
Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/wV59e7ae-ssMc5ApcsdNctKb938.cer
File: wV59e7ae-ssMc5ApcsdNctKb938.cer (raw, json)
Hash identifier: SiO9HWZLnyJ/ttopagvLPiBu6wTFVcl/s0X/NIsnA2s=
Subject key identifier: C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942369D36378D74C70C860F19781D7E7E0
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 19:48:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 56789
IP: 45.144.196.0/22
IP: 93.190.124.0/24
IP: 146.19.192.0/24
IP: 185.102.168.0/22
IP: 185.238.128.0/22
IP: 193.110.189.0/24
IP: 2a06:25c0::/29
IP: 2a09:4800::/29
IP: 2a0f:d440::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:69:d3:63:78:d7:4c:70:c8:60:f1:97:81:d7:e7:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 19:48:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=c15e7d7bb69efacb0c73902972c74d72d29bf77f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:b2:bc:0e:16:86:b8:8e:9c:02:98:a7:f0:16:
80:e0:d6:d0:cd:f0:bc:de:c5:91:ef:eb:77:1b:97:
a7:36:db:ce:71:ed:f8:5c:bc:46:5e:e7:67:06:09:
c2:9f:7b:0b:43:01:17:4d:2d:73:d1:6f:be:b6:f3:
89:96:0f:fd:90:61:cd:01:b2:12:ed:41:71:09:72:
85:6b:14:94:bf:77:e5:ca:bd:41:7a:a3:f8:19:41:
dc:41:cd:80:f4:86:fc:51:35:b1:dc:33:eb:65:22:
c2:91:b0:d1:1a:cf:7a:55:13:83:02:6c:bf:b2:02:
ef:45:3b:dc:bf:18:2d:5f:9e:8d:27:07:2c:c2:50:
e2:4a:a8:9a:31:12:92:fc:dc:87:19:42:32:a1:4b:
a0:bf:ed:63:3c:18:6e:d6:b8:72:ba:0e:98:5f:ef:
8f:fe:f1:51:a4:a1:f9:59:b3:90:9e:52:2e:18:8f:
6d:a8:7d:f8:43:d5:b6:8d:54:87:e6:32:cd:ee:a0:
32:34:4e:1e:a4:91:39:54:95:3f:18:5e:28:1d:a0:
3e:cd:39:6c:d7:39:e1:1f:34:e7:e1:5c:1f:27:f7:
76:2f:83:18:d7:e2:bf:42:34:77:7d:28:80:13:e7:
1b:77:42:aa:d2:23:42:4f:d6:0e:18:ff:45:45:e4:
9a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:5E:7D:7B:B6:9E:FA:CB:0C:73:90:29:72:C7:4D:72:D2:9B:F7:7F
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/ea402a-0ff6-47d9-9cd0-347a0f7c5b08/1/wV59e7ae-ssMc5ApcsdNctKb938.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.196.0/22
93.190.124.0/24
146.19.192.0/24
185.102.168.0/22
185.238.128.0/22
193.110.189.0/24
IPv6:
2a06:25c0::/29
2a09:4800::/29
2a0f:d440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
56789
Signature Algorithm: sha256WithRSAEncryption
55:fe:c2:16:0b:35:b1:e2:65:f7:7a:06:78:d8:e2:a4:8b:01:
c2:ad:8c:98:85:1c:2c:3f:91:23:a6:49:dd:b4:ea:ac:1b:42:
15:d2:4a:70:01:ea:5d:9b:7a:b6:26:d8:21:46:dc:1f:9d:ce:
ea:46:72:15:00:b5:cf:e3:39:34:3c:95:d5:03:6e:0a:31:65:
50:8b:6a:af:f0:22:36:ef:09:fe:43:e9:a7:28:97:fa:60:02:
bc:31:58:17:4b:1e:9e:54:e6:57:06:6c:c6:88:7e:34:ec:5c:
b7:20:9e:37:4e:0d:ce:a7:fa:b3:05:2e:2d:60:c4:de:cc:e6:
a1:fc:ab:0c:eb:de:c0:da:40:03:de:54:cf:bf:36:7a:16:96:
04:76:ac:46:fd:94:98:02:3b:79:87:7a:49:43:7b:e9:bd:ab:
97:9b:da:5e:ee:59:f6:ff:ef:0a:e7:e3:69:8e:49:d1:b5:8c:
ef:4a:36:04:89:c8:4d:4f:f4:e9:a0:5f:62:18:0d:72:82:6c:
7b:90:36:d3:01:41:b9:14:9a:d3:36:47:81:31:5f:4b:67:b9:
11:5a:b4:3c:32:36:93:7e:f6:91:76:8e:d2:74:56:ae:a7:77:
8c:2b:56:a4:93:41:1a:2c:d1:ab:fe:3b:a1:fd:b5:65:d9:c4:
a6:91:74:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 21:25:57 2025 by rpki-client