Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1dWXuXOtoQUvZbPqHeHkguI_PSo.cer
File: 1dWXuXOtoQUvZbPqHeHkguI_PSo.cer (raw, json)
Hash identifier: bZGACb58+Kipq7jSvP/y7SszPzEF3VfsHHsNaWJKb4A=
Subject key identifier: D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143C33FE3FA0E5087BD1A69949CE15A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:47:56 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 2047
IP: 193.43.152.0 -- 193.43.157.255
IP: 193.58.155.0/24
IP: 193.228.103.0/24
IP: 194.26.26.0/24
IP: 194.147.45.0/24
IP: 2a04:c440::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:c3:3f:e3:fa:0e:50:87:bd:1a:69:94:9c:e1:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:47:56 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d5d597b973ada1052f65b3ea1de1e482e23f3d2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:58:b5:88:f9:78:09:a2:9f:48:e4:ad:8b:56:
32:fc:5d:35:52:51:66:cb:2f:e6:c5:92:95:15:ac:
73:b4:e3:52:92:01:ea:b9:20:aa:05:1a:72:3b:a1:
41:5d:b1:c0:38:fd:75:02:cb:d1:4c:e0:81:ef:fb:
a2:d3:da:af:92:a8:74:5a:a4:e1:f2:e0:48:61:ca:
ca:fb:19:59:7f:d0:e9:1e:6e:e0:9d:73:0c:27:21:
3b:a1:55:45:7e:48:fe:f6:ac:e9:12:c4:84:14:6b:
e6:db:f2:0d:b2:fe:18:2d:1a:fd:81:23:25:61:fe:
74:e7:73:4a:56:8f:42:95:92:5c:77:9c:44:27:26:
2f:2c:21:33:77:52:8c:84:ed:cd:ba:58:f9:36:ba:
9e:71:2c:3e:5f:37:f4:9b:ec:2d:86:4b:10:d4:6b:
58:f3:a8:22:4e:38:8a:7b:f4:af:d8:b3:f0:3b:77:
c8:e3:11:1a:e7:4f:0c:28:27:8b:85:a0:40:87:2e:
5c:d4:d4:19:65:da:d3:c7:1e:f3:a2:b1:44:4a:51:
42:b8:2b:27:82:88:51:88:a9:ff:88:b6:be:86:71:
8e:8a:87:1f:6d:fb:c0:4c:6f:90:d3:6d:30:46:f9:
cf:24:3b:67:22:9d:30:d8:e1:ca:90:fe:1f:dc:9c:
5b:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:D5:97:B9:73:AD:A1:05:2F:65:B3:EA:1D:E1:E4:82:E2:3F:3D:2A
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/1347f3-6c58-46ce-9952-f258f7d50d75/1/1dWXuXOtoQUvZbPqHeHkguI_PSo.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.43.152.0-193.43.157.255
193.58.155.0/24
193.228.103.0/24
194.26.26.0/24
194.147.45.0/24
IPv6:
2a04:c440::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
2047
Signature Algorithm: sha256WithRSAEncryption
57:ad:3f:59:7b:e9:07:74:80:23:1a:94:4f:5f:fc:75:d1:a1:
5f:52:35:16:b1:67:7d:db:a6:7a:d9:1e:e1:fe:15:c8:32:72:
10:c3:4c:2c:c4:7f:85:61:7d:68:7a:aa:bb:84:ee:9c:de:4e:
05:60:99:f5:d9:7b:30:ed:b0:86:c8:a4:32:14:63:12:09:e6:
9c:70:5d:28:62:4c:3e:41:6f:4f:e7:d4:3d:3e:76:f8:91:90:
7e:a2:3d:fa:33:92:16:e7:c4:5d:cd:b2:14:1e:6a:23:3a:87:
13:bd:a3:09:9b:98:3c:7f:93:fd:87:19:ba:2a:af:74:76:7e:
36:ff:1b:f3:b3:fd:ca:c6:d8:68:19:5c:a3:8b:ca:01:d6:ed:
af:00:87:8c:6b:91:96:20:d6:fd:d8:6c:cd:6b:e3:1a:00:58:
47:a3:6c:c5:32:36:da:db:bd:62:d9:36:90:10:57:78:88:24:
48:7a:5c:1d:64:5c:03:44:e0:9e:74:a6:36:85:df:64:b5:b4:
47:6d:75:cd:5f:54:e3:a9:a8:9c:81:35:52:c0:5e:fc:b0:68:
70:d5:ce:74:bc:55:18:64:fb:02:4b:55:bc:e1:62:34:67:1c:
a8:9d:f2:0f:13:1f:fe:e7:87:9f:ce:fb:a0:f0:83:da:ab:dd:
ee:a2:c1:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:31:54 2025 by rpki-client