Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer
File: 0S9BWRIKpRuxzfEW0GpPwCkv-Ww.cer (raw, json)
Hash identifier: Jbw2YB8cNQ5WCTnY8qcVFkeoTPyB8tKZHRATFuke+ps=
Subject key identifier: D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B25943502D2CB324D270E2FD7CA147
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:43 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 59951
IP: 185.234.84.0/22
IP: 2001:67c:2cf4::/48
IP: 2a0d:900::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:59:43:50:2d:2c:b3:24:d2:70:e2:fd:7c:a1:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:43 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d12f4159120aa51bb1cdf116d06a4fc0292ff96c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:c0:ed:fb:23:df:3e:88:08:18:76:5e:82:
b7:dc:0b:c9:54:9f:1f:84:b6:9e:e6:18:4e:20:20:
c9:04:04:c9:61:c6:b0:12:5e:e4:2d:80:b3:44:bf:
1f:d3:82:44:fd:e7:0e:28:d9:31:ef:5a:fb:99:89:
cd:9e:33:2b:53:91:c3:12:cc:d0:04:ab:e2:0f:a6:
e3:31:89:54:15:8b:a2:15:fe:c7:c5:d9:49:1b:70:
e5:a5:b8:28:73:4a:6b:4a:0e:27:f8:23:d1:4f:6f:
0b:e0:ab:5e:fe:5c:f1:f7:ae:fe:30:4b:b6:b9:82:
6b:3f:10:a2:0d:2b:ca:7e:29:61:e9:1e:72:51:f7:
f3:77:ca:08:a7:c7:8c:91:5b:09:5e:a5:2a:fb:26:
45:fe:fd:2f:f3:db:fe:3f:e8:5f:0e:02:89:63:c4:
58:53:2f:2a:c4:81:ea:dd:90:be:02:fd:4c:47:2c:
4f:92:85:7a:9c:61:02:c1:2a:c5:9c:e0:4b:d8:4a:
99:68:67:94:f2:be:65:28:61:96:cd:9a:58:a3:f7:
45:65:47:37:f1:85:13:cf:a3:7c:35:21:e6:b0:67:
e0:e2:87:b9:8c:66:78:00:ff:a8:77:0f:2f:36:60:
94:0e:5f:eb:0f:bb:5b:dd:bb:a9:23:e7:0b:16:64:
3c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:2F:41:59:12:0A:A5:1B:B1:CD:F1:16:D0:6A:4F:C0:29:2F:F9:6C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/98967a-d396-4921-a09f-fc4a6ab788ad/1/0S9BWRIKpRuxzfEW0GpPwCkv-Ww.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.84.0/22
IPv6:
2001:67c:2cf4::/48
2a0d:900::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
59951
Signature Algorithm: sha256WithRSAEncryption
50:3e:2e:e3:cb:4a:0e:e7:a3:9e:d0:01:16:4c:eb:f9:c8:55:
5b:f5:3d:40:63:59:82:fe:72:6a:03:f4:f4:7f:68:ed:32:d5:
a3:23:a6:4a:42:ec:7a:1f:74:1d:f9:9e:21:63:7f:2d:e4:b0:
71:34:5c:82:db:3a:6d:fa:88:32:8e:e2:74:17:16:e7:5c:e9:
d8:b6:db:e9:f0:be:1f:1a:f1:41:d3:d0:8b:20:7e:a9:36:c5:
1a:a1:e5:a0:99:8a:43:cd:0b:f6:7b:0f:7d:7c:f6:da:e5:58:
6d:14:fa:35:86:99:d6:79:d8:fe:73:d9:b2:08:48:d1:9d:04:
9c:fa:be:be:cb:be:fa:a7:17:7d:bc:13:ee:12:3d:f7:85:6c:
f6:cf:49:19:0a:f9:eb:cc:aa:89:5f:7c:e1:63:a9:d7:5a:0a:
91:68:ad:e6:a9:51:f1:f8:64:86:53:56:21:9f:db:47:5c:56:
c7:71:c0:f9:f2:08:e5:54:56:f6:c9:52:21:a6:ef:41:1b:dc:
96:66:ff:61:0e:b1:01:0d:6f:a2:c1:aa:89:a6:0b:fe:d9:d5:
d6:0f:4c:52:7a:62:cd:15:29:cc:62:59:fc:02:3d:4e:2e:ab:
60:df:33:d2:54:78:d3:14:d3:23:c3:cf:58:8e:1e:61:3c:66:
33:aa:5d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 20:04:02 2025 by rpki-client