Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-LPVjZk_lghA9-8v4gwAityXH5c.cer
File: 1-LPVjZk_lghA9-8v4gwAityXH5c.cer (raw, json)
Hash identifier: F+g/fuUPwYnGnPdc0XelUg1jaGEDLoLaCRlb6hzsvcY=
Subject key identifier: F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01941FF9FF9F0C2C4B0AFF65C6B75EC68BDC
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 03:47:45 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 41000
IP: 176.74.16.0/21
IP: 185.86.108.0/22
IP: 185.176.248.0/22
IP: 193.23.224.0/24
IP: 193.33.178.0/23
IP: 194.110.243.0/24
IP: 195.170.173.0/24
IP: 2a00:b980::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:1f:f9:ff:9f:0c:2c:4b:0a:ff:65:c6:b7:5e:c6:8b:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 03:47:45 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=f8b3d58d993f960840f7ef2fe20c008adc971f97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:9a:4d:26:f4:ec:da:53:16:19:32:d3:d0:d6:
2f:10:c0:e0:0c:0c:13:49:7d:04:34:b9:df:c1:bc:
56:ff:3c:5f:22:cd:9b:de:1d:09:a1:5c:59:4c:ca:
04:d2:df:92:c7:47:7a:58:95:aa:5a:bf:03:5c:8c:
4e:45:9e:bd:57:95:f3:c0:1d:1f:75:70:f9:c1:ec:
24:cd:03:9f:14:10:7d:52:77:dc:ec:14:4b:0e:1d:
10:4a:93:c3:46:bf:44:a1:60:f6:91:bc:50:e2:27:
05:c4:5d:d2:39:ba:f0:3b:b1:00:3a:c1:5c:d6:25:
b6:ac:e3:18:62:57:ea:98:0e:e3:80:51:6c:3f:00:
92:5d:25:c2:53:da:1f:cb:c8:64:02:99:b1:8c:9e:
d1:97:c7:27:7e:7d:68:fb:dc:34:61:f3:af:ff:1f:
7d:5c:b1:ad:25:d3:7a:5c:0d:cc:0f:4c:66:e0:77:
e2:02:a3:ca:60:45:ef:05:5a:db:a2:33:85:03:0c:
ee:78:fa:af:85:d5:a3:7d:e3:3d:b0:90:40:40:9e:
24:95:e4:2f:a3:36:94:ab:13:9e:d1:74:5e:4a:ff:
5b:0f:1f:45:d2:fc:1b:36:f5:95:91:0e:09:00:6f:
5f:90:1d:ac:c6:e4:d2:e2:82:59:1f:65:e4:6d:7e:
00:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B3:D5:8D:99:3F:96:08:40:F7:EF:2F:E2:0C:00:8A:DC:97:1F:97
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/8b58e9-3230-4418-8f68-81224e480c03/1/1-LPVjZk_lghA9-8v4gwAityXH5c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.16.0/21
185.86.108.0/22
185.176.248.0/22
193.23.224.0/24
193.33.178.0/23
194.110.243.0/24
195.170.173.0/24
IPv6:
2a00:b980::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
41000
Signature Algorithm: sha256WithRSAEncryption
8c:16:b1:71:6f:a5:90:2e:e8:03:27:b1:40:6f:2e:fb:27:46:
2e:b5:11:40:7a:05:88:4b:6c:ee:c5:09:63:0b:69:61:0d:b7:
39:2a:30:b4:15:1b:b8:1d:98:54:a5:fc:c7:71:44:b6:f3:e8:
a2:b5:d6:b2:fe:41:1f:3b:91:ad:75:b8:b7:43:e8:c9:d2:84:
1d:56:d1:34:c2:d2:56:ab:58:b1:6c:0c:70:07:dd:3c:4c:74:
47:6f:e3:e5:e6:55:46:2b:a3:e8:b8:a0:c7:4a:1b:f1:78:a8:
c3:13:4f:e7:39:06:35:b7:f9:5b:37:ab:42:c0:71:8a:31:0c:
5b:30:6a:d0:64:49:ee:d0:fd:03:14:58:2f:d2:65:61:ca:76:
bc:e2:31:53:54:e7:3a:8b:dd:be:7a:f3:e7:05:41:91:11:32:
4f:87:44:d1:e2:cc:f9:cc:80:82:b0:9c:35:2e:4c:f8:57:7e:
22:18:8a:86:58:d8:14:f6:67:0d:4a:8e:78:ff:c7:31:63:d7:
a5:e6:f8:11:c7:0f:79:0f:17:ad:ed:5b:9a:e1:11:5f:9a:e2:
2d:56:87:28:69:75:a0:b1:9d:10:ff:2f:18:95:50:0b:1e:ea:
ab:b0:cb:46:19:4f:32:e9:d6:e0:9f:e0:59:04:94:30:07:f7:
5d:c7:47:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:11 2025 by rpki-client