Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1Cq3jtp78B2VtZd07TRry_lqJoQ.cer
File: 1Cq3jtp78B2VtZd07TRry_lqJoQ.cer (raw, json)
Hash identifier: nlUUxYldsJ3tgV1g1YJlpQFHRcLjfKxV2C2UUUfu//8=
Subject key identifier: D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942747F0378A10615E9BF48144AFF6A3D6
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 13:50:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207276
IP: 185.112.72.0/24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:27:47:f0:37:8a:10:61:5e:9b:f4:81:44:af:f6:a3:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 13:50:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d42ab78eda7bf01d95b59774ed346bcbf96a2684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:57:2e:fe:47:5a:fa:84:fb:9f:c3:90:9f:
40:62:4c:93:8b:9b:a9:b6:f5:30:16:f5:be:f9:36:
c8:ee:d0:e0:84:24:90:e1:6f:48:0a:6b:4c:92:55:
5e:77:0c:17:8a:35:13:f4:fa:9b:79:f8:18:38:c6:
b5:d0:9e:a0:4e:e0:11:31:2e:ea:d1:7a:e1:b9:7c:
c9:56:10:78:29:a2:20:59:dd:65:e7:37:4b:24:92:
9f:92:f9:ea:b3:91:7f:ce:c5:cf:6b:8c:af:ef:ab:
8c:1e:02:05:f9:a1:0d:52:e0:87:bb:d1:54:28:07:
ef:6e:0c:9f:31:3b:d8:09:0b:8e:46:ef:55:dc:99:
af:73:83:f0:c4:58:20:32:ff:0d:dd:83:67:44:32:
64:49:6d:d0:42:5b:4e:64:15:d8:7e:51:b6:3f:e1:
83:55:d5:38:45:24:37:9f:53:b0:c8:33:8d:8c:5b:
ef:0c:7f:fc:7b:d9:a7:a4:06:f5:56:32:e5:44:5e:
0a:93:fd:0f:96:7c:df:b3:32:25:a6:ad:5c:56:ca:
5f:a1:fb:8e:89:ea:f6:3a:db:f0:d1:93:79:53:3b:
30:8d:ad:29:40:5b:d8:65:4f:9e:8a:b9:00:8e:d2:
51:9b:ee:9e:37:6b:71:a4:62:ea:84:71:fd:82:d6:
e0:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:2A:B7:8E:DA:7B:F0:1D:95:B5:97:74:ED:34:6B:CB:F9:6A:26:84
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/644a00-2d8b-4725-b5ca-9012beae2852/1/1Cq3jtp78B2VtZd07TRry_lqJoQ.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.72.0/24
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207276
Signature Algorithm: sha256WithRSAEncryption
74:1e:7a:e2:43:e2:a9:28:1f:ef:b5:6d:90:16:f0:9a:2c:7b:
95:8b:31:26:db:ac:99:18:70:95:d5:82:95:9d:0a:93:4b:6a:
91:34:51:8b:5c:3b:80:c2:a9:64:5e:93:96:b2:a3:ec:49:96:
68:7d:db:dd:01:ca:15:ea:35:3f:24:9e:f9:56:39:4f:88:eb:
6d:44:98:f2:b9:49:a5:e7:8d:60:d0:c6:a1:40:37:9e:0b:e7:
af:b7:bd:e1:4d:d4:00:58:1d:df:f1:70:ff:6b:d9:12:48:42:
85:f3:4f:61:48:24:0e:7c:17:bb:8c:48:79:cd:25:44:c6:b0:
9f:2c:ec:66:cb:8c:12:3b:0b:57:82:cb:0d:b2:58:c2:2e:6c:
65:65:0d:9f:f4:34:65:fb:bc:f0:b9:44:75:6c:a1:42:42:a4:
00:c7:1e:0a:c3:c4:21:c6:15:8e:36:f2:ea:08:f5:98:52:4f:
34:c2:56:e7:07:45:db:af:1c:af:e5:61:38:0d:06:9f:58:25:
6f:29:4b:7a:18:8d:ca:1b:1f:f1:ff:d7:c2:cd:7c:50:7e:0a:
01:da:f6:e2:54:bf:a0:82:f8:38:50:ae:9e:8e:36:81:a1:d0:
4e:bb:52:22:37:3f:45:c6:05:09:16:b8:74:51:52:06:17:b1:
be:ed:77:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:54:19 2025 by rpki-client