Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31kIP69fArumaAmhoicuryboo3g.cer
File: 31kIP69fArumaAmhoicuryboo3g.cer (raw, json)
Hash identifier: BXvvDweV6OuWNLfbGpP+NZLRYBBY07bVTPd2koOh8c8=
Subject key identifier: DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194252226B597BFBECFB9258E3CF9FD5192
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 03:49:42 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 8554
IP: 82.97.0.0/18
IP: 185.52.32.0/22
IP: 193.41.72.0/22
IP: 195.234.46.0/24
IP: 2001:1b38::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:25:22:26:b5:97:bf:be:cf:b9:25:8e:3c:f9:fd:51:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 03:49:42 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=df59083faf5f02bba66809a1a2272eaf26e8a378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:68:42:e9:84:b4:df:a0:66:0e:21:c9:e3:fc:
69:9f:c4:b0:7c:b7:e3:41:78:f1:c1:15:f5:d5:99:
23:71:27:04:50:5a:2a:0c:35:d2:e3:89:3b:7b:be:
4a:0a:0d:b9:6e:9d:cf:90:89:c5:fd:6e:8f:be:05:
50:72:43:1a:1c:94:ce:99:f0:fa:5a:c2:16:0a:7b:
5b:7b:f1:b9:24:73:f2:e7:82:fa:85:1f:2b:01:ff:
0d:6e:b2:ba:cf:68:b5:fe:0c:54:05:45:40:2e:78:
c8:8f:b1:15:86:9a:77:cf:b8:9d:0a:08:88:b7:a8:
5d:7a:f7:b8:f8:77:43:c1:f2:46:f3:71:6f:2f:70:
80:2e:bb:03:54:63:23:e4:da:a4:40:ca:45:f0:19:
39:e0:9d:45:69:ed:75:5a:3d:78:91:11:45:2e:7b:
7c:6d:fa:e5:26:46:27:d9:18:25:94:48:9f:f8:c4:
88:e2:a1:a0:4a:81:5d:b4:e7:eb:9d:34:5e:b9:54:
12:6a:5c:8f:7c:e9:ca:ad:9b:6d:44:06:b8:7b:06:
d3:9a:3e:14:4d:4b:0c:5c:ba:da:b2:0f:f2:ad:4a:
00:a8:28:6b:94:4d:3c:14:8d:85:93:63:42:c4:e1:
09:ac:17:e1:a0:5d:70:ae:94:ab:15:c4:98:8e:70:
fa:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:59:08:3F:AF:5F:02:BB:A6:68:09:A1:A2:27:2E:AF:26:E8:A3:78
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/1d3ce5-c7ef-49ff-9d4e-596fdbb0edd9/1/31kIP69fArumaAmhoicuryboo3g.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.97.0.0/18
185.52.32.0/22
193.41.72.0/22
195.234.46.0/24
IPv6:
2001:1b38::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
8554
Signature Algorithm: sha256WithRSAEncryption
8f:3f:47:cd:17:c0:79:87:37:34:48:8a:1c:9d:4c:75:b7:b7:
66:cb:71:ca:a5:f4:c2:35:d0:6a:28:e2:ae:dd:c4:3e:ce:ff:
c9:3a:00:6b:98:21:a8:30:f6:26:92:47:b4:cc:cd:34:5c:15:
61:80:4f:f7:13:f9:85:2c:78:60:47:b3:3e:91:14:e9:d5:03:
d0:cb:ae:ce:3e:85:7e:40:80:4b:26:0b:92:6b:b2:5b:c1:66:
29:69:a9:f7:6a:8a:68:15:bb:ee:ca:71:b9:09:80:aa:0f:eb:
01:cf:e7:60:aa:ca:73:52:b4:d4:bd:de:0b:66:45:dc:67:50:
5a:29:9e:9a:34:ce:75:b6:aa:3d:e6:f7:73:7e:ea:75:13:49:
9b:ef:5e:7e:25:b2:f3:82:d6:fc:01:cf:84:3b:22:ae:b7:bd:
a4:1f:84:0e:a5:80:d7:38:5a:be:bb:c0:d1:23:e4:4a:3f:db:
a2:5f:2d:cd:a0:40:11:db:de:df:bd:05:e5:e3:a2:ac:c9:af:
7d:bf:65:b5:01:61:3d:c9:f7:db:7e:fa:6e:ab:10:77:20:8d:
bf:72:e0:4b:f4:90:39:64:63:87:a9:ba:d5:ea:b6:a2:94:78:
80:c4:57:c4:21:ae:f2:99:c0:0d:e7:36:60:e2:1b:8a:d5:1d:
ef:dd:70:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:24:45 2025 by rpki-client