Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2gszzdt5m3vPXT3OAE_bqMPoZP8.cer
File: 2gszzdt5m3vPXT3OAE_bqMPoZP8.cer (raw, json)
Hash identifier: b/9mrSmj5yE6YUIPXt8opC4bLKh+XfTsnDg0C0ftuZs=
Subject key identifier: DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019422FB6D685F2A90589267A8A1B6998B5F
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 17:48:10 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 25176
IP: 80.88.96.0/19
IP: 81.8.128.0/17
IP: 85.194.128.0/18
IP: 2a01:4040::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:fb:6d:68:5f:2a:90:58:92:67:a8:a1:b6:99:8b:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 17:48:10 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=da0b33cddb799b7bcf5d3dce004fdba8c3e864ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:96:9c:cd:40:8f:52:da:b5:79:6f:62:ca:5d:
5c:bc:96:0b:ef:2b:05:a3:53:2a:5b:47:b8:2e:aa:
48:6b:af:fb:3f:78:52:52:5e:45:de:75:07:99:b7:
d9:42:46:ec:97:a4:04:ea:1a:eb:ee:78:86:c8:78:
37:a4:83:ac:3d:aa:c7:85:93:00:8c:28:a2:21:3b:
64:87:98:b5:bc:6b:3d:df:db:2e:32:67:6d:ca:95:
15:ab:6b:e3:f9:53:f3:37:db:ea:38:b3:33:69:ea:
0a:51:f4:f6:34:07:cb:a3:d9:81:22:a3:1f:12:60:
04:87:1f:d7:2f:d6:c4:71:d6:18:2c:ec:85:5e:ad:
9d:cd:52:89:fa:0a:97:99:48:25:2a:4e:66:75:c1:
c6:ed:b8:dd:f7:63:fb:16:91:fd:d4:2b:68:b9:e2:
1c:a3:7a:b2:23:49:1b:b6:d2:8a:36:f9:62:a0:2d:
16:ac:a8:4d:83:84:71:ec:d0:2a:0b:49:86:d1:ec:
d3:d2:58:9a:c7:18:4f:62:f1:ff:89:d8:1c:32:d2:
3f:ff:5b:89:e0:7e:5a:3b:e1:48:98:75:92:12:9d:
ef:1a:47:6e:f6:29:dd:8c:6b:60:9d:59:a6:0c:21:
37:1e:d3:f6:86:e9:00:bc:08:91:e7:7b:37:c4:b9:
72:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:0B:33:CD:DB:79:9B:7B:CF:5D:3D:CE:00:4F:DB:A8:C3:E8:64:FF
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/032d8b-4881-46fa-b674-7733bd888e28/1/2gszzdt5m3vPXT3OAE_bqMPoZP8.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.88.96.0/19
81.8.128.0/17
85.194.128.0/18
IPv6:
2a01:4040::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
25176
Signature Algorithm: sha256WithRSAEncryption
83:64:f5:39:26:b0:c9:8d:95:8f:c9:c9:01:6f:87:2e:a2:fa:
8f:a9:a5:27:90:cf:0d:ce:09:ad:90:af:e0:a5:28:ea:9d:b2:
be:6d:cb:82:26:4a:54:10:c9:49:3f:05:c7:b6:71:00:34:7c:
b4:3c:db:f8:51:32:f0:b5:bc:9c:40:eb:9f:ea:64:e8:e7:11:
f3:a7:7a:79:26:28:66:2d:a4:22:32:93:95:75:b5:96:dc:ab:
d9:ec:dd:72:13:4f:42:9c:bb:bb:48:1e:d2:8b:94:3a:d9:11:
b5:9f:19:de:e4:7f:d3:97:5a:bf:1e:6e:17:1b:61:a2:85:57:
b4:7c:7e:4d:bb:8f:f9:e4:b3:81:45:ac:b4:d2:ad:cb:79:a3:
b5:14:a3:83:a6:a8:33:e4:ac:c0:7f:9c:ed:30:f3:c9:0c:f5:
ab:40:e1:7f:d5:b7:89:74:a0:ec:e8:ed:22:23:c8:77:58:b3:
bc:ec:b7:d4:85:c6:e5:d5:4b:6b:79:7b:1f:b0:d1:36:95:25:
8d:e2:71:b0:bf:aa:15:7e:d8:c8:fc:1a:46:0f:50:65:3f:e2:
00:c8:c5:7a:51:9c:5d:a2:91:f7:76:a3:2b:53:0b:41:75:a1:
eb:0e:a1:a2:00:0e:78:1b:26:83:03:e3:29:1c:03:3b:11:fd:
9c:0f:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:18:12 2025 by rpki-client