Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer
File: 4tF62mQ5KIwpcDz3Be9kr7OCCtk.cer (raw, json)
Hash identifier: B6fXP8adDjsSf10x3FnMtksBsKr02kTMyEEwWHWzm2Y=
Subject key identifier: E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 01942143E677C51206AAB01A65EB63900F8C
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 09:48:05 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 201614
IP: 185.69.212.0/22
IP: 2a05:2540::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:43:e6:77:c5:12:06:aa:b0:1a:65:eb:63:90:0f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 09:48:05 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e2d17ada6439288c29703cf705ef64afb3820ad9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:29:d1:94:6b:10:73:c7:40:f2:98:38:a8:1b:
44:70:30:47:db:2e:b7:2c:14:36:21:18:2e:47:ec:
71:f1:b9:e6:f2:2e:5d:77:9c:e7:4b:61:bd:59:2b:
61:81:60:fc:d9:09:32:d4:69:e8:75:49:49:60:ac:
8a:33:8c:f1:7b:28:fc:52:22:fe:89:3a:64:58:e0:
a6:34:ff:fa:2d:c6:d6:14:87:a5:5e:08:63:01:98:
13:16:5a:32:e9:e4:ee:7e:9f:f0:e5:c0:b7:31:1c:
50:21:4d:fb:6a:ed:43:0e:01:88:bf:89:5f:85:e3:
32:58:a1:6f:5f:ab:b0:77:05:d1:74:63:9d:01:37:
49:28:72:cf:98:61:93:ff:22:5f:61:7e:cb:1e:63:
23:f5:70:aa:41:44:52:9e:98:38:6a:36:66:8d:42:
80:f2:be:d4:cd:7f:2b:af:43:95:5f:05:b8:9a:2f:
a6:68:bf:bd:4b:ba:59:c1:1c:34:a4:20:7b:f2:b4:
fa:fa:21:c7:c8:d1:8b:99:81:19:37:81:fb:82:1c:
21:7d:fc:7f:84:be:ab:c0:26:80:43:f9:20:c9:53:
31:5a:4b:ae:60:7e:e8:6c:0a:ba:00:81:8b:67:07:
bd:79:b3:a2:66:84:ed:ff:f1:3e:f8:dd:e6:a2:aa:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:D1:7A:DA:64:39:28:8C:29:70:3C:F7:05:EF:64:AF:B3:82:0A:D9
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/f12ba1-d826-4662-bed9-c997b87b4b5f/1/4tF62mQ5KIwpcDz3Be9kr7OCCtk.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.69.212.0/22
IPv6:
2a05:2540::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
201614
Signature Algorithm: sha256WithRSAEncryption
3e:e2:37:b6:79:86:93:93:c0:a3:c0:31:e5:2e:d6:a0:4a:4c:
99:f5:e4:33:05:27:05:d8:ba:e4:03:38:47:14:b6:70:2d:64:
53:75:3c:80:58:14:49:f5:67:da:74:3f:51:2b:28:55:02:22:
ce:78:7e:46:ed:82:03:8e:e7:7d:f7:6b:46:ba:d7:67:40:3d:
5d:72:81:f1:cf:ea:31:03:c5:e3:72:c7:d7:29:f1:7c:12:d9:
32:59:9e:13:d1:cd:93:2d:3e:b3:1d:ea:e9:41:2b:29:a1:96:
5b:08:18:9d:74:98:55:de:13:a3:ba:e2:d4:86:46:1b:77:20:
85:00:40:67:04:8a:32:9a:68:7e:93:97:80:1b:5f:32:af:b1:
db:37:24:92:d3:ed:a5:6b:c6:99:6a:63:7f:5f:12:73:d4:20:
b2:57:b9:3d:d5:a4:bc:f9:1b:43:20:46:c8:d5:31:b4:2a:5d:
bb:8d:dc:41:61:9e:95:2a:61:c1:f7:85:25:6e:74:e6:2a:11:
e0:a7:eb:26:43:16:b8:bc:9a:93:59:d1:e5:e3:9b:2f:22:01:
4b:13:79:b2:74:b8:47:80:30:2a:30:80:2c:e3:fb:36:fb:db:
2d:7c:03:39:9f:c0:55:98:5a:a8:b1:c8:ac:3e:84:b4:52:f4:
12:f6:64:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:44:43 2025 by rpki-client