Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer
File: 5Xcx6oV7kDqkCo5f2NiERlBbUjM.cer (raw, json)
Hash identifier: oA8YenV9+5bfnL/sBXYPsm/ub/rSQv89jeNkJzBr+oI=
Subject key identifier: E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019420D5C3C126CC0512845C588BD097E85A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 07:47:47 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 1890
IP: 193.67.0.0/16
IP: 193.78.0.0/15
IP: 194.178.0.0/16
IP: 194.229.0.0/16
IP: 194.247.96.0/19
IP: 195.108.0.0/15
IP: 195.193.0.0/16
IP: 212.136.0.0/16
IP: 212.153.0.0/16
IP: 212.206.0.0/16
IP: 213.53.0.0/16
IP: 2a02:2aa8::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:20:d5:c3:c1:26:cc:05:12:84:5c:58:8b:d0:97:e8:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 07:47:47 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e57731ea857b903aa40a8e5fd8d88446505b5233
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:5f:c9:d7:ea:dd:a0:e0:b6:d1:57:71:20:66:
51:34:97:8c:64:82:62:9f:6d:bf:f3:95:0d:10:bc:
57:5e:da:98:99:7b:80:73:5e:3b:7c:d5:50:76:79:
ab:96:8b:17:97:38:a3:9f:a5:81:63:2c:10:72:6b:
e2:cd:74:e7:79:b7:1e:0c:19:a7:98:57:8a:21:45:
1f:b8:7c:1c:59:1c:13:ff:0d:24:5b:e5:00:61:53:
d6:75:8e:2d:48:4e:7c:96:19:20:ad:f4:0a:34:19:
72:c9:97:81:e8:4f:e0:af:4c:19:ae:d0:fe:ea:5e:
64:ce:8b:24:a1:bf:31:31:77:2e:fe:8c:92:e5:19:
bc:a5:e6:e7:b3:7e:bd:cb:8c:2c:11:68:d8:c9:bd:
b7:55:f9:e1:13:f1:0a:62:5f:d1:7d:79:4e:63:40:
c6:32:92:36:74:9f:46:3e:b7:26:52:72:b8:01:f9:
9b:34:ad:e4:43:05:38:44:8d:59:dd:eb:a3:4e:de:
ca:bb:d1:d2:c0:b3:bd:0e:fc:22:0d:da:db:76:0b:
5b:56:11:bd:c6:6a:5d:7f:0a:4e:ca:1e:10:f4:b3:
bd:ed:f7:24:1d:54:b8:7e:10:4e:e4:62:e3:ab:77:
97:f8:0b:0a:ad:bc:ad:1d:2c:67:89:bb:70:47:e2:
7c:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:77:31:EA:85:7B:90:3A:A4:0A:8E:5F:D8:D8:84:46:50:5B:52:33
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/afbb62-0098-42b3-81ae-f0bb2e15f6d0/1/5Xcx6oV7kDqkCo5f2NiERlBbUjM.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.67.0.0/16
193.78.0.0/15
194.178.0.0/16
194.229.0.0/16
194.247.96.0/19
195.108.0.0/15
195.193.0.0/16
212.136.0.0/16
212.153.0.0/16
212.206.0.0/16
213.53.0.0/16
IPv6:
2a02:2aa8::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
1890
Signature Algorithm: sha256WithRSAEncryption
12:38:de:c1:63:5d:04:5f:ff:a3:9f:07:fa:e9:b0:b1:61:d2:
76:f4:5c:9d:24:66:02:83:ac:3a:8b:37:50:23:ed:5b:56:06:
25:4e:17:20:8d:7b:c2:d4:7a:46:26:e2:0a:d1:09:f9:50:bb:
a1:ba:e9:07:cf:90:40:74:55:5e:ab:43:3d:db:96:86:63:6b:
26:ed:93:d4:8a:1c:76:f3:62:de:62:ee:e1:8f:8d:72:fb:39:
d9:76:d4:5b:e3:0d:95:da:d3:94:25:5a:4a:1c:31:83:47:d3:
a9:d3:a1:ed:23:67:66:0c:2f:e0:2a:80:7d:b8:bb:eb:ee:f1:
8d:19:c7:bb:ec:9a:7c:a1:e3:e1:53:e1:f7:f4:76:38:fa:f8:
73:7a:0b:ba:c1:a8:f4:d7:93:57:3d:f0:3a:4d:d7:24:e2:b7:
4f:09:2d:79:88:2b:c6:1c:cd:58:ac:25:ea:d3:f9:d4:ff:39:
45:d6:44:7d:e5:7a:14:75:91:3f:1b:d1:46:8a:fc:03:dc:f0:
47:1c:ea:91:84:a8:fd:46:90:26:8e:32:20:3e:18:d6:7f:3e:
0b:32:75:71:4a:ff:40:29:c0:7f:08:42:ba:53:ea:b5:85:02:
21:93:1e:20:4c:5a:b9:77:03:25:75:ff:17:71:53:e3:c4:42:
7e:bf:cf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 16:22:46 2025 by rpki-client