:2b:8a:e6:bf:62:88:f0:8c:c1:03:56:03:10:27:8b:d8:eb:
c4:a9:aa:22:08:27:0f:6b:ea:1c:d7:ed:dc:f0:cc:a2:96:86:
92:94:75:73:57:1a:e9:50:1f:be:b4:5f:86:c4:79:9c:81:7a:
1d:9d:86:6b:53:38:28:5c:d3:6b:24:92:38:04:d3:44:d6:b1:
db:72:c4:cf:98:7b:cd:83:8f:61:d6:e4:b5:2e:01:af:43:69:
15:cc:a5:67:dd:b9:01:ac:3b:aa:8b:24:1e:03:b7:6f:1d:29:
36:92:86:83:ed:d9:aa:af:5d:16:9b:96:3f:4a:d5:e6:5a:e4:
db:e0:70:29:14:ae:85:56:fa:df:60:4f:04:9d:82:e1:0e:e2:
d7:5c:c8:24:80:65:b7:0d:5c:b9:f4:5c:99:a7:80:32:b2:3c:
5a:16:5b:a6:dc:76:b2:69:79:ce:06:9f:55:11:45:d0:27:a6:
a3:67:cd:d2:a6:21:74:03:95:69:0d:00:b8:a4:cd:09:92:dc:
9c:67:f1:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 08:15:28 2025 by rpki-client