Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
File: 0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer (raw, json)
Hash identifier: M0ZnpU6SpeAi0sRxr95cexS6oUEuBc6mCanHBTU6VIo=
Subject key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221FEA91DB2F0C12B8042CC5B28B56E3
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:24 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 60150
AS: 202592
IP: 43.240.148.0/22
IP: 45.12.100.0/22
IP: 147.185.196.0/23
IP: 147.185.206.0/23
IP: 185.96.56.0/22
IP: 185.136.16.0/22
IP: 193.160.220.0/22
IP: 193.168.200.0/22
IP: 194.38.48.0/22
IP: 207.244.196.0/22
IP: 207.244.208.0/22
IP: 2a05:ff00::/29
IP: 2a07:5b40::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:ea:91:db:2f:0c:12:b8:04:2c:c5:b2:8b:56:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:24 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:61:0f:c5:55:b0:97:04:23:34:26:e3:70:df:
6e:ee:b9:56:a9:04:0f:9a:20:08:6b:91:ee:a7:82:
f0:2a:82:12:e4:91:a8:9f:23:86:6b:de:19:4f:28:
aa:04:a4:e6:dd:27:e2:f1:31:d2:83:fb:dc:2a:81:
f4:62:1a:3a:c3:50:25:2c:d9:bb:42:d6:44:db:78:
dd:b0:ab:1a:55:ac:cc:1d:a5:cd:80:2b:b2:14:db:
78:50:2b:e0:fd:15:33:75:bd:40:ba:27:c6:69:3b:
9d:97:b3:eb:99:a2:e3:ca:fc:ea:87:5d:1d:d4:27:
33:7e:f1:ce:f6:67:1d:d1:b3:67:c4:a2:83:aa:2d:
07:52:9d:72:b4:bb:aa:59:2a:ce:f1:83:46:66:f3:
6f:8a:af:83:2b:fd:3f:2f:f4:60:c6:da:01:b0:48:
37:1e:17:da:6e:5d:26:df:25:9a:09:b7:d6:3a:7d:
23:22:f3:50:de:19:1f:7e:0b:47:ad:24:18:fb:36:
47:e7:71:6a:a6:95:17:90:de:f1:2f:48:97:04:a7:
cd:a5:a2:a7:69:1b:c2:7c:22:24:9d:01:71:3b:eb:
73:93:b5:38:e6:e0:cd:65:19:65:94:02:63:fd:48:
d7:c8:e4:f3:40:78:5e:4c:45:aa:e2:fe:b7:4f:dd:
cf:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.148.0/22
45.12.100.0/22
147.185.196.0/23
147.185.206.0/23
185.96.56.0/22
185.136.16.0/22
193.160.220.0/22
193.168.200.0/22
194.38.48.0/22
207.244.196.0/22
207.244.208.0/22
IPv6:
2a05:ff00::/29
2a07:5b40::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
60150
202592
Signature Algorithm: sha256WithRSAEncryption
a5:6c:ef:75:19:ff:47:a2:3b:63:6f:62:77:2d:4a:e6:0b:e3:
5f:7c:37:47:b9:20:be:fa:4d:8f:ff:19:62:33:2f:71:7b:e9:
c1:00:22:76:76:4f:3c:40:ae:6b:c8:a6:71:ae:34:c1:ee:ec:
b8:6d:81:2c:57:68:44:99:ae:a5:02:a5:59:39:8e:d9:ba:69:
c4:79:17:bd:e3:2a:38:f3:27:02:23:d7:2e:46:9d:74:d2:7b:
8e:60:cf:1c:d6:03:f1:03:ac:5c:45:2c:a0:90:b7:22:8d:04:
b8:1d:f9:a6:b9:b5:ed:04:80:a9:b7:e3:cb:55:38:5e:b3:33:
04:41:8f:d6:6f:a8:09:b0:44:aa:9a:90:09:d2:ac:e9:16:ae:
04:03:87:62:f2:0c:94:02:49:91:b6:f9:28:99:25:6d:64:e5:
75:55:7d:6e:e6:8d:17:c7:e8:ad:f8:9a:1b:6d:63:43:d7:b3:
f8:92:58:ca:c9:59:1e:57:48:5b:d8:57:fd:03:7c:1d:c6:22:
b0:cd:73:87:95:fc:7f:94:71:85:75:81:a4:a3:96:8a:e8:31:
14:91:a7:ec:e4:57:13:45:06:6c:e6:72:77:c6:77:4d:2f:a5:
58:d3:be:34:70:e5:12:5f:37:a2:56:ed:2b:6b:ff:37:ad:93:
4b:ad:07:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:30:44 2025 by rpki-client