Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer
File: 1-ra6CmYKqI-lTvjXRup-UneB_Dw.cer (raw, json)
Hash identifier: vGZk+eTFQ3PcHxdw3C64dILRxJq+1O5Tb1XXcYoYMg0=
Subject key identifier: FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424B3B4BB15D553177BF88B25E862514F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 01:49:04 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207861
IP: 193.56.247.0/24
IP: 193.57.4.0/24
IP: 193.57.7.0/24
IP: 193.57.21.0/24
IP: 2a14:a200::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:b3:b4:bb:15:d5:53:17:7b:f8:8b:25:e8:62:51:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 01:49:04 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fab6ba0a660aa88fa54ef8d746ea7e527781fc3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:fa:56:8f:c1:2e:6d:39:86:92:90:84:ed:e7:
3d:79:80:54:6d:32:4d:c0:d8:03:d3:33:c0:71:80:
4f:d9:d5:5f:27:eb:66:58:5a:45:90:df:04:84:d6:
ef:6c:d2:c6:da:cc:eb:df:c6:4b:e0:26:dd:5d:25:
d1:2e:e9:38:0b:c8:e6:49:e1:10:b7:68:45:44:12:
de:4b:96:cf:1c:a5:58:f3:a8:e4:4e:84:5a:70:80:
c3:d4:2e:83:49:39:2f:da:c5:1f:aa:9f:cc:f6:5f:
0f:f0:e2:f3:ca:13:30:ee:b5:48:00:c0:1a:45:af:
c4:72:64:cc:47:b8:38:b6:9b:cf:35:3d:96:d9:75:
ce:fe:60:90:de:47:e5:8b:ac:57:6d:ec:fb:ba:45:
ba:46:d4:09:16:fd:10:b5:2a:a0:7d:c8:e6:d5:a1:
1c:be:3f:2a:8f:2b:3b:c4:96:36:d9:c9:dc:a5:53:
06:da:25:02:e9:13:7c:ec:db:7a:4b:26:ce:ed:d0:
13:06:95:7b:b1:82:2d:92:b4:64:92:91:38:fa:5b:
ca:2f:5a:6d:1b:11:e0:54:86:36:2a:62:2b:be:c5:
e8:fb:a9:8b:c5:47:c5:9b:87:42:54:63:0d:96:9d:
e3:c6:7d:45:9a:e5:31:e4:e3:f8:b1:42:36:d3:ec:
60:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:B6:BA:0A:66:0A:A8:8F:A5:4E:F8:D7:46:EA:7E:52:77:81:FC:3C
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/15773e-ff1c-40ee-ba0b-2a1ba4889635/1/1-ra6CmYKqI-lTvjXRup-UneB_Dw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.56.247.0/24
193.57.4.0/24
193.57.7.0/24
193.57.21.0/24
IPv6:
2a14:a200::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207861
Signature Algorithm: sha256WithRSAEncryption
7f:bc:2d:49:3d:d6:4a:c0:28:9d:a6:b3:b0:2e:88:88:c9:c8:
df:07:8d:38:f5:56:a7:b9:01:01:43:ed:7e:36:c2:0b:40:27:
f6:e2:83:2c:b3:ac:35:52:e5:7b:06:aa:28:d4:89:91:7c:19:
7a:ba:b0:89:77:f3:dd:0b:4d:58:13:c1:f2:c5:b6:7d:a6:23:
a1:00:52:b6:97:a9:6f:4b:13:b6:3d:30:c8:d5:a0:1d:b9:66:
3e:78:90:bf:e1:30:ce:6d:32:ca:a9:cf:e6:36:a8:93:e5:9f:
c0:ca:0f:91:99:62:f9:ea:0a:b3:73:3d:20:68:b2:99:bd:ee:
20:dc:4d:80:af:36:74:ee:96:d7:1f:f1:5a:d3:a0:47:55:64:
28:8a:8d:e6:ff:55:83:b9:ae:87:d5:bc:5f:f0:2e:b9:dd:2a:
20:74:b1:29:a0:a3:bb:c5:e1:04:77:05:66:af:9c:8b:1e:c1:
b8:f5:1b:67:d6:13:fa:86:58:dd:da:96:08:00:b3:66:40:04:
2d:60:7e:b1:63:57:13:8b:e0:f1:5d:d2:0e:ed:04:84:4c:a9:
de:02:be:1e:aa:cb:e2:3b:6b:b0:02:4a:60:0f:7d:cd:14:e2:
6b:c8:04:f2:38:81:2d:70:ab:41:7f:0f:69:ea:dd:97:ed:ae:
9c:c8:25:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:22 2025 by rpki-client