Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/sLakm8wQ3jQOOdID9WZYvX1kjd8.cer
File: sLakm8wQ3jQOOdID9WZYvX1kjd8.cer (raw, json)
Hash identifier: kGkEbSI76J8IJ6cSfI13jv47yqvKaH5QyFzkwOHxMjA=
Subject key identifier: B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB4D7BC8B083065347F4B9FFBBF655
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:02 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 31225
IP: 83.219.224.0/19
IP: 185.182.16.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:4d:7b:c8:b0:83:06:53:47:f4:b9:ff:bb:f6:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:02 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b0b6a49bcc10de340e39d203f56658bd7d648ddf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:79:cd:74:46:cb:e7:a6:3a:b7:00:3f:97:9e:
e2:ca:38:86:10:27:df:67:02:c5:fb:de:a7:cc:c5:
45:44:c4:c1:6a:f9:7e:e3:78:92:84:10:5b:1a:70:
c6:d1:89:fe:7e:8a:f9:67:55:2a:02:11:4d:43:f9:
d5:d4:43:b7:f8:c0:ca:37:fc:d2:d5:ae:2d:d0:29:
98:b8:64:d9:3b:c0:00:75:2f:5a:f1:d3:ab:40:64:
c9:20:36:a3:1c:db:d5:b1:75:45:2e:b6:bc:71:ef:
9e:71:25:11:f4:75:aa:d4:55:d0:74:5d:d0:3d:26:
b0:f6:e8:b7:6d:c2:e6:64:82:07:52:e6:69:5e:c7:
bb:d1:cd:dd:50:8a:9c:14:92:82:5a:39:47:94:d9:
ce:16:48:6d:80:23:88:76:71:3d:6c:89:04:f8:56:
3a:e2:b7:cf:b9:15:97:c8:27:21:5a:fa:69:f5:50:
22:f9:ad:66:4d:06:5d:ec:8d:44:23:3b:07:88:7b:
5a:0f:7f:52:0b:03:39:a4:1a:2e:3d:9c:fc:12:5a:
3e:44:a6:a7:1c:b0:88:f3:f5:d5:5c:9f:2b:89:2a:
78:5e:65:ef:79:c4:e4:e6:f3:27:8a:e7:68:18:a6:
db:cb:64:84:f1:92:7c:40:97:f6:a4:59:7d:61:61:
d3:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:B6:A4:9B:CC:10:DE:34:0E:39:D2:03:F5:66:58:BD:7D:64:8D:DF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9cc39c-dd7b-4892-94bf-ee46ac018600/1/sLakm8wQ3jQOOdID9WZYvX1kjd8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.219.224.0/19
185.182.16.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
31225
Signature Algorithm: sha256WithRSAEncryption
7b:83:7a:f1:f0:a1:77:cb:d2:94:f7:b6:ac:32:54:7e:86:1e:
82:19:f6:86:a9:04:4a:4c:7a:d7:90:b8:ba:22:0d:dd:94:29:
d6:3d:95:c6:9d:c2:d6:ab:07:5e:a8:cb:07:33:d4:54:13:9c:
3d:53:77:ef:22:c1:6b:d5:03:79:bc:a9:2d:f3:d1:2f:8c:bf:
af:3c:b2:c3:ed:d0:0e:da:65:6c:83:47:59:fe:77:83:54:b8:
1a:7e:a5:19:fa:0a:10:42:5c:60:1e:b4:db:c4:fd:e1:29:85:
e7:da:db:fd:61:1d:97:5d:e1:82:3c:70:2a:4d:d9:07:4e:46:
53:19:af:ee:0f:e0:04:e0:a3:1b:e9:ef:f2:5c:c5:d7:8e:c4:
5e:ef:ae:d6:7b:ac:ad:12:61:b1:2a:70:5c:d4:57:98:07:7f:
e3:b2:8d:5a:11:a8:a2:de:42:9d:da:e2:63:71:e9:37:70:9e:
fc:3c:2f:5a:ba:45:2f:16:e1:c2:07:ea:78:18:cc:cb:56:22:
91:6b:48:64:2e:61:30:43:81:92:ed:a1:a7:c5:60:56:87:96:
ca:02:de:e5:15:4c:e7:1e:69:1c:b5:86:bc:93:8d:15:6b:21:
b3:11:b2:8b:c8:f0:d6:7c:4d:a6:35:a2:41:ba:09:c3:9d:0d:
d2:c6:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 19:17:39 2025 by rpki-client