Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer
File: 1-wruDhv4ISwCJeeFs5TwQWuzK7c.cer (raw, json)
Hash identifier: Fgn6juCdZcLq9hzKgmxW6GGLB3O4lrcXyLNdjcdw+2Y=
Subject key identifier: FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019427488E0209F43456C5F891E2405DA7A5
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:53 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 212629
IP: 185.145.108.0/22
IP: 2a07:48c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:48:8e:02:09:f4:34:56:c5:f8:91:e2:40:5d:a7:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:53 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=fb0aee0e1bf8212c0225e785b394f0416bb32bb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:e4:bc:f1:52:eb:9e:7c:cf:11:98:db:d8:62:
72:2c:10:e7:fa:7b:2a:3b:14:66:78:b1:68:92:9a:
13:33:f3:22:9e:10:12:70:49:56:aa:2e:d7:2d:cf:
56:fb:29:a8:dd:d9:4f:b9:3d:da:36:a7:e6:06:0d:
4e:d1:0b:56:63:e0:45:16:3b:33:0b:e6:94:b7:76:
c4:68:17:6a:ea:fc:2b:c9:9b:2c:0f:d7:92:66:6d:
0f:2d:14:df:a7:b3:7d:52:cc:ff:7b:c3:bd:ed:27:
57:ba:3c:86:41:29:60:c1:5b:bd:21:6d:b6:e6:d6:
db:95:b1:97:e5:b2:c9:b7:2b:73:57:5b:11:2e:a2:
65:e4:34:79:26:06:37:b6:7f:f4:7c:d4:6f:73:ed:
7d:71:d3:18:30:fb:c6:37:58:38:f7:24:53:9a:d9:
a4:d9:2a:13:29:1e:39:dc:5c:ce:fb:9d:56:ad:a8:
5d:d6:61:22:b8:0a:85:da:1e:94:4d:23:1e:3d:30:
48:c2:08:8f:ad:07:ca:d5:62:fd:8a:2e:66:9f:54:
c4:d4:78:e3:86:6b:d9:f5:28:a8:65:ba:db:b3:f1:
42:bb:7c:c9:65:db:cf:45:7a:c7:97:0b:6c:13:cb:
75:8f:74:52:ed:f6:e4:10:14:65:50:1e:f1:f5:14:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:0A:EE:0E:1B:F8:21:2C:02:25:E7:85:B3:94:F0:41:6B:B3:2B:B7
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/051f88-857c-4e4b-bd3d-f1b893887884/1/1-wruDhv4ISwCJeeFs5TwQWuzK7c.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.145.108.0/22
IPv6:
2a07:48c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
212629
Signature Algorithm: sha256WithRSAEncryption
5c:7c:a3:ce:3c:18:59:dc:3b:b2:d9:c6:00:6b:88:57:77:c4:
6c:66:55:ea:ff:be:c1:ab:7d:cc:3e:a5:a9:f6:e2:cb:88:0c:
4e:84:02:a6:a7:16:29:79:91:0e:34:6e:6e:f7:61:4f:a2:45:
cc:f1:13:73:4a:01:c1:04:00:b3:9d:de:c4:3f:03:00:bd:da:
d9:c8:b6:4c:8c:28:5b:87:df:44:6a:36:1a:8f:05:ae:a5:b1:
aa:01:7a:b1:52:13:94:c2:37:24:0e:21:a5:9f:30:d5:c7:4f:
56:e8:1f:1e:17:10:fe:e7:0a:e1:a1:10:c8:16:f0:d7:96:ff:
b5:43:67:f1:33:3a:c1:34:4b:74:60:63:45:8a:70:5b:0a:2a:
7b:47:5f:a5:f6:fa:84:d0:ec:a4:3c:62:86:4a:08:45:8f:ca:
bd:ea:11:36:1f:fb:6a:52:3d:cd:d1:87:93:67:70:ed:83:fe:
09:32:df:15:46:2e:06:5c:8c:39:69:27:49:dd:e4:e9:d7:90:
fb:eb:2f:52:2c:33:5b:8c:4a:d9:2d:a6:9f:ac:72:68:7c:46:
f7:74:6a:af:71:4c:2f:2d:90:16:90:ec:2b:bf:ca:1b:14:00:
32:38:8e:2d:43:a7:da:91:f4:db:d5:71:80:e7:17:59:ac:23:
29:0f:ca:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:57:13 2025 by rpki-client