Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5eaQaKix-3-geVuvm7OrhslORvw.cer
File: 5eaQaKix-3-geVuvm7OrhslORvw.cer (raw, json)
Hash identifier: BlkVlEC5tO7x/kOr0hbi/KGlkeY0zHg+JVE9Bg6/BaQ=
Subject key identifier: E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 0194221F90EEB7296D647242EBB6DB2F3158
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 13:48:01 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: AS: 15437
AS: 200043
IP: 31.3.160.0/19
IP: 62.220.64.0/19
IP: 109.238.112.0/20
IP: 185.63.168.0/22
IP: 185.98.8.0/22
IP: 185.104.24.0/22
IP: 185.213.4.0/22
IP: 2a01:ab00::/29
IP: 2a06:880::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:22:1f:90:ee:b7:29:6d:64:72:42:eb:b6:db:2f:31:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 13:48:01 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=e5e69068a8b1fb7fa0795baf9bb3ab86c94e46fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b9:ba:be:ef:92:6d:eb:74:01:ea:0f:5b:40:
d6:b5:5d:9a:54:69:01:b9:0d:bd:dd:df:59:cd:aa:
41:5f:0f:52:b1:d4:f4:9e:31:72:59:97:ca:a6:96:
db:e1:81:8e:56:4f:1f:9e:52:f8:20:0b:8f:45:d3:
db:ae:cb:0a:db:40:74:8a:65:6c:a0:c2:b4:2d:15:
f1:40:9a:8c:66:dc:04:9d:e6:73:e2:97:72:dd:c4:
6b:2e:83:e5:84:8f:3b:6c:85:b9:d4:e6:93:56:85:
a2:98:d0:db:61:d1:3d:62:e3:4e:b3:ed:b3:be:12:
35:bc:cf:e4:61:30:fa:ac:5e:4d:30:78:c0:fb:ae:
c5:31:3a:ce:fa:eb:b5:54:b3:f6:29:60:42:a2:a1:
55:4d:99:08:60:b3:8f:e3:a9:17:b6:d0:58:49:ce:
54:8e:4e:fc:16:7c:81:62:9c:7d:27:21:61:d3:8d:
d3:53:9f:ce:90:0f:40:d7:fc:8b:e4:88:8a:20:9c:
56:fa:1a:8f:4a:0c:bb:d4:2c:9e:bb:f0:fc:92:68:
0d:c6:51:de:66:28:5a:5e:3b:a3:20:c8:92:cc:46:
21:e2:8c:aa:9d:fd:fa:30:32:a0:4b:64:10:b6:61:
ab:c6:60:2a:3c:58:2b:8c:e8:fb:da:4d:a9:d5:de:
36:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:E6:90:68:A8:B1:FB:7F:A0:79:5B:AF:9B:B3:AB:86:C9:4E:46:FC
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/629f4d-3929-461e-a194-dd1028991ff3/1/5eaQaKix-3-geVuvm7OrhslORvw.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.3.160.0/19
62.220.64.0/19
109.238.112.0/20
185.63.168.0/22
185.98.8.0/22
185.104.24.0/22
185.213.4.0/22
IPv6:
2a01:ab00::/29
2a06:880::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
15437
200043
Signature Algorithm: sha256WithRSAEncryption
16:73:5a:6a:06:0e:1a:fe:ab:80:ce:49:72:98:f2:b0:01:ee:
b0:48:d4:5d:b4:9b:b4:1c:20:d3:56:5e:06:50:c9:25:d9:11:
19:2e:b8:f5:99:f9:98:6e:0c:5e:1f:d5:4c:ef:e2:65:35:bb:
ae:56:60:f9:96:4e:c8:0c:8f:f5:d2:46:83:81:b2:77:b3:66:
2c:2c:d2:25:d5:6f:99:4b:83:65:0f:57:f6:cb:18:64:7e:9a:
fa:57:cf:9e:80:65:86:34:4e:4d:f0:cc:da:7c:56:77:72:11:
47:89:8d:c8:cd:45:16:f3:34:8c:b4:5c:7f:83:29:f8:a9:59:
91:56:c0:63:f3:f4:5f:48:f4:ae:e1:17:0b:d3:7f:af:d6:ce:
be:5a:2e:94:ef:94:48:09:06:de:ce:b2:66:1a:ea:a3:f2:b2:
8d:dc:53:e2:5a:c7:85:ca:4e:66:a0:e5:7c:64:ef:30:b1:dd:
52:47:1d:33:ee:bd:3e:5b:55:e7:92:6e:ca:2a:0a:ab:fb:a9:
69:2b:34:90:67:c3:05:9d:6d:ed:39:a1:27:27:a5:fa:d9:ba:
a4:36:64:d3:7f:ee:cb:27:32:b6:bb:72:b8:6a:d3:de:07:fd:
b9:d7:46:80:fe:f9:5f:88:92:67:79:a5:a6:2e:04:4a:2a:0c:
ec:d9:64:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 23:07:44 2025 by rpki-client