Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5IKZWNgAyhrebhPKeygLIpzmYC4.cer
File: 5IKZWNgAyhrebhPKeygLIpzmYC4.cer (raw, json)
Hash identifier: h6BW08VlScsxpDVfTaIiZX9l8jULDpXFx8utDpAGqig=
Subject key identifier: E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019424448917019D556CF524953C70B31091
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 23:47:38 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 208756
IP: 185.233.112.0/22
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:24:44:89:17:01:9d:55:6c:f5:24:95:3c:70:b3:10:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 23:47:38 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e4829958d800ca1ade6e13ca7b280b229ce6602e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:89:db:e9:40:87:61:f2:bc:9a:f0:e6:c3:df:
9d:38:87:f1:9e:2d:ec:3d:0f:bc:a8:75:ee:72:57:
9f:2b:a0:1d:49:3b:83:4c:a9:0c:94:e6:e9:db:a4:
58:60:e5:3d:8e:02:85:2e:34:e1:96:0e:10:38:86:
2c:a3:f1:90:7e:96:13:b1:0d:c0:99:08:91:e3:ca:
a4:d9:58:43:2a:87:3b:ce:93:46:82:02:41:5b:8c:
fd:69:18:7e:7f:1d:74:cd:db:75:b7:f4:06:7e:33:
7a:af:e4:87:34:c6:a0:e3:95:a5:05:9c:1b:6f:f6:
0a:46:20:6a:94:b9:d6:92:eb:b9:da:8c:4f:4a:ce:
16:61:7d:6f:22:cc:d3:de:31:16:a0:13:af:ab:24:
18:6a:b5:de:da:1a:0b:93:7e:fd:a5:20:d5:f7:e3:
07:9a:f8:b5:5a:b3:93:10:7d:2d:d9:cd:02:f4:a4:
bf:f5:d8:7f:67:a4:0a:5b:dc:f7:21:07:ae:82:50:
29:74:42:4d:1b:5c:c5:8b:d9:73:38:ec:cf:61:4d:
78:48:03:58:f6:4a:d9:d9:f5:cf:32:7d:a4:2f:72:
1b:99:18:4c:9e:1b:48:c5:c3:98:1e:a1:23:8f:58:
da:54:1b:17:74:6f:3f:1b:c3:73:29:d3:07:ed:46:
05:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:82:99:58:D8:00:CA:1A:DE:6E:13:CA:7B:28:0B:22:9C:E6:60:2E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/73af7c-5647-42d7-aa1d-1d5bc001a1de/1/5IKZWNgAyhrebhPKeygLIpzmYC4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.233.112.0/22
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
208756
Signature Algorithm: sha256WithRSAEncryption
8a:3d:f7:a4:01:28:49:71:d3:8d:af:d7:6d:a6:ff:4f:d6:d1:
54:21:a2:f7:0f:59:f5:b4:b0:c9:1f:50:6a:ed:61:a7:cd:67:
b4:5d:da:e8:11:05:be:b5:57:84:0d:23:af:46:0a:7d:ec:f0:
8e:66:95:ed:58:f2:a0:bd:55:91:77:dc:e4:04:82:95:24:64:
b6:3e:0c:47:36:ca:ce:95:e6:b6:ea:da:2e:61:5f:73:ca:0a:
65:50:bf:a0:5f:43:9d:28:14:2a:73:27:ce:8b:bb:64:20:d3:
d7:b6:53:22:e0:be:06:d3:36:fe:3d:50:a5:7f:46:c8:f4:ab:
91:71:fe:e1:e5:c8:93:d9:37:e5:00:4a:15:c0:49:30:a6:6b:
16:65:61:ee:16:e5:17:c6:6f:45:4e:09:02:06:c9:17:c6:c0:
0d:3d:a4:34:8c:bc:5e:10:0b:01:33:24:d6:f4:f9:e1:e5:c2:
b4:7d:70:d9:e9:41:28:d3:50:0c:a8:bf:b0:36:93:9b:1b:09:
eb:63:a6:8a:fc:5d:92:82:a7:79:91:65:3f:23:b0:64:55:b3:
45:ec:32:00:ce:1b:c7:d6:1f:1e:6a:7e:df:73:e3:b4:2c:68:
1e:37:b2:eb:1d:70:f6:33:2a:00:0f:9a:a6:08:95:d2:cb:6c:
6a:7d:64:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:21:00 2025 by rpki-client