Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer
File: 1wsHRZ4vEW-1qX8RuudcDbSRwZY.cer (raw, json)
Hash identifier: dXXvnL++f2xOx7e++OC9IFq3gxf8ke5uHfgR2VR/5k4=
Subject key identifier: D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B246F11808D193D8C72BCC8D9D69BD
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:39 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 204760
IP: 185.22.0.0/22
IP: 185.241.64.0/22
IP: 2a0c:9c80::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b2:46:f1:18:08:d1:93:d8:c7:2b:cc:8d:9d:69:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d70b07459e2f116fb5a97f11bae75c0db491c196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:c3:41:60:93:58:53:f9:78:26:1e:80:92:e1:
71:85:f6:73:6d:e3:f0:1d:4f:0a:57:61:e0:5c:f0:
6c:c7:d1:df:37:f0:45:dd:33:83:d5:f9:3f:39:b8:
b0:b4:30:03:d3:23:22:d7:27:d6:f0:c6:91:7e:05:
1a:81:58:ca:cb:51:77:f4:af:37:81:9c:2a:93:d4:
9c:83:9c:8e:e1:41:97:ba:f3:60:65:d5:11:4f:e3:
52:b2:1f:ab:7c:cd:e8:9f:01:93:a1:de:06:2d:6d:
69:51:1c:4c:40:3a:91:7c:bb:b4:07:6a:3b:2f:be:
2b:4a:98:a1:81:53:d6:b3:96:25:cf:b9:39:0e:9f:
59:b7:0a:7f:80:48:8c:aa:30:aa:55:dc:95:e8:12:
36:77:7b:79:5d:e8:38:f2:d8:41:53:31:1d:1b:de:
12:3a:29:eb:ad:4a:ca:b3:50:16:ed:16:e0:44:5a:
f6:dc:57:e6:7f:f0:00:d0:2a:63:51:c4:9b:1f:26:
ef:cd:1c:d1:f3:86:a4:7c:4b:96:d3:b4:a5:f3:2d:
10:e1:35:c1:23:87:44:e4:a6:6b:fa:45:57:51:b8:
a1:4d:64:ee:c4:29:a3:2c:7d:2e:e7:b5:e0:9a:62:
a8:e1:af:5d:e0:22:d8:d8:74:9f:e5:cf:f6:7c:33:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:0B:07:45:9E:2F:11:6F:B5:A9:7F:11:BA:E7:5C:0D:B4:91:C1:96
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/d06f5f-ad69-4885-8c71-aace70abc6a0/1/1wsHRZ4vEW-1qX8RuudcDbSRwZY.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.22.0.0/22
185.241.64.0/22
IPv6:
2a0c:9c80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
204760
Signature Algorithm: sha256WithRSAEncryption
69:81:88:e4:85:6c:fc:75:df:a0:a9:c2:25:6e:80:c6:79:0e:
b7:4e:8d:fb:68:f2:df:eb:94:93:04:6d:18:2f:ed:89:a4:bf:
5f:4b:6c:77:f8:5e:02:36:e3:9a:82:cc:72:ec:6e:4a:e9:0f:
75:79:4e:32:e3:59:a4:3d:de:98:a6:12:f7:80:95:fd:30:1d:
66:63:56:72:6e:f7:4e:71:ac:51:da:f0:b5:35:fd:60:46:e1:
cd:eb:8d:b2:b9:9f:25:e8:e6:cd:9e:59:b3:ba:11:fc:42:7f:
09:14:a7:bf:f5:65:d3:4a:fa:d6:93:ca:84:24:47:20:55:e9:
4f:2c:ca:e8:9d:ad:6b:53:06:f1:92:dd:63:2c:8e:7e:27:f9:
7b:aa:14:7d:42:16:09:6a:7f:db:5b:6c:1a:5a:dd:66:16:42:
90:bf:05:dd:50:1c:58:1b:ec:1b:80:ab:3d:c3:98:78:08:74:
50:4a:8c:33:0d:8e:cf:0e:ed:08:f9:66:4d:3d:6d:f3:27:66:
63:75:f8:5f:8d:c2:4c:ed:af:28:35:07:62:85:69:6d:8c:33:
8a:31:78:07:a5:bd:b7:40:92:84:d1:e1:4c:39:48:7e:81:28:
1a:07:9d:a1:9a:de:59:ec:be:a7:81:a8:7e:d7:71:0a:3a:61:
b5:be:17:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:58:01 2025 by rpki-client