Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0DjDOLEo-Drewvadk8MsU1PKA5g.cer
File: 0DjDOLEo-Drewvadk8MsU1PKA5g.cer (raw, json)
Hash identifier: Ioozf/RaR8E0v48yImWv0l37ZV6oj+6YmAG8quxv81I=
Subject key identifier: D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B26E8A0B35408859D83A0A70BBB967
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:47:41 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 89.206.64.0/18
IP: 130.60.0.0/16
IP: 185.207.116.0/22
IP: 192.12.247.0/24
IP: 192.41.132.0 -- 192.41.136.255
IP: 2001:67c:16dc::/48
IP: 2a0b:2040::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b2:6e:8a:0b:35:40:88:59:d8:3a:0a:70:bb:b9:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:47:41 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d038c338b128f83adec2f69d93c32c5353ca0398
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fa:34:dc:ab:71:fe:4d:6e:d0:74:94:41:90:
93:9d:e5:66:33:9e:30:8e:8a:25:1f:7c:b4:5b:c2:
20:8c:91:88:6f:26:ad:d2:24:fb:a1:cd:12:76:08:
65:9b:5a:5a:cf:4a:0b:f6:31:29:93:42:7e:c2:56:
e1:a4:63:a1:04:5e:31:a8:43:a9:a1:2a:7e:87:a3:
8a:f7:7d:c5:80:a7:05:11:f9:5e:0a:1f:c8:39:05:
e3:98:90:73:b9:c1:59:f2:44:29:3f:1e:3c:2b:06:
20:3c:c8:b6:db:5c:d6:4c:f4:de:22:d9:04:67:8a:
c8:d5:d2:8a:cf:dc:79:72:44:fa:17:a3:6c:bd:75:
91:bd:96:6c:96:34:89:80:75:22:e6:15:cb:51:5c:
66:48:3c:0f:30:f5:4c:2a:2c:8a:ca:7d:b9:d5:fa:
4a:49:4f:39:ee:57:53:0a:d7:02:19:c5:a9:96:9a:
e7:7c:3e:9a:7b:f2:1f:30:bd:89:af:3c:b5:35:ec:
09:6a:1a:df:bf:6d:95:41:36:05:37:cf:0d:13:ec:
da:fe:df:5c:e8:6e:77:98:6f:72:43:81:f5:65:39:
b9:5d:16:f4:bc:1a:d4:cd:e3:69:fc:b6:f9:39:54:
25:5a:34:e3:d2:b0:3b:e7:4c:c4:c8:62:62:a5:85:
ba:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:38:C3:38:B1:28:F8:3A:DE:C2:F6:9D:93:C3:2C:53:53:CA:03:98
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/925f91-30c5-4a6b-a149-9bf8b1ef2e96/1/0DjDOLEo-Drewvadk8MsU1PKA5g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.206.64.0/18
130.60.0.0/16
185.207.116.0/22
192.12.247.0/24
192.41.132.0-192.41.136.255
IPv6:
2001:67c:16dc::/48
2a0b:2040::/29
Signature Algorithm: sha256WithRSAEncryption
9d:0f:ef:8f:58:2e:b0:c9:da:4c:a3:ee:48:ce:3b:2d:f6:21:
9c:f2:2a:9f:7f:6a:eb:7b:a9:31:e5:08:8f:76:87:32:92:36:
a9:29:7b:16:b0:3b:6b:53:2a:0f:f2:d7:bb:39:c4:fa:f0:80:
d3:34:27:b6:74:32:df:82:42:27:2b:cc:3a:20:f7:47:0b:1f:
62:9e:ab:eb:65:05:42:53:58:42:c5:0f:2a:b2:98:6d:46:a4:
82:34:2c:b4:8c:6e:44:e4:27:d5:3a:6f:2f:1b:ba:89:3b:6d:
48:ee:d1:49:47:f0:4f:a2:a1:20:e4:7e:81:dc:19:9f:5e:9b:
3a:49:dc:75:90:bd:11:c3:ae:9f:ab:1d:44:41:21:b7:37:49:
17:0a:09:ae:c8:ed:26:db:5f:90:46:19:ae:ab:5d:cd:56:52:
20:ef:0b:7e:e0:8f:c9:a4:2a:5b:35:28:ea:c0:90:0d:2e:44:
7c:03:8b:c4:74:cd:45:71:74:e5:4b:e3:7f:c3:e0:c9:98:85:
4f:e9:bc:17:bf:56:4b:68:e2:91:ef:d1:2b:34:e9:6c:93:d9:
84:a0:1f:a7:3a:fb:2b:d2:44:75:ec:33:c3:82:74:21:54:6e:
91:4a:49:9c:48:6c:0c:f3:5b:90:74:2f:4f:31:bc:4a:05:1f:
d0:2c:1e:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:07:59 2025 by rpki-client