Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/valtAqgi9GJTwq7mgEQdWsJ8PfU.cer
File: valtAqgi9GJTwq7mgEQdWsJ8PfU.cer (raw, json)
Hash identifier: tMwsnqx5umCZhyGJ7gRakw45AhdLRyElO21PwGr/Mq8=
Subject key identifier: BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FD84AC6241DCF756B04283446CD34
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:19 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 5.153.96.0/21
IP: 5.153.192.0/19
IP: 31.12.96.0/19
IP: 31.13.0.0/21
IP: 37.252.32.0/19
IP: 91.199.78.0/24
IP: 93.121.0.0/17
IP: 95.172.224.0/19
IP: 141.138.224.0/19
IP: 151.249.0.0/18
IP: 159.20.32.0/19
IP: 185.196.80.0/22
IP: 193.105.150.0/24
IP: 212.105.160.0/19
IP: 2001:67c:2544::/48
IP: 2a00:10e8::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:d8:4a:c6:24:1d:cf:75:6b:04:28:34:46:cd:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:19 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=bda96d02a822f46253c2aee680441d5ac27c3df5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6e:c7:a7:71:38:08:14:3d:f7:57:9f:8d:f0:
0a:73:05:2f:b3:3c:dd:d6:14:84:85:6c:6b:a8:17:
91:36:83:de:d3:37:8c:e1:f9:df:a8:c7:30:a5:a1:
10:63:65:a6:a7:6f:6d:8c:2c:74:5e:7a:fa:02:aa:
36:c2:db:46:9e:ec:3d:5b:8c:95:a9:9e:b1:e2:48:
30:4e:78:1f:bb:e1:05:a2:d0:8a:ea:a8:e6:cd:8a:
3f:17:13:be:42:a8:73:64:f8:80:cb:3c:06:c6:f4:
b5:05:af:fe:63:3e:b4:21:68:86:1c:1f:1b:7d:e6:
c8:da:ed:b1:3f:e6:79:59:53:bb:63:01:b1:65:a8:
82:c6:00:96:74:d0:51:c5:b2:da:ee:a9:c7:94:cd:
aa:7e:a5:cb:33:54:de:10:d7:cd:cc:53:31:d5:79:
23:79:1d:3b:c1:8e:e4:ae:c4:81:8f:91:25:49:37:
f1:12:cc:3c:36:3c:bc:6e:40:38:b2:4e:f9:78:21:
42:74:cd:0c:4c:b8:b4:60:c2:0e:73:b6:88:50:75:
34:37:7c:01:28:00:bf:c5:e9:e4:99:40:00:94:90:
49:10:6c:ad:70:7a:f8:ab:8b:06:7e:b3:88:a1:d0:
62:20:8c:18:37:9d:a0:8f:e9:e9:86:a5:9f:d3:68:
66:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:A9:6D:02:A8:22:F4:62:53:C2:AE:E6:80:44:1D:5A:C2:7C:3D:F5
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/a27b39-8011-4142-86c2-cf83d6e40558/1/valtAqgi9GJTwq7mgEQdWsJ8PfU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.153.96.0/21
5.153.192.0/19
31.12.96.0/19
31.13.0.0/21
37.252.32.0/19
91.199.78.0/24
93.121.0.0/17
95.172.224.0/19
141.138.224.0/19
151.249.0.0/18
159.20.32.0/19
185.196.80.0/22
193.105.150.0/24
212.105.160.0/19
IPv6:
2001:67c:2544::/48
2a00:10e8::/29
Signature Algorithm: sha256WithRSAEncryption
42:5d:ca:84:60:d8:65:0a:22:7c:3c:54:61:6b:68:7b:3e:cd:
ec:7b:32:58:60:a6:37:43:46:b3:2d:3f:de:f6:87:06:77:26:
38:42:e0:01:c0:4c:93:85:f2:7e:3b:8e:45:e5:82:81:e2:78:
d4:eb:4b:f9:98:21:73:e3:8c:fe:16:43:4c:7f:3b:7b:a1:54:
4a:09:0b:f3:3d:f0:67:2f:4c:16:bc:5c:d0:dc:7c:5f:18:f7:
b0:fa:39:20:19:0b:ae:63:d4:af:3c:84:4b:25:b1:a3:9a:1a:
db:2f:9f:a0:e7:ee:44:e5:eb:10:98:c5:f4:e9:24:67:27:0f:
5a:d8:93:09:50:dc:ed:12:cb:21:bf:08:61:d2:e1:92:c9:17:
e2:13:dc:95:d6:a1:9c:7a:ca:b4:c2:fd:35:2f:4e:ab:4b:55:
9d:0c:5f:dd:ea:f3:5f:21:1c:ba:49:9e:4f:97:0c:99:b2:f9:
35:a8:12:27:41:1a:b0:cd:33:57:dc:96:29:a2:2a:89:67:82:
41:a3:72:80:91:63:95:d3:1a:32:19:35:f6:57:95:32:d0:ff:
45:14:c6:c7:a8:ed:f2:5c:b4:cc:85:69:93:db:c9:65:ab:28:
e7:7d:ae:52:af:1e:b0:10:f8:8a:7f:26:f8:e5:0b:37:be:23:
e1:a7:f0:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 23:40:30 2025 by rpki-client