Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1BsIHA35lAorAgpOvoqXScv-rVU.cer
File: 1BsIHA35lAorAgpOvoqXScv-rVU.cer (raw, json)
Hash identifier: nxk/t9x7EBNc7OKwB3SO50e/HJcHRTYfjrOjbdFLuJs=
Subject key identifier: D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01946A633D325286725C39EF83460A580D86
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 15 Jan 2025 14:34:36 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 216450
IP: 85.239.92.0/22
IP: 194.180.8.0/24
IP: 2a09:b000::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:6a:63:3d:32:52:86:72:5c:39:ef:83:46:0a:58:0d:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 15 14:34:36 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d41b081c0df9940a2b020a4ebe8a9749cbfead55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b6:54:44:5e:47:59:d1:44:7b:b7:ff:44:e6:
f4:18:24:ca:bb:3b:f8:85:c7:49:9c:7f:14:d2:63:
8c:46:07:71:60:7c:13:1c:8a:9d:bb:85:a1:b1:a3:
36:30:b1:f9:d3:47:90:fd:d9:49:55:fb:23:f6:17:
44:19:8b:cb:3c:c6:2a:19:7d:45:d6:b1:89:ff:91:
e8:83:80:c5:7b:8a:00:b2:a8:39:db:c3:15:13:d1:
18:2f:85:c4:17:3d:11:b4:57:65:67:80:f9:28:ff:
dc:7e:0c:43:0b:5d:0a:38:91:a4:97:7b:a0:65:33:
b1:15:f9:54:16:cc:bd:45:d5:d3:cd:49:b0:4a:e3:
98:b1:72:0c:2c:c9:ad:ce:66:61:48:5f:6b:39:04:
d7:4e:b4:22:cc:7a:ba:86:41:e3:e0:a8:43:ce:c5:
bb:b4:e3:90:a0:64:48:ea:07:cf:22:ae:34:68:88:
d2:4a:6b:27:c8:12:85:78:53:02:57:63:97:a3:db:
17:a5:b2:ee:38:d6:28:41:7e:45:a3:9a:35:9c:43:
c4:eb:8f:02:ea:3e:f1:4e:f7:09:e3:52:e3:ac:be:
a6:93:70:5c:cd:d1:f2:7f:dd:22:86:bb:39:4d:d1:
43:22:fd:1e:a9:5d:f1:0f:c2:2e:91:27:53:0f:8a:
5a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:1B:08:1C:0D:F9:94:0A:2B:02:0A:4E:BE:8A:97:49:CB:FE:AD:55
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/c787a2-d28c-436d-85e9-5ceb34564f09/1/1BsIHA35lAorAgpOvoqXScv-rVU.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.239.92.0/22
194.180.8.0/24
IPv6:
2a09:b000::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
216450
Signature Algorithm: sha256WithRSAEncryption
5c:5d:7f:80:a6:7f:b2:7f:f4:b6:06:50:d3:2d:d9:99:6b:c7:
47:9d:28:39:df:53:c8:f8:d1:fa:8e:f3:5a:cf:6f:eb:a2:37:
82:03:ef:6b:82:cc:4f:bb:b0:a6:e2:37:d0:b3:90:21:7f:bd:
ce:b6:53:e6:b4:f0:b4:14:73:cb:a7:9d:68:06:3a:8c:db:2f:
a3:6c:60:f7:3a:7e:af:86:df:0d:37:c1:66:97:c6:4c:6d:28:
3c:eb:b3:ce:de:cf:8d:5c:a2:5e:14:db:8f:bf:08:02:1f:37:
d6:59:b5:96:55:c7:c1:5c:dc:e9:c8:fa:7f:96:67:fa:c6:f6:
04:0a:71:8c:31:ba:d4:06:cd:a6:ce:c5:d3:a9:4b:b2:4d:d1:
9e:54:e0:02:75:95:dc:dd:71:20:b6:e3:d5:79:d2:d0:85:0c:
3b:bb:ab:27:c6:cf:a0:06:21:aa:61:2a:a1:46:dc:a1:13:6f:
68:40:e7:24:d4:ba:37:c4:d5:66:ad:c1:66:40:cf:82:f7:7d:
d1:16:fc:da:9f:37:81:67:de:1b:d4:d8:e8:46:af:6b:dd:3b:
16:dc:5a:ac:cb:81:cf:9d:27:68:f4:8b:39:00:15:8d:17:3f:
cc:8f:1c:f7:60:84:9a:e9:a9:e7:bf:1c:52:1d:50:d2:57:c3:
f7:94:cc:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 09:14:20 2025 by rpki-client