Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2SuKXtRqwwRtRQFHI6C5L6zypJs.cer
File: 2SuKXtRqwwRtRQFHI6C5L6zypJs.cer (raw, json)
Hash identifier: UBZSExmBi+h7VJ6b66vxne3fW28uOvdzDAWzPsyWQcI=
Subject key identifier: D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019421B1E2151DDA0836E83DF9ACCA915055
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 11:48:13 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 213098
IP: 185.222.20.0/24
IP: 188.72.42.0/23
IP: 193.47.189.0/24
IP: 194.34.11.0/24
IP: 195.62.88.0/24
IP: 2a0c:9c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:b1:e2:15:1d:da:08:36:e8:3d:f9:ac:ca:91:50:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 11:48:13 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=d92b8a5ed46ac3046d45014723a0b92facf2a49b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:11:a9:aa:6e:69:f5:9e:34:1c:77:fa:c3:48:
52:aa:de:4b:b5:b6:bb:30:85:33:ae:0e:9d:60:db:
0c:5c:a6:59:16:1c:6a:64:b1:8a:b5:2f:73:3f:67:
03:df:6c:0f:d5:4f:ea:82:a6:10:82:d9:cb:34:f1:
37:14:f6:6f:4a:7e:a5:46:1b:90:41:23:d3:1d:0e:
f2:5c:1d:ec:52:bd:f2:87:11:34:d7:ad:ab:ac:4b:
15:86:46:7b:8b:0b:7c:9a:f9:dc:89:15:3c:0c:98:
24:a8:a6:2a:9f:1d:4c:5c:f6:a8:b2:74:f2:ba:e4:
2c:31:4a:d1:31:70:e2:09:bb:1d:10:db:43:53:ba:
3e:8c:9c:d0:58:e6:42:56:70:ef:c9:e3:51:be:91:
ab:66:1a:5a:78:32:17:51:60:9d:12:6d:0f:f5:1f:
45:75:67:5e:a4:8a:69:bc:4e:ec:42:06:26:c2:f9:
5b:37:77:f6:25:81:84:f8:fb:e1:79:c4:02:2d:8a:
d3:85:46:0f:43:d1:c3:3d:90:ef:f9:e0:f4:c6:18:
af:61:14:0c:bf:d9:21:f5:b0:d6:15:d9:54:9b:93:
bc:9b:aa:08:73:2d:ef:3e:b4:bc:3f:4f:2c:76:78:
5b:92:f1:64:df:44:c2:10:3b:00:30:45:f7:5d:71:
5b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:2B:8A:5E:D4:6A:C3:04:6D:45:01:47:23:A0:B9:2F:AC:F2:A4:9B
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/699efa-94f7-4125-b62f-41569abc37cc/1/2SuKXtRqwwRtRQFHI6C5L6zypJs.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.222.20.0/24
188.72.42.0/23
193.47.189.0/24
194.34.11.0/24
195.62.88.0/24
IPv6:
2a0c:9c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
213098
Signature Algorithm: sha256WithRSAEncryption
25:cd:1f:90:11:23:ea:86:72:06:25:f6:69:68:fa:14:60:92:
39:46:dd:fc:b9:96:69:f0:8f:9d:6a:cf:63:e5:ca:3e:34:0c:
0b:db:2c:38:ae:70:31:3f:23:c0:a2:f1:74:12:92:e5:63:bc:
d4:ca:e8:4f:e9:90:90:f3:5a:0a:16:ae:4f:64:d6:1e:3b:fc:
e4:60:68:3f:3f:9a:0f:f3:f8:5d:bc:da:15:7c:de:ee:d1:b4:
ec:12:bf:23:b5:44:5d:f4:20:4b:bb:4d:38:c0:bd:5e:c7:18:
76:a0:32:13:0d:67:2e:d3:c5:22:2a:80:14:00:1e:d2:eb:1a:
80:94:e4:d0:dd:4d:8a:ba:5b:98:e9:8b:f9:6e:97:b9:64:3f:
ca:7d:5b:bf:68:2c:17:c4:6d:26:40:18:8c:2c:3e:20:e9:fd:
76:fa:46:d4:5a:eb:a2:ba:fd:8a:61:ed:8d:55:84:a4:68:6e:
fd:c0:b3:74:83:37:93:21:a5:e3:94:4e:60:8f:20:1a:0b:30:
b7:53:f4:4e:4b:80:8e:59:26:ea:93:07:b1:60:58:d0:80:1f:
7e:d6:21:51:20:68:3d:0f:95:53:f9:11:c9:dd:b1:40:fb:2d:
d5:54:6e:5c:9c:4a:96:2a:50:c8:51:4a:37:e3:84:1c:fc:80:
3e:72:98:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:12:54 2025 by rpki-client