Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
File: v-nxLJa6IGg6_1yVi_rY5MV39_4.cer (raw, json)
Hash identifier: RTQbZYbKRk8MVQMTGrUy42RwVybAEN2AZoGQ6TuEX74=
Subject key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F1E00C206489B7679823F0834A6FC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 209242
IP: 185.212.144.0/22
IP: 2a09:bac0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:1e:00:c2:06:48:9b:76:79:82:3f:08:34:a6:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ec:5d:eb:46:18:21:1d:cb:c8:3f:be:3e:b6:
99:6a:f2:d4:af:de:16:fe:49:a2:d4:b0:fa:0d:04:
df:aa:f4:1e:e9:27:1e:c0:31:43:61:34:68:bc:19:
26:99:6a:7d:a3:80:67:1a:58:c2:5e:bc:93:c3:d3:
8b:61:e5:42:27:55:e0:32:03:c1:c0:57:e4:37:42:
07:29:c1:8f:1e:dc:c7:87:a7:1f:fe:68:da:96:69:
17:bb:13:6b:4f:af:34:b3:70:f0:ce:2d:8e:1b:48:
81:b2:59:fa:28:a4:ee:16:5e:38:c9:af:a6:31:5d:
00:f4:90:c2:1f:cf:71:c4:0b:ae:e9:08:a3:9c:80:
b3:c6:b1:24:ff:37:13:6a:14:18:a4:71:ae:d4:1c:
c6:71:6c:aa:39:4f:1f:d4:0d:a4:a8:77:bc:61:81:
75:b2:31:53:fa:71:da:75:94:5d:0f:c3:8d:0c:24:
54:fe:e7:ec:ba:f9:92:82:1a:41:ed:6a:f7:d4:86:
b3:7c:f2:da:0e:0c:e0:84:cf:ed:06:67:dc:51:3b:
8b:a5:36:d5:c9:0c:92:28:a5:40:fd:ae:06:40:52:
05:01:a0:de:ae:ea:3a:b7:15:96:e4:ae:90:18:c5:
70:dd:a7:9a:ae:d3:d6:35:4a:fd:7f:fd:12:61:2d:
86:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.212.144.0/22
IPv6:
2a09:bac0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
209242
Signature Algorithm: sha256WithRSAEncryption
39:7f:66:db:51:0e:7b:e6:49:dc:3c:31:ed:ed:75:2b:50:48:
5a:1b:cf:3e:fa:05:5c:f4:0b:12:63:f2:93:d6:db:27:f4:7d:
45:a6:ea:cc:4a:7b:65:3f:79:3c:4e:2f:48:2d:31:4e:8d:54:
50:53:a8:03:4a:aa:25:19:db:aa:0e:ef:98:f5:ef:3f:7f:fb:
a6:fb:95:ac:8f:87:90:43:59:41:c9:03:8a:f8:e3:bb:ad:6e:
38:c2:eb:cc:48:fd:56:c4:e0:32:a8:1d:dc:5b:d0:68:45:ce:
03:04:5b:b3:0c:da:38:71:31:69:09:e4:4a:b9:61:bf:6b:b1:
95:d8:f8:fd:93:8c:67:8c:a5:b4:a2:38:a8:4f:b0:dc:3b:c7:
f8:b3:c3:42:81:8f:7c:ba:d1:a9:79:4e:22:46:8b:00:56:af:
f3:f6:19:a0:b2:81:c6:72:89:b3:f9:8e:9d:4f:c1:7a:87:23:
be:0d:67:c1:14:13:2f:3b:5e:36:2e:11:65:50:fe:14:76:92:
db:3e:4a:e8:65:04:00:81:ff:de:d2:f7:a1:12:5b:2e:aa:b9:
a2:33:79:43:48:a1:56:96:11:6c:d2:12:92:0e:20:be:89:98:
42:30:e4:b0:f0:c1:1e:9c:79:c7:d7:aa:b9:41:49:36:1e:da:
4d:9d:90:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 12:02:17 2025 by rpki-client