Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1IW26difsBA2mXHtiIVyBZhdSRg.cer
File: 1IW26difsBA2mXHtiIVyBZhdSRg.cer (raw, json)
Hash identifier: Fbb7IxIwUJgxdZart6hl2YipniswFPPBDSx2IjXOJo8=
Subject key identifier: D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194258F5DDE1910729CACB22AFA8D6336EF
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 05:49:00 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208725
IP: 45.87.76.0/22
IP: 2a0e:f780::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:8f:5d:de:19:10:72:9c:ac:b2:2a:fa:8d:63:36:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 05:49:00 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d485b6e9d89fb010369971ed88857205985d4918
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:a7:0f:75:a2:86:c8:a1:76:a7:a0:08:25:49:
9a:6c:30:95:53:f8:02:93:f9:ec:c3:b4:95:2a:d8:
b8:e5:5a:89:b2:94:c9:6b:22:b0:f6:5a:0d:8d:a4:
8c:ec:e1:0f:6a:83:74:7a:7f:94:16:3a:fb:e6:24:
d2:79:18:43:1d:d8:90:ac:ce:18:25:f4:5e:1c:7b:
48:8a:46:bd:75:42:c7:26:24:e7:c6:b6:ac:50:55:
da:67:9c:18:5e:fa:80:e2:ee:0e:c7:ba:2f:5a:ae:
11:80:60:26:c7:6d:0d:3a:89:2c:6a:18:a9:57:65:
c1:49:13:a0:ce:ca:1e:61:a2:f9:88:db:e1:71:0a:
e5:73:3f:03:c0:00:52:ca:35:8f:6f:de:f7:7d:22:
52:4d:98:58:72:0d:3d:64:f2:6b:53:47:85:eb:24:
0b:ed:90:f9:c8:b9:ff:15:68:db:28:2d:02:ce:d1:
be:af:1d:9b:e2:cb:2c:4d:cb:13:1f:21:7b:3b:58:
f3:7a:4b:47:61:45:f2:38:fb:40:03:da:f2:76:8f:
c9:09:82:ad:a3:24:5f:d9:f1:c7:cf:a2:23:d9:ea:
12:58:16:b3:51:ab:a1:d8:ca:51:ad:e9:8a:1d:41:
44:1e:96:50:d4:91:67:43:98:11:23:1f:cc:ac:b5:
6b:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:85:B6:E9:D8:9F:B0:10:36:99:71:ED:88:85:72:05:98:5D:49:18
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/858910-c501-459c-a313-7ac680ed5dd7/1/1IW26difsBA2mXHtiIVyBZhdSRg.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.76.0/22
IPv6:
2a0e:f780::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208725
Signature Algorithm: sha256WithRSAEncryption
a8:6d:c7:25:47:a8:22:c4:be:e3:4d:1c:eb:b3:d8:4a:b0:a5:
bd:85:38:c8:06:ab:fb:0e:2c:21:a0:cb:10:09:02:c1:37:6c:
f2:8a:c0:f6:ed:b7:e8:c3:37:2e:a1:da:b5:b4:fc:31:b4:4a:
bf:d9:87:0a:bc:af:ab:67:89:71:68:5c:1f:09:bb:58:d8:69:
1b:c1:3f:97:a7:c5:52:26:f3:c8:10:39:09:e1:68:69:2d:d3:
e6:00:c9:b1:92:50:20:39:af:d5:e4:31:a0:b3:b9:51:a5:2d:
a8:2f:35:06:c4:85:b7:91:ae:4d:6c:22:d2:41:a3:f6:2f:76:
7e:7e:73:35:34:d4:6b:5b:d4:02:2d:e5:6f:ad:bb:8a:6f:9a:
6a:0e:ac:35:f5:0d:31:9d:b3:c0:89:62:b0:4d:14:ad:2b:dc:
42:08:d9:bd:8e:4d:12:60:ad:ce:b3:49:e3:3c:0a:0c:c8:5a:
04:fe:47:1f:fe:22:ed:3b:47:22:14:be:ff:b9:24:12:81:34:
02:83:e7:68:ff:da:80:7a:d9:7f:81:15:c4:2c:96:9e:3e:53:
c7:6d:e2:ba:41:2c:56:87:73:d5:be:35:af:e4:22:83:69:89:
5c:1c:4c:3d:8f:0e:32:82:a4:b5:f6:a9:aa:4b:70:e1:7a:79:
01:61:5c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:55:59 2025 by rpki-client