Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4fR8EaOjyuBqGShgqWxQU-wEtdw.cer
File: 4fR8EaOjyuBqGShgqWxQU-wEtdw.cer (raw, json)
Hash identifier: D2AiEWfyThrU8XONpySMUoUid8ZzDjq4MPvH9itc6gs=
Subject key identifier: E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019426D9D83C1270621FAC2A3C2857F3585B
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Thu 02 Jan 2025 11:49:58 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 207544
IP: 212.6.61.0/24
IP: 2a0b:6c0::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:26:d9:d8:3c:12:70:62:1f:ac:2a:3c:28:57:f3:58:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 2 11:49:58 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e1f47c11a3a3cae06a192860a96c5053ec04b5dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:2b:0e:21:6c:7f:9e:9f:10:22:5a:bf:9d:26:
f7:35:69:d2:09:04:64:ce:59:ff:c0:fc:5e:fb:45:
65:fe:06:25:0c:fd:fa:95:90:47:39:8b:0e:06:5e:
17:c3:4d:72:4b:4d:b8:00:b6:ea:5e:af:2b:26:df:
98:64:35:88:97:a1:22:98:fd:50:ce:d8:ff:a1:57:
ac:e4:48:17:b2:86:60:6e:86:dd:93:88:fd:ab:bd:
db:7f:0c:9e:50:df:3a:7d:ad:b4:db:b0:7e:a8:01:
e0:b0:cf:49:8d:b8:bd:49:38:1f:11:a6:8f:37:9b:
d9:36:09:11:b2:84:8d:c7:f1:13:29:36:48:a7:84:
4c:64:18:85:28:4f:f1:99:bb:f4:02:a6:ee:f8:a3:
9a:10:a7:75:3b:33:f8:e4:63:95:27:a9:86:a6:89:
76:ef:93:ff:88:69:57:73:8c:54:11:56:a6:7b:f2:
91:7e:7c:75:1b:02:9b:c0:ee:7f:fd:f2:4a:9b:63:
7a:6e:59:17:43:2e:e6:65:e0:73:50:e4:f4:50:30:
d7:f2:80:c2:72:9b:bd:4a:62:91:40:93:08:14:d1:
73:66:01:f7:06:50:40:c6:24:01:4b:d5:e5:29:34:
43:02:94:a8:69:e8:05:0f:c4:67:74:93:5a:0c:32:
1e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F4:7C:11:A3:A3:CA:E0:6A:19:28:60:A9:6C:50:53:EC:04:B5:DC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/908070-fd94-4a75-9872-31c733197073/1/4fR8EaOjyuBqGShgqWxQU-wEtdw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.6.61.0/24
IPv6:
2a0b:6c0::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
207544
Signature Algorithm: sha256WithRSAEncryption
60:23:3e:ac:bb:f0:b5:df:41:bb:b4:03:92:1a:f8:e7:99:55:
53:5e:ba:16:fb:db:0e:34:c8:8c:22:46:5f:8c:b7:79:0d:70:
3e:79:b5:77:d0:c9:bd:2c:6b:ba:d4:5c:9d:7f:d6:45:ec:d2:
af:e2:8c:6e:23:02:18:cc:ce:aa:0a:1e:80:92:0e:bc:11:59:
67:83:24:05:05:56:3f:66:8d:a3:07:1d:33:6d:02:f1:e7:1e:
54:17:1b:90:66:93:8f:bb:ff:ab:e2:de:c3:af:fc:0d:11:ee:
cd:6d:d9:3c:2c:d7:77:69:05:41:0a:ce:20:6f:09:3f:16:10:
60:a3:36:a8:e3:e9:89:e9:8c:56:93:ad:3e:ac:2a:f8:09:4b:
6d:bb:3a:21:5f:7f:34:e0:8b:dc:95:a8:99:06:01:1d:c1:d1:
42:45:14:fa:1b:df:81:ed:50:53:53:48:18:ce:1c:36:f2:df:
8a:d1:c4:f8:5a:d8:59:30:fa:56:4f:06:67:ae:61:a3:e7:65:
bb:5f:8b:ae:36:30:62:6e:99:5e:78:49:d5:4a:4b:65:be:3c:
9e:d6:6e:f6:93:72:19:11:42:3d:bc:9c:2e:db:cf:44:69:21:
90:17:57:24:46:39:cd:59:a5:db:a6:72:bd:f7:91:61:20:f1:
b1:6e:05:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:53:48 2025 by rpki-client