Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer
File: 1-ANeyd4lcMHnp9tA4nLkVUjJICs.cer (raw, json)
Hash identifier: Gs5Lth901kO6JpEoYQCgOTQ+y055r+jxEsIUf2Ae3to=
Subject key identifier: F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420685A7F9A60115E4278518632D12D42
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 05:48:17 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 210255
AS: 210806
AS: 212933
IP: 185.37.11.0/24
IP: 193.22.224.0/24
IP: 193.200.233.0/24
IP: 2a0d:5a40::/29
IP: 2a0f:c1c0::/32
IP: 2a11:da80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:68:5a:7f:9a:60:11:5e:42:78:51:86:32:d1:2d:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 05:48:17 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8035ec9de2570c1e7a7db40e272e45548c9202b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:2e:49:f2:72:c1:8d:ba:a7:ed:20:c0:5f:28:
6a:6b:a8:a0:f0:31:9a:c8:aa:44:be:a5:0b:aa:90:
db:bb:d0:25:ad:da:7c:d9:4f:1d:86:a2:26:07:89:
69:ca:5c:54:de:63:95:29:19:b1:0e:57:06:5c:f1:
fa:bf:ba:e2:8d:e9:ac:7d:37:22:ed:49:2b:95:d1:
ff:a1:8a:90:aa:10:78:05:87:07:80:d6:1b:94:81:
2c:c3:9c:27:9e:bc:38:ce:8e:8d:98:27:c9:a4:7b:
e9:33:51:05:1a:00:2d:85:df:cb:b6:08:d4:80:3f:
c1:fc:d8:4e:59:63:65:4e:5f:5a:f0:59:96:8e:cb:
48:be:c4:84:28:19:fe:29:80:e3:67:56:19:dd:14:
95:0d:73:8d:37:90:f7:00:a1:96:c9:60:05:5d:67:
06:c3:e6:70:48:9b:f0:f1:26:d8:8b:e4:17:3b:b5:
16:fd:b9:f9:65:b3:37:62:fd:b6:0a:a3:e3:96:e0:
72:36:9b:d1:1a:72:4c:8f:a8:5e:84:a6:7b:81:3b:
4e:79:bc:17:7f:cc:82:4a:d2:54:5d:f5:33:cf:23:
fb:15:89:ad:f9:40:02:a0:ab:ed:e8:9f:d2:df:57:
8c:85:b0:e4:d0:ea:91:87:68:8d:90:20:ec:15:08:
8c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:03:5E:C9:DE:25:70:C1:E7:A7:DB:40:E2:72:E4:55:48:C9:20:2B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/101126-1d32-42a6-87fe-9223846ff30b/1/1-ANeyd4lcMHnp9tA4nLkVUjJICs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.37.11.0/24
193.22.224.0/24
193.200.233.0/24
IPv6:
2a0d:5a40::/29
2a0f:c1c0::/32
2a11:da80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
210255
210806
212933
Signature Algorithm: sha256WithRSAEncryption
75:53:8f:c8:b2:ff:df:d6:25:8a:e2:0c:14:53:3c:ae:ad:9e:
d5:c9:f5:16:41:4b:67:b1:70:6f:21:47:a3:05:de:e6:b6:f2:
08:8d:1f:8f:47:1f:47:81:d8:49:ae:38:0a:e3:14:21:2f:6a:
df:59:04:5d:19:e0:d6:2d:82:96:73:2b:46:2e:64:2a:bf:59:
c5:73:93:30:35:43:aa:84:8c:41:23:fb:d3:93:bc:fd:af:ce:
44:e5:1c:9b:01:84:fe:94:08:e4:cd:ce:46:2f:40:97:52:b3:
db:df:b8:ce:24:08:b1:46:8b:9e:9e:e9:ed:81:80:a2:54:64:
22:17:bb:5e:bc:41:71:af:66:36:c0:f0:15:cc:f4:48:11:e8:
b3:25:af:77:91:1f:48:e7:4c:51:86:d3:02:52:e0:fd:a8:f5:
c3:ce:bb:87:f0:e3:47:18:5f:9f:df:3a:d0:f9:d7:f9:b6:70:
4f:3f:3e:f8:46:2e:e6:f7:db:6c:67:f2:f5:91:0d:b2:64:d1:
41:bf:b5:0b:f4:33:8c:bf:eb:62:12:6c:e1:0c:36:34:b0:b5:
64:89:09:12:8b:24:8f:cb:9f:d1:0f:0b:7c:23:e1:cc:ba:56:
9d:7e:9c:f1:81:94:03:4c:b8:9c:d5:5e:91:59:6f:d7:b8:33:
41:45:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:09 2025 by rpki-client